Security researchers and enterprise defenders have many Internet-wide scanning tools at their disposal. Researchers at Cisco Talos have developed a way to scan for hosts with IPv6 addresses using the UPnP protocol.
Two researchers have developed an open source toolset called ipv666 that helps predict IPv6 addresses and find live hosts.