[140206] in North American Network Operators' Group
Re: Suspecious anycast prefixes
daemon@ATHENA.MIT.EDU (Yaoqing(Joey) Liu)
Wed May 4 23:24:15 2011
In-Reply-To: <BANLkTi=yMJU8+tCTtydsoqgvLd96PPFo3g@mail.gmail.com>
Date: Wed, 4 May 2011 22:23:12 -0500
From: "Yaoqing(Joey) Liu" <joey.liuyq@gmail.com>
To: nanog@nanog.org
Cc: bmanning@vacation.karoshi.com
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi NANOG,
I manually extracted the origins and their org info for the announced
block of prefixes. All these prefixes were observed being originated
by at most four ASNs simultaneously. I suspect they provide anycast or
IXP service, but not positive. Please confirm my conjecture if you
know them. Thanks!
27.130.0.0/16
58.147.0.0/20
58.147.0.0/17
58.147.16.0/20
58.147.64.0/20
58.147.80.0/20
58.147.96.0/20
58.147.112.0/20
110.164.0.0/16
110.164.48.0/20
110.164.64.0/20
110.164.80.0/20
110.164.176.0/20
112.143.0.0/16
180.183.0.0/16
202.69.136.0/21
223.204.0.0/16
223.205.0.0/16
AS24326: as-name:TTT-AS-AP|descr:Maxnet, Internet Service Provider,
Bangkok|country:TH
AS38550: as-name:TTGN-INTER-AS-AP|descr:TTGN , INTERNATIONAL INTERNET
GATEWAY, THAILAND|country:TH
AS45629: as-name:JASTEL-NETWORK-TH-AP|descr:Jasmine International
Tower|country:TH
AS45758: as-name:TRIPLETNET-AS-AP|descr:TripleT Internet Internet
service provider Bangkok|country:TH
61.237.224.0/20
AS4808:as-name:CHINA169-BJ|descr:CNCGROUP IP network China169 Beijing
Province Network|country:CN
AS4847:as-name:CNIX-AP|descr:China Networks Inter-Exchange
AS9819:as-name:BZNET|descr:Beijing Bozhiruihai Network Technology Co.,
Ltd.|country:CN
AS17772:as-name:CHINACOM|descr:CHINA COMMUNICATIONS SYSTEM Co.,Ltd.|country=
:CN
AS17964: as-name:DXTNET|descr:Beijing Dian-Xin-Tong Network
Technologies Co., Ltd.|country:CN
AS24138:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|CN
AS38356:as-name:NETEON|descr:Beijing Neteon Tech Co, Ltd.|country:CN
AS45114:as-name:CNNIC-SUNINFO-MDC-AP|descr:Beijing Sunrise Technology
Co. Ltd.|country:CN
65.61.188.0/24
69.20.95.0/24
AS10532:ASName: RACKSPACE;OrgName:Rackspace Hosting
AS15395:as-name:UNSPECIFIED|descr:UK Rackspace|descr:LONDON office
AS27357:ASName: RACKSPACE;OrgName:Rackspace Hosting
AS33070:ASName: RMH-14;OrgName:Rackspace Hosting
112.142.0.0/16
222.123.0.0/16
AS24326: as-name:TTT-AS-AP|descr:Maxnet, Internet Service Provider,
Bangkok|country:TH
AS38550: as-name:TTGN-INTER-AS-AP|descr:TTGN , INTERNATIONAL INTERNET
GATEWAY, THAILAND|country:TH
AS45629: as-name:JASTEL-NETWORK-TH-AP|descr:Jasmine International
Tower|country:TH
AS45758: as-name:TRIPLETNET-AS-AP|descr:TripleT Internet Internet
service provider Bangkok|country:TH
AS45626:as-name:TOPL-AU-AS|descr:Travelex Outsourcing Pty Ltd 5/504
Pacific Highway St Leonards NSW AUS 2065|country:AU
198.32.64.0/24
AS4555:ASName: EP0-BLK-ASNBLOCK-5;OrgName:Almond Oil Process, LLC.
AS9584:as-name:GENESIS-AP|descr:Diyixian.com Limited|country:HK
AS20144:ASName: L-ROOT;Comment:distributed using Anycast.
AS42909: as-name: COMMUNITYDNS;descr: Internet
Computer Bureau Ltd
198.32.136.0/24
AS195:OrgName:San Diego Supercomputer Center
AS293:OrgName:ESnet|OrgId:ENSN-Z
AS1239:OrgName:Sprint
AS2914:OrgName:NTT America, Inc.
AS7018:OrgName:AT&T Services, Inc.
198.32.175.0/24
AS2497:as-name:IIJ|descr:Internet Initiative Japan Inc.
AS2914:OrgName:NTT America, Inc.|
AS4323:OrgName:tw telecom holdings, inc.
AS5650:OrgName:Frontier Communications of America, Inc.
AS6461:OrgName:Abovenet Communications, Inc
202.99.58.0/24
AS4808:as-name:CHINA169-BJ|descr:CNCGROUP IP network China169 Beijing
Province Network|country:CN
AS6619:as-name:SAMSUNGNETWORKS-AS-KR|descr:Samsung Networks Inc.
AS17431:as-name:TONET|descr:Beijing TONEK Information Technology
Development Company|country:CN
AS17964:as-name:DXTNET|descr:Beijing Dian-Xin-Tong Network
Technologies Co., Ltd.|country:CN
202.122.116.0/24
AS17775:as-name:STN-CN|descr:SHANGHAI Guangdian Electronics Group
Co.,Ltd|country:CN
AS18118:as-name:CITICNET-AP|descr:CITIC Networks Management Co.,Ltd.
AS24142:as-name:CNNIC-BennalongNet-AP|descr:Shanghai Bennalong Network
Technology Co.,LTD
AS38356:as-name:NETEON|descr:Beijing Neteon Tech Co,
Ltd.|descr:Room203-204, No.1,737,CaoXi Road
North,Shanghai,China|country:CN
AS38814:as-name:ASIAMAX-HK-EA-AP|descr:Asiamax Technology Limited VPN
Service Provider Hong Kong|country:HK
203.119.30.0/24
AS24151:as-name:CNNIC-CRITICAL-AP|descr:China Internet Network Infomation C=
enter
AS24406:as-name:CNNIC-CRITICAL-AP|descr:China Internet Network Infomation C=
enter
AS24408:as-name:CNNIC-CRITICAL-AP|descr:China Internet Network Infomation C=
enter
AS24410:as-name:CNNIC-CRITICAL-AP|descr:China Internet Network Infomation C=
enter
204.79.195.0/24
AS8068:OrgName:Microsoft Corp
AS8069:OrgName:GRYPHON NETWORKS
AS8071:OrgName:Microsoft Corp
AS8075:OrgName:Microsoft Corp
204.79.197.0/24
AS8068:OrgName:Microsoft Corp
AS8069:OrgName:GRYPHON NETWORKS
AS8071:OrgName:Microsoft Corp
AS8075:OrgName:Microsoft Corp
AS12076:OrgName:Hotmail Corporation
206.51.38.0/24
AS3549:OrgName:Hotmail Corporation
AS6453:OrgName:Tata Communications
AS7911:OrgName:Level 3 Communications, Inc.
AS25973:OrgName:Mzima Networks, Inc.
206.223.116.0/24
AS293:OrgName:ESnet
AS1280:OrgName:Internet Systems Consortium, Inc.
AS2914:OrgName:NTT America, Inc.
AS6461:OrgName:Abovenet Communications, Inc
AS23352:OrgName:Server Central Network
207.231.241.0/24
AS101:OrgName:University of Washington
AS226:OrgName:Los Nettos
AS293:OrgName:ESnet
AS14221:OrgName:University of Washington
208.67.239.0/24
AS11588:OrgName:Highwinds Network Group, Inc.
AS23148:OrgName:TERRENAP DATA CENTERS, INC.
AS29045:IT ACTION - Managed Hosting
AS40009:OrgName:BitGravity, Inc.
222.35.0.0/18
AS4808:as-name:CHINA169-BJ|descr:CNCGROUP IP network China169 Beijing
Province Network|country:CN
AS4847:as-name:CNIX-AP|descr:China Networks Inter-Exchange|descr:Using
International Link at Beijing
AS9819:as-name:BZNET|descr:Beijing Bozhiruihai Network Technology Co.,
Ltd.|country:CN
AS17964:as-name:DXTNET|descr:Beijing Dian-Xin-Tong Network
Technologies Co., Ltd.|country:CN
AS24138:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|descr:Beijing branch IDC
network|country:CN
AS38356:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|descr:Beijing branch IDC
network|country:CN
AS45114:as-name:CNNIC-SUNINFO-MDC-AP|descr:Beijing Sunrise Technology Co. L=
td.
222.35.248.0/21
AS4847:as-name:CNIX-AP|descr:China Networks Inter-Exchange|descr:Using
International Link at Beijing
AS9802:as-name:CHINA-ABITCOOL|descr:Abitcool(China) Inc.|country:CN
AS9803:as-name:JINGXUN|descr:Beijing Jingxun Public Information
Technology Co., Ltd|country:CN
AS17964:as-name:DXTNET|descr:Beijing Dian-Xin-Tong Network
Technologies Co., Ltd.|country:CN
AS18118:as-name:CITICNET-AP|descr:CITIC Networks Management Co.,Ltd.
AS24138:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|descr:Beijing branch IDC
network|country:CN
AS38356:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|descr:Beijing branch IDC
network|country:CN:
Yaoqing
On Wed, May 4, 2011 at 3:20 PM, Yaoqing(Joey) Liu <joey.liuyq@gmail.com> wr=
ote:
>
>
> On Wed, May 4, 2011 at 3:15 PM, Joe Abley <jabley@hopcount.ca> wrote:
>>
>> On 2011-05-04, at 23:11, Yaoqing(Joey) Liu wrote:
>>
>> > Thanks for clarifying this, actually I have a few more blocks with fou=
r origin ASNs that I'm not positive if they are anycast prefixes. Please he=
lp distinguish them if the provide anycast service.
>>
>> You could probably get a good distance towards the answer to this by loo=
king up the prefixes yourself using appropriate whois servers. Enumerating =
every prefix you see with more than one apparent origin and asking NANOG to=
type whois for you does not scale very well.
>
> This is definitely a good idea, I'll do it right now. Thanks.
>
> Yaoqing
>>
>>
>> Joe