Suspecious anycast prefixes

Yaoqing(Joey) Liu joey.liuyq at gmail.com
Thu May 5 11:42:31 CDT 2011


On Thu, May 5, 2011 at 2:35 AM, Bill Woodcock <woody at pch.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
>
> On May 4, 2011, at 8:23 PM, Yaoqing(Joey) Liu wrote:
>
>> Hi NANOG,
>>
>> I manually extracted the origins and their org info for the announced
>> block of prefixes. All these prefixes were observed being originated
>> by at most four ASNs simultaneously. I suspect they provide anycast or
>> IXP service, but not positive. Please confirm my conjecture if you
>> know them.
>
> The IXP subnets are here:
>
> http://www.pch.net/ixpdir/ip_city_country.pl

We're using these IXP prefixes and they are very helpful, but I'm
afraid they are not complete. For example, I couldn't find any IXP
prefix from the mainland of China, such as Beijing and Shanghai.

Yaoqing
>
>                                -Bill
>
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (Darwin)
>
> iQIcBAEBCAAGBQJNwlM7AAoJEG+kcEsoi3+HXD8P/0Ufpu3KDRZsAzbV6PVcUjIU
> HtGl2aTTkPntLcaEZgItRA1m9GBbiIdDBRsQrR2IDU9K9py5MEhnllmC+JojJpJ9
> xtrxEnisLNiZfCHhy0AHHhHZfbvu9UWpXbHVTuezL1HyRTCscmdyQWJtGYug59p6
> beI9kVlP7laOY6pyrb2rXCDPs0zaVqof4XwWlD5HQMQJcdw5GyyON9ddz7WXROk5
> Q4be9G7w79L164r4nkDDTreZ7yWGqUFSGwXYTRpkItbBgHQtW3fnWKIrVbRl5a3X
> t/3og2OmysYY5g05IjP7Afg0+IPopyS9Kwa1SvgVe+Qu0SX8nZAjhOcSKtMgmPwP
> CdzyK6Mv20+CkwcmAejG44dZ4NWY/Zog8iJ4fDDmgX8CxqGduoG0cLmvXPg9iqz9
> qpxuD6EpqYOXKVFYRy3BOao72PJJgURpd2JGYHw2OiWkOTBP/KkJkOWb4pawDR2B
> q06Zt/XyHqQhFwu4oUq63wOFcsUHn3poEjEtG2kPyYH4R4gUsZJvdXGOXpw3kq52
> z3437Nf0fMnGeu+SKpINQ14GXKWzpxTtwRxDrDBlxyweLsA8ZTgzDxgCljkmO4wc
> XF67uAGlHdu3eXCFHslW8tTrizjWl4fe95qej5oDuNi4okmkU6E6po6ohfphvxPP
> Uu2gSRvFtzCmZGUypu9P
> =BV20
> -----END PGP SIGNATURE-----
>
>




More information about the NANOG mailing list