[140117] in North American Network Operators' Group
RE: Suspecious anycast prefixes
daemon@ATHENA.MIT.EDU (Stefan Fouant)
Mon May 2 14:44:26 2011
From: "Stefan Fouant" <sfouant@shortestpathfirst.net>
To: "'Yaoqing\(Joey\) Liu'" <joey.liuyq@gmail.com>,
<nanog@nanog.org>
In-Reply-To: <BANLkTim9xzaThOSk5t=tigzi8EKZr_0GqQ@mail.gmail.com>
Date: Mon, 2 May 2011 14:44:16 -0400
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
> -----Original Message-----
> From: Yaoqing(Joey) Liu [mailto:joey.liuyq@gmail.com]
> Sent: Monday, May 02, 2011 2:17 PM
> To: nanog@nanog.org
> Subject: Suspecious anycast prefixes
>
> Hi all,
>
> I found the following prefixes are often originated by many ASNs more
> than
> five, wonder if they provide global anycast service, if so what
> specific
> service they provide?
>
> 12.64.255.0/24
> 70.37.135.0/24
> 198.32.176.0/24
> 199.7.49.0/24
> 199.7.80.0/24
> 199.16.93.0/24
> 199.16.94.0/24
> 199.16.95.0/24
> 206.223.115.0/24
Most of those are for Verisign's DNS resolution services. Definitely
nothing to be suspicious about here. Move along. These aren't the droids
you are looking for.
Stefan Fouant