[ipv6hackers] Scanning for IPv6 addresses embedding TCP/UDP service ports

Fernando Gont fgont at si6networks.com
Tue Feb 26 23:19:54 CET 2013

On 02/26/2013 02:18 PM, James Cloos wrote:
> FG> Have you found the latter in the wild? i.e. do people actually convert
> FG> say (port) 80 to 0x50 , and embed *that* into the IPv6 address?
> I have seen NSs with ::35 and MXs with ::19.  I cannot remember any others,
> but may have.
> There was a discussion someplace (nanog?) about it a few months (years?)
> ago, including some jovial chiding directed at those of us who tend to
> use the decimal port notation in the v6 addresses.
> I've been tempted to use both (they're cheap; take a few), just for fun.
> But I wouldn't have written "and others [embed] the hex notation" if I
> hadn't witnessed it.

Great ;-) -- Thanks for the data!

I will update the toolkit, such that it not only probes the addresses
embedding the ports in decimal notation, but also probes the addresses
embedding the ports in hex notation.


Best regards,
Fernando Gont
SI6 Networks
e-mail: fgont at si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

More information about the Ipv6hackers mailing list