Suspecious anycast prefixes

Yaoqing(Joey) Liu joey.liuyq at gmail.com
Wed May 4 22:23:12 CDT 2011


Hi NANOG,

I manually extracted the origins and their org info for the announced
block of prefixes. All these prefixes were observed being originated
by at most four ASNs simultaneously. I suspect they provide anycast or
IXP service, but not positive. Please confirm my conjecture if you
know them. Thanks!

27.130.0.0/16
58.147.0.0/20
58.147.0.0/17
58.147.16.0/20
58.147.64.0/20
58.147.80.0/20
58.147.96.0/20
58.147.112.0/20
110.164.0.0/16
110.164.48.0/20
110.164.64.0/20
110.164.80.0/20
110.164.176.0/20
112.143.0.0/16
180.183.0.0/16
202.69.136.0/21
223.204.0.0/16
223.205.0.0/16
AS24326: as-name:TTT-AS-AP|descr:Maxnet, Internet Service Provider,
Bangkok|country:TH
AS38550: as-name:TTGN-INTER-AS-AP|descr:TTGN , INTERNATIONAL INTERNET
GATEWAY, THAILAND|country:TH
AS45629: as-name:JASTEL-NETWORK-TH-AP|descr:Jasmine International
Tower|country:TH
AS45758: as-name:TRIPLETNET-AS-AP|descr:TripleT Internet Internet
service provider Bangkok|country:TH

61.237.224.0/20
AS4808:as-name:CHINA169-BJ|descr:CNCGROUP IP network China169 Beijing
Province Network|country:CN
AS4847:as-name:CNIX-AP|descr:China Networks Inter-Exchange
AS9819:as-name:BZNET|descr:Beijing Bozhiruihai Network Technology Co.,
Ltd.|country:CN
AS17772:as-name:CHINACOM|descr:CHINA COMMUNICATIONS SYSTEM Co.,Ltd.|country:CN
AS17964: as-name:DXTNET|descr:Beijing Dian-Xin-Tong Network
Technologies Co., Ltd.|country:CN
AS24138:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|CN
AS38356:as-name:NETEON|descr:Beijing Neteon Tech Co, Ltd.|country:CN
AS45114:as-name:CNNIC-SUNINFO-MDC-AP|descr:Beijing Sunrise Technology
Co. Ltd.|country:CN

65.61.188.0/24
69.20.95.0/24
AS10532:ASName: RACKSPACE;OrgName:Rackspace Hosting
AS15395:as-name:UNSPECIFIED|descr:UK Rackspace|descr:LONDON office
AS27357:ASName: RACKSPACE;OrgName:Rackspace Hosting
AS33070:ASName: RMH-14;OrgName:Rackspace Hosting

112.142.0.0/16
222.123.0.0/16
AS24326: as-name:TTT-AS-AP|descr:Maxnet, Internet Service Provider,
Bangkok|country:TH
AS38550: as-name:TTGN-INTER-AS-AP|descr:TTGN , INTERNATIONAL INTERNET
GATEWAY, THAILAND|country:TH
AS45629: as-name:JASTEL-NETWORK-TH-AP|descr:Jasmine International
Tower|country:TH
AS45758: as-name:TRIPLETNET-AS-AP|descr:TripleT Internet Internet
service provider Bangkok|country:TH
AS45626:as-name:TOPL-AU-AS|descr:Travelex Outsourcing Pty Ltd 5/504
Pacific Highway St Leonards NSW AUS 2065|country:AU


198.32.64.0/24
AS4555:ASName: EP0-BLK-ASNBLOCK-5;OrgName:Almond Oil Process, LLC.
AS9584:as-name:GENESIS-AP|descr:Diyixian.com Limited|country:HK
AS20144:ASName: L-ROOT;Comment:distributed using Anycast.
AS42909: as-name:         COMMUNITYDNS;descr:           Internet
Computer Bureau Ltd

198.32.136.0/24
AS195:OrgName:San Diego Supercomputer Center
AS293:OrgName:ESnet|OrgId:ENSN-Z
AS1239:OrgName:Sprint
AS2914:OrgName:NTT America, Inc.
AS7018:OrgName:AT&T Services, Inc.

198.32.175.0/24
AS2497:as-name:IIJ|descr:Internet Initiative Japan Inc.
AS2914:OrgName:NTT America, Inc.|
AS4323:OrgName:tw telecom holdings, inc.
AS5650:OrgName:Frontier Communications of America, Inc.
AS6461:OrgName:Abovenet Communications, Inc

202.99.58.0/24
AS4808:as-name:CHINA169-BJ|descr:CNCGROUP IP network China169 Beijing
Province Network|country:CN
AS6619:as-name:SAMSUNGNETWORKS-AS-KR|descr:Samsung Networks Inc.
AS17431:as-name:TONET|descr:Beijing TONEK Information Technology
Development Company|country:CN
AS17964:as-name:DXTNET|descr:Beijing Dian-Xin-Tong Network
Technologies Co., Ltd.|country:CN

202.122.116.0/24
AS17775:as-name:STN-CN|descr:SHANGHAI Guangdian Electronics Group
Co.,Ltd|country:CN
AS18118:as-name:CITICNET-AP|descr:CITIC Networks Management Co.,Ltd.
AS24142:as-name:CNNIC-BennalongNet-AP|descr:Shanghai Bennalong Network
Technology Co.,LTD
AS38356:as-name:NETEON|descr:Beijing Neteon Tech Co,
Ltd.|descr:Room203-204, No.1,737,CaoXi Road
North,Shanghai,China|country:CN
AS38814:as-name:ASIAMAX-HK-EA-AP|descr:Asiamax Technology Limited VPN
Service Provider Hong Kong|country:HK

203.119.30.0/24
AS24151:as-name:CNNIC-CRITICAL-AP|descr:China Internet Network Infomation Center
AS24406:as-name:CNNIC-CRITICAL-AP|descr:China Internet Network Infomation Center
AS24408:as-name:CNNIC-CRITICAL-AP|descr:China Internet Network Infomation Center
AS24410:as-name:CNNIC-CRITICAL-AP|descr:China Internet Network Infomation Center


204.79.195.0/24
AS8068:OrgName:Microsoft Corp
AS8069:OrgName:GRYPHON NETWORKS
AS8071:OrgName:Microsoft Corp
AS8075:OrgName:Microsoft Corp

204.79.197.0/24
AS8068:OrgName:Microsoft Corp
AS8069:OrgName:GRYPHON NETWORKS
AS8071:OrgName:Microsoft Corp
AS8075:OrgName:Microsoft Corp
AS12076:OrgName:Hotmail Corporation

206.51.38.0/24
AS3549:OrgName:Hotmail Corporation
AS6453:OrgName:Tata Communications
AS7911:OrgName:Level 3 Communications, Inc.
AS25973:OrgName:Mzima Networks, Inc.

206.223.116.0/24
AS293:OrgName:ESnet
AS1280:OrgName:Internet Systems Consortium, Inc.
AS2914:OrgName:NTT America, Inc.
AS6461:OrgName:Abovenet Communications, Inc
AS23352:OrgName:Server Central Network

207.231.241.0/24
AS101:OrgName:University of Washington
AS226:OrgName:Los Nettos
AS293:OrgName:ESnet
AS14221:OrgName:University of Washington

208.67.239.0/24
AS11588:OrgName:Highwinds Network Group, Inc.
AS23148:OrgName:TERRENAP DATA CENTERS, INC.
AS29045:IT ACTION - Managed Hosting
AS40009:OrgName:BitGravity, Inc.

222.35.0.0/18
AS4808:as-name:CHINA169-BJ|descr:CNCGROUP IP network China169 Beijing
Province Network|country:CN
AS4847:as-name:CNIX-AP|descr:China Networks Inter-Exchange|descr:Using
International Link at Beijing
AS9819:as-name:BZNET|descr:Beijing Bozhiruihai Network Technology Co.,
Ltd.|country:CN
AS17964:as-name:DXTNET|descr:Beijing Dian-Xin-Tong Network
Technologies Co., Ltd.|country:CN
AS24138:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|descr:Beijing branch IDC
network|country:CN
AS38356:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|descr:Beijing branch IDC
network|country:CN
AS45114:as-name:CNNIC-SUNINFO-MDC-AP|descr:Beijing Sunrise Technology Co. Ltd.

222.35.248.0/21
AS4847:as-name:CNIX-AP|descr:China Networks Inter-Exchange|descr:Using
International Link at Beijing
AS9802:as-name:CHINA-ABITCOOL|descr:Abitcool(China) Inc.|country:CN
AS9803:as-name:JINGXUN|descr:Beijing Jingxun Public Information
Technology Co., Ltd|country:CN
AS17964:as-name:DXTNET|descr:Beijing Dian-Xin-Tong Network
Technologies Co., Ltd.|country:CN
AS18118:as-name:CITICNET-AP|descr:CITIC Networks Management Co.,Ltd.
AS24138:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|descr:Beijing branch IDC
network|country:CN
AS38356:as-name:CRNET_BJ_IDC-CNNIC-AP|descr:China Tietong
Telecommunication Corporation|descr:Beijing branch IDC
network|country:CN:


Yaoqing



On Wed, May 4, 2011 at 3:20 PM, Yaoqing(Joey) Liu <joey.liuyq at gmail.com> wrote:
>
>
> On Wed, May 4, 2011 at 3:15 PM, Joe Abley <jabley at hopcount.ca> wrote:
>>
>> On 2011-05-04, at 23:11, Yaoqing(Joey) Liu wrote:
>>
>> > Thanks for clarifying this, actually I have a few more blocks with four origin ASNs that I'm not positive if they are anycast prefixes. Please help distinguish them if the provide anycast service.
>>
>> You could probably get a good distance towards the answer to this by looking up the prefixes yourself using appropriate whois servers. Enumerating every prefix you see with more than one apparent origin and asking NANOG to type whois for you does not scale very well.
>
> This is definitely a good idea, I'll do it right now. Thanks.
>
> Yaoqing
>>
>>
>> Joe




More information about the NANOG mailing list