this post was submitted on 18 Jul 2026
189 points (99.0% liked)

Programming

27803 readers
514 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev

founded 3 years ago
MODERATORS
snowe@programming.dev
Ategon@programming.dev
UlrikHD@programming.dev
bugsmith@programming.dev
Spyro@programming.dev
189
Running ping for every IP address (infosec.pub)
submitted 4 days ago* (last edited 4 days ago) by sacred_font@infosec.pub to c/programming@programming.dev
54 comments fedilink hide all child comments
 

I pinged every IP address that wasn't reserved. The image is 8k by 8k and is re-encoded as an AVIF to be friendlier to mobile devices. Like every other survey done, it is using a Hilbert Curve to convert the linear address space to a contiguous 2d space. The hotter the colors (blue is coolest), the denser the ping responses were.

(If you are interested the full-resolution pyramidal-tiled TIFF can be downloaded and viewed in QuPath on desktop. I've also compressed the ping response data into its own format down to about 150 MB. PM me for a link)

Non-proxied image

Here is a 2006 survey to compare.

Some observations: Big Tech (USA) is in the top left. US government allocations, for the most part, did not respond to any pings. And maybe you didn't realize this before, but Multicast (Class D) & Class E consume a whopping 12% of the IPv4 range.

top 50 comments
sorted by: hot top controversial new old
[–] tal@lemmy.today 90 points 4 days ago (3 children)

every IP address

every IPv4 address

[–] GammaGames@beehaw.org 41 points 4 days ago (1 children)

ipv6 would look like a starless sky

[–] nymnympseudonym@piefed.social 17 points 4 days ago

IPv6: a dark image

[–] Glitchvid@lemmy.world 27 points 4 days ago (3 children)

They're working on the IPv6 part right now, just don't ask when it'll be done.

load more comments (3 replies)
[–] sacred_font@infosec.pub 29 points 4 days ago

I left details out to be less verbose.

[–] talkingpumpkin@lemmy.world 29 points 4 days ago (2 children)

Nice! Now do the same for ipv6 :p

Any way to determine/estimate if the black squares are unused blocks ("give them back!") or just not responding to pings?

[–] glitch1985@lemmy.world 7 points 4 days ago

No. Any proper firewall is going to act as if there nothing there.

[–] sacred_font@infosec.pub 2 points 4 days ago* (last edited 4 days ago)

This was a ping scan, so it wasn't probing any TCP/UDP ports (see shodan.io). I suppose you could use ICMP control messages (Destination Unreachable) to determine if something was unused, but that assumes the other side is being friendly.

[–] TheSlad@sh.itjust.works 26 points 4 days ago (1 children)

Hey, I can see my house from here!

[–] skankhunt42@lemmy.ca 7 points 4 days ago

I'm in this pic too!

[–] Marija_@programming.dev 1 points 2 days ago

The Hilbert curve visualization is surprisingly satisfying.

[–] herseycokguzelolacak@lemmy.ml 9 points 4 days ago (1 children)

How long did it take to ping the whole world?

[–] Buddahriffic@lemmy.world 3 points 4 days ago

Or more specifically, what is the sum of all latencies divided by the number of responses times the total numer of requests sent (to scale up for the ones that didn't reply, assuming their average latency would have been similar to the total average)?

[–] qaz@lemmy.world 4 points 4 days ago* (last edited 4 days ago)

It's interesting how certain companies and organizations have such large ranges, 16m IP's each for both that old printer company and a farmaceutical company is a lot. It really shows the history of the internet and how seemingly certain companies that adopted it first ended up with huge chunks of the available IPv4 space.

[–] mr_satan@lemmy.zip 6 points 4 days ago

It would be nice to have some overlay of the two images with a difference to see what changed.

[–] olenkoVD@lemmy.dbzer0.com 3 points 4 days ago

Exactly the same thing had been done in this very interesting video I had watched some time ago. Did you get the idea from there?

[–] melsaskca@lemmy.ca 4 points 4 days ago (5 children)

Forgive me if this is an ignorant question. How did you do the incremental address to address search? In my head I would start with "000.000.000.000" and then "000.000.000.001" and so on but that doesn't account for the "000.000.000.1" scenario, or any combination thereof.

[–] MagicShel@lemmy.zip 12 points 4 days ago (9 children)

Writing it out like 000 is just a convention. .1 is the same as .001. They are actually hex numbers from 0 to FF.

[–] atzanteol@sh.itjust.works 12 points 4 days ago (2 children)

They're not "actually hex". Hex is just a representation. Same as base 10.

[–] MagicShel@lemmy.zip 6 points 4 days ago* (last edited 4 days ago) (1 children)

What communicates what they need to know at the level they're at? I can get technical about octets and bounded decimals, or I can give a simple answer that puts those values into a familiar context.

[–] atzanteol@sh.itjust.works 3 points 4 days ago (1 children)

You think introducing hex was clarifying?

[–] MagicShel@lemmy.zip 8 points 4 days ago* (last edited 4 days ago) (1 children)

Yes I do.

https://lemmy.ca/comment/24351633

Feel free to explain to them how "it's all just a representation, man. Nothing means anything. It's just electrons moving around."

[–] atzanteol@sh.itjust.works 4 points 4 days ago (1 children)

I mean - they are "numbers". Numbers are not in hex or decimal. Saying "they're really hex numbers" is not just wrong it's kinda meaningless since ff == 255.

You've explained it badly.

[–] nebeker@programming.dev 2 points 3 days ago (1 children)

Lie-to-children. See also “perfect is the enemy of good.”

This was very hard for me to understand, particularly when the simple answer in school that was provided for the benefit of the rest of the class didn’t come with a deeper follow-up, but I now recognize the great value in meeting people where they are.

[–] atzanteol@sh.itjust.works 2 points 3 days ago

This wasn't a "lie to children" - that's a simplification. This was like explaining the Pythagorean theorem by introducing imaginary numbers.

Almost nobody ever uses hex to represent IP addresses ever. There is no reason to bring up hex. It complicates things rather than simplifies.

And to say "[t]hey are actually hex numbers from 0 to FF" is just misleading to the point of wrong. Numbers are not "hex" or "base 10" or "binary". They're numbers. We only represent them as hex or base10. They aren't "different numbers".

And in this case we almost always use base10. SO WHY ARE WE TALKING ABOUT HEX?

[–] Bazoogle@lemmy.world 5 points 4 days ago (1 children)

If anything, it's actually binary...

[–] MagicShel@lemmy.zip 5 points 4 days ago

It's all binary.

[–] melsaskca@lemmy.ca 4 points 4 days ago

Ahh...makes sense. Thanks.

load more comments (7 replies)
[–] poolcritter@pawb.social 6 points 4 days ago (1 children)

Essentially, IPv4 addresses[2] are just numbers from 1 to 2147483647, for example 3405804031. However, since address routing is often based on common binary prefix, more intuitive methods like 203.0.113.255 are used. This notation is just a length-4 list of integers from 0 to 255. To convert from an integer to a common IP address, you divide-with-remainder with a constant divisor of 256. For example, 3405804031 /% 256 = (13303921,256), 13303921 /% 256 = (51968,113), 51968 /% 256 = (203,0), and 203 /% 256 = (0,203).[1] Collecting all the remainders in reverse order, then joining them with periods, produces 203.0.113.255. (This notation is just for people to read; aside from parsing code, none of IPv4 uses this notation.) When you enter an IPv4 address, the opposite happens — an expression like ((203 * 256 + 0) * 256 + 113) * 256 + 255, which evaluates to 3405804031, is performed. These octets are just numbers — using 203.000.113.255 or 203.00.113.255 in place of 203.0.113.255 is merely a choice of how to write the address, as 203 * 256 + 0 = 203 * 256 + 000. mraow

[1]: this operation can be omitted; I include it for symmetry. [2]: though all of this holds true for IPv6, I really didn't feel like going through 128 bits of address

[–] melsaskca@lemmy.ca 1 points 3 days ago

Thanks! And thx to all.

[–] atzanteol@sh.itjust.works 3 points 4 days ago (1 children)

The "." are just separators. Each segment is a number from 0-255 (1 byte). So you hold three segments static (e.g. 10.10.10.x) and then increment the last segment from 0-255 (so 10.10.10.0 -> 10.10.10.255). Then the next segment increments (10.10.11.0 -> 10.10.11.255).

[–] melsaskca@lemmy.ca 1 points 3 days ago

Thanks to everyone here and this as well.

load more comments (2 replies)
[–] MonkderVierte@lemmy.zip 3 points 4 days ago (1 children)

Yeah, a link to the tiff would be great.

[–] nosuchanon@lemmy.world 2 points 4 days ago

https://youtu.be/GIKfEAF2Yhw

[–] lazynooblet@lazysoci.al 3 points 4 days ago (1 children)

Where is 100.64.0.0/10. Should be reserved

[–] sacred_font@infosec.pub 4 points 4 days ago

Unlabeled grey square at the bottom

load more comments
view more: next ›