What scanning strategy does Censys use to provide coverage over the IPv6 address space?
Hey John - welcome, and thanks for asking! The primary source for IPv6 addresses is from domain name resolution, and we find those domain names from TLS certificates as we ingest them. We also identify IPv6 addresses from HTTP redirects or domain name redirects when scanning.
Hi Morgan,
Do plans exist to expand IPv6 coverage for other ports and protocols?
Thanks,
John
Hey John, currently we prioritize services found on 443 and 80. It’s not on our roadmap currently to expand IPv6 port coverage but we’re open to entertaining those ideas if there’s enough customer demand!
Thanks for the information; with AWS charging for IPv4 along with others, there has been an increase in IPv6 traffic. I appreciate the clarification on how Censys discovers IPv6 data since scanning the entire address space is unfeasible, minus the UPnP and NTP alternatives to web traffic.
Reply
Sign up
Already have an account? Login
You need a Censys account in order to create a Censys Community account. When you click the button below, you will be redirected to login using your existing Censys credentials. If you do not already have a Censys Community account, you will be prompted to create one after logging into your Censys account.
Log in or register with Censys credentials
Log in to the Censys Community
You need a Censys account in order to create a Censys Community account. When you click the button below, you will be redirected to login using your existing Censys credentials. If you do not already have a Censys Community account, you will be prompted to create one after logging into your Censys account.
Log in or register with Censys credentials
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.