On the Accuracy of Country-Level IP Geolocation

Livadariu, Ioana; Dreibholz, Thomas; Al-Selwi, Anas Saeed; Bryhni, Haakon; Lysne, Olav; Bjornstad, S.; Elmokashfi, Ahmed

doi:10.1145/3404868.3406664

Cited by 19 publications

(11 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Figure 8 visualizes the top 10 countries with the most MPTCP-capable host densities on IPv4, arranged in decreasing fashion. We use the MaxMind database [30] for our analysis and only show country-level breakup since more fine-granular IP geolocation is not very accurate [31]- [33]. MPTCP hosts on port 80 and 443.…”

Section: Finding Interfering Middleboxesmentioning

confidence: 99%

From Single Lane to Highways: Analyzing the Adoption of Multipath TCP in the Internet

Aschenbrenner¹,

Shreedhar

Gasser³

et al. 2021

2021 IFIP Networking Conference (IFIP Networking)

View full text Add to dashboard Cite

Multipath TCP (MPTCP) extends traditional TCP to enable simultaneous use of multiple connection endpoints at the source and destination. MPTCP has been under active development since its standardization in 2013, and more recently in February 2020, MPTCP was upstreamed to the Linux kernel.In this paper, we provide the first broad analysis of MPTCPv0 in the Internet. We probe the entire IPv4 address space and an IPv6 hitlist to detect MPTCP-enabled systems operational on port 80 and 443. Our scans reveal a steady increase in MPTCPcapable IPs, reaching 9k+ on IPv4 and a few dozen on IPv6. We also discover a significant share of seemingly MPTCP-capable hosts, an artifact of middleboxes mirroring TCP options. We conduct targeted HTTP(S) measurements towards select hosts and find that middleboxes can aggressively impact the perceived quality of applications utilizing MPTCP. Finally, we analyze two complementary traffic traces from CAIDA and MAWI to shed light on the real-world usage of MPTCP. We find that while MPTCP usage has increased by a factor of 20 over the past few years, its traffic share is still quite low.

show abstract

Section: Finding Interfering Middleboxesmentioning

confidence: 99%

From Single Lane to Highways: Analyzing the Adoption of Multipath TCP in the Internet

Aschenbrenner¹,

Shreedhar

Gasser³

et al. 2021

2021 IFIP Networking Conference (IFIP Networking)

View full text Add to dashboard Cite

show abstract

“…Figure 9a visualizes the top 5 countries with the most MPTCPv0 capable host densities while Figure 9b shows the top-4 countries with the most MPTCPv1 capable hosts on IPv4, arranged in decreasing fashion. We use the MaxMind database [46] for our analysis and only show country-level breakup since more fine-granular IP geo-location suffers from accuracy shortcomings [47]- [49]. Table I provides further insights, as it shows the top 10 ASes with most IPv4 MPTCPv0 hosts on port 80 and 443.…”

Section: Geo-distribution Of Mptcp-capable Hostsmentioning

confidence: 99%

A Longitudinal View at the Adoption of Multipath TCP

Shreedhar¹,

Zeynali²,

Gasser³

et al. 2022

Preprint

View full text Add to dashboard Cite

Multipath TCP (MPTCP) extends traditional TCP to enable simultaneous use of multiple connection endpoints at the source and destination. MPTCP has been under active development since its standardization in 2013, and more recently in February 2020, MPTCP was upstreamed to the Linux kernel. In this paper, we provide an in-depth analysis of MPTCPv0 in the Internet and the first analysis of MPTCPv1 to date. We probe the entire IPv4 address space and an IPv6 hitlist to detect MPTCP-enabled systems operational on port 80 and 443. Our scans reveal a steady increase in MPTCPv0-capable IPs, reaching 13k+ on IPv4 (2× increase in one year) and 1k on IPv6 (40× increase). MPTCPv1 deployment is comparatively low with ≈ 100 supporting hosts in IPv4 and IPv6, most of which belong to Apple. We also discover a substantial share of seemingly MPTCPcapable hosts, an artifact of middleboxes mirroring TCP options. We conduct targeted HTTP(S) measurements towards select hosts and find that middleboxes can aggressively impact the perceived quality of applications utilizing MPTCP. Finally, we analyze two complementary traffic traces from CAIDA and MAWI to shed light on the real-world usage of MPTCP. We find that while MPTCP usage has increased by a factor of 20 over the past few years, its traffic share is still quite low.

show abstract

“…This is different compared to broadband and fixed-device IP addresses [ 12 ]. Specific locations should be excluded from the lifetime observations, such as the country geographical centers and organization postal addresses stored in the WHOIS database [ 33 ]. For justified two-factor authentications, we want to exclude address locations that change often.…”

Section: Application Use Casesmentioning

confidence: 99%

Retrospective IP Address Geolocation for Geography-Aware Internet Services

Komosný

2021

Sensors

View full text Add to dashboard Cite

The paper deals with the locations of IP addresses that were used in the past. This retrospective geolocation suffers from continuous changes in the Internet space and a limited availability of past IP location databases. I analyse the retrospective geolocation of IPv4 and IPv6 addresses over five years. An approach is also introduced to handle missing past IP geolocation databases. The results show that it is safe to retrospectively locate IP addresses by a couple of years, but there are differences between IPv4 and IPv6. The described parametric model of location lifetime allows us to estimate the time when the address location changed in the past. The retrospective geolocation of IP addresses has a broad range of applications, including social studies, system analyses, and security investigations. Two longitudinal use cases with the applied results are discussed. The first deals with geotargeted online content. The second deals with identity theft prevention in e-commerce.

show abstract

On the Accuracy of Country-Level IP Geolocation

Cited by 19 publications

References 12 publications

From Single Lane to Highways: Analyzing the Adoption of Multipath TCP in the Internet

From Single Lane to Highways: Analyzing the Adoption of Multipath TCP in the Internet

A Longitudinal View at the Adoption of Multipath TCP

Retrospective IP Address Geolocation for Geography-Aware Internet Services

Contact Info

Product

Resources

About