University of Twente Student Theses

Login

A Look into the Scanned and Non-Scanned IPv4 Address Space

Kaaij, J. van der (2024) A Look into the Scanned and Non-Scanned IPv4 Address Space.

[img] PDF
2MB
Abstract:Internet-wide scans are common practice and usually give a lot of information about reachable hosts on the Internet. Applications for Internet-wide scanning vary from security-related to tracking progress on protocol adoption rates. Recently, these scans are executed on an almost daily basis for the entire IPv4 Internet address space. While a lot of information is gained from this for reachable IP addresses, little is known about the hosts that do not respond or a unreachable from the scanning server. Our research finds that, using the scan data from Censys, that at least one IP address was scanned from 96% of the assigned ASs (Autonomous Systems) and around 69% of the assigned BGP (Border Gateway Protocol) prefixes. Furthermore the most common usage type for BGP prefixes that are scanned are from ISPs or Data Centers and the most common usage type for non-scanned BGP prefixes is also from ISPs, followed by Mobile Internet Service Providers. When we look at where the most scanned and non-scanned prefixes are located, we can see that the United States is at the top, followed by Brazil. In percentage, 84% of BGP prefixes belonging to libraries are scanned, while only 44% of the BGP prefixes belonging to the military is scanned.
Item Type:Essay (Master)
Faculty:EEMCS: Electrical Engineering, Mathematics and Computer Science
Subject:54 computer science
Programme:Computer Science MSc (60300)
Link to this item:https://purl.utwente.nl/essays/103755
Export this item as:BibTeX
EndNote
HTML Citation
Reference Manager

 

Repository Staff Only: item control page