With the development of IPV6 network deployment, the security problem of IPV6 is becoming more and more serious. In order to fully understand the security loophole and risk of IPV6 space, detecting and scanning IPv6 addresses, especially server addresses, is a necessary step. Because IPV6 has greatly expanded the IPV4 address space, the traditional scanning method is no longer suitable, therefore, the IPV6 address data set is collected based on the passive traffic acquisition method, and the IPV6 address deployment rule is explored according to the data set, this paper studies the different characteristics of addresses caused by different address configurations, classifies and filters addresses, and analyzes the data of different types of addresses, and gives the deployment rules of different address configurations in the current education network, helps better scan for IPV6 addresses.