Programming

27738 readers

362 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Follow the programming.dev instance rules
Keep content related to programming in some way
If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev

founded 3 years ago

MODERATORS

snowe@programming.dev

Ategon@programming.dev

UlrikHD@programming.dev

bugsmith@programming.dev

Spyro@programming.dev

Running ping for every IP address (infosec.pub)

submitted 6 hours ago* (last edited 4 hours ago) by sacred_font@infosec.pub to c/programming@programming.dev

10 comments fedilink hide all child comments

I pinged every IP address that wasn't reserved. The image is 8k by 8k and is re-encoded as an AVIF to be friendlier to mobile devices. Like every other survey done, it is using a Hilbert Curve to convert the linear address space to a contiguous 2d space. The hotter the colors (blue is coolest), the denser the ping responses were.

(If you are interested I can provide the full-resolution pyramidal-tiled TIFF (about 1 GB) that requires ~3 GB of RAM to view. I've also compressed the ping response data into its own format down to about 150 MB. PM me for a link)

Non-proxied image

Here is a 2006 survey to compare.

Some observations: Big Tech (USA) is in the top left. US government allocations, for the most part, did not respond to any pings. And maybe you didn't realize this before, but Multicast (Class D) & Class E consume a whopping 12% of the IPv4 range.

top 10 comments

sorted by: hot top controversial new old

[–] lazynooblet@lazysoci.al 1 points 15 minutes ago

Where is 100.64.0.0/10. Should be reserved

[–] GraveyardOrbit@lemmy.zip 8 points 4 hours ago (1 children)

How long did it take to run the entire range?

[–] sacred_font@infosec.pub 10 points 4 hours ago* (last edited 4 hours ago) (1 children)

about a month, since I ran it at about 6000 addresses / sec checking distinct addresses 4 times (round robin) or 1500 finished / sec. This was the fastest I went to avoid silent UDP drops and to hopefully not annoy my VPS hoster too much.

[–] leo@sh.itjust.works 3 points 2 hours ago (2 children)

You might be interested in ZMap: With a 10gigE connection and either netmap or PF_RING, ZMap can scan the IPv4 address space in under 5 minutes.

[–] sacred_font@infosec.pub 1 points 16 minutes ago* (last edited 16 minutes ago)

Comparison is the thief of joy 🙃

Though if I push my scanner hard it could probably do 16k/sec on the single core and 1gig connection it is on. The problem is how reliably I could do 16k/sec over the network, since a good portion would be dropped even if the host's hardware could keep up.

I'd probably need access to enterprise-level equipment that could handle the routing load if I were to do it in 5 seconds lol, it's insane they managed to do that

[–] trackball_fetish@lemmy.wtf 1 points 41 minutes ago

Masscan was made for this as well ;)

[–] tal@lemmy.today 31 points 6 hours ago (2 children)

every IP address

every IPv4 address

[–] GammaGames@beehaw.org 16 points 6 hours ago (1 children)

ipv6 would look like a starless sky

[–] nymnympseudonym@piefed.social 3 points 6 hours ago

IPv6: a dark image

[–] sacred_font@infosec.pub 14 points 6 hours ago

I left details out to be less verbose.