V2EX = way to explore
V2EX 是一个关于分享和探索的地方
Sign Up Now
For Existing Member  Sign In
a2213108

奇怪的路由追踪

  •  
  •   a2213108 · Jun 25, 2016 via Android · 5990 views
    This topic created in 3599 days ago, the information mentioned may be changed or developed.
    人在墻内,手动改了 hosts 指向某韩国 ggc 。(尚未被路由封锁)
    于是 traceroute 发现了一些奇怪的问题

    为什么出了内网就直接到了美国 att?
    按理说应该先经过国内骨干网到出口路由才出国啊
    24 replies    2016-06-28 06:26:08 +08:00
    BSD
        1
    BSD  
       Jun 25, 2016
    或许是这个 app 有毛病呢?为嘛不打开终端,直接运行 traceroute? android 只要安装了 busybox 就可以。
    a2213108
        2
    a2213108  
    OP
       Jun 25, 2016 via Android
    @BSD 表示没 root ,而且似乎不是软件问题,我换了一个也是一样
    fengxing
        3
    fengxing  
       Jun 25, 2016
    这个 IP 被你所使用的运营商劫持了
    Andy1999
        4
    Andy1999  
       Jun 25, 2016 via iPhone
    @fengxing 这是机房的内网 关运营商 X 事,麻烦不要误导别人
    aveline
        5
    aveline  
       Jun 25, 2016 via iPhone   ❤️ 1
    经常有脑残运营商把 172.0.0.0/8 整个当成内网用 ……
    你就是遇到了这样的脑残运营商
    BSD
        6
    BSD  
       Jun 25, 2016
    @aveline 确实有这可能。
    a2213108
        7
    a2213108  
    OP
       Jun 25, 2016
    @aveline 看来是我想太多
    raysonx
        8
    raysonx  
       Jun 25, 2016 via iPad
    @Andy1999 然而 172.15 开头是公网 ip
    MikuM97
        9
    MikuM97  
       Jun 25, 2016
    @aveline 估计就是这种情况,工程上各公司水平参差不齐,面各种奇葩内网 ip 我都见过
    raysonx
        10
    raysonx  
       Jun 25, 2016 via iPad
    @miaojiang22220 曾经见过把 192.186.0.0/24 当内网地址用的,无语了
    fengxing
        11
    fengxing  
       Jun 25, 2016
    @Andy1999 不看帖子内容的?楼主在墙内,直接从内网直接跳到美国?
    wql
        12
    wql  
       Jun 25, 2016 via Android
    @fengxing 难道是所谓的自带直接 fan qiang 的运营商?😓
    估计是,劫持?
    popu111
        13
    popu111  
       Jun 25, 2016
    @raysonx 186 。。。这是技术人员手抖了吧
    fengxing
        14
    fengxing  
       Jun 25, 2016
    @wql 在墙内测得直接从从运营商内网跳到美国,这种很明显就是劫持。
    并且中美之间的理论延迟也需要至少 150 ,这是物理限制,低于这个的不是广播的 IP 就是劫持
    wdlth
        15
    wdlth  
       Jun 25, 2016
    这有什么,上次还见过某地广电网还把 DOD 的 IP 段当内网 IP 用呢……
    jasontse
        16
    jasontse  
       Jun 25, 2016 via Android
    @aveline
    @raysonx
    @miaojiang22220
    @wdlth
    国内机房这种事情见得多了呢
    raysonx
        17
    raysonx  
       Jun 25, 2016
    @jasontse 我覺得這和阿里雲把 11.0.0.0/8 這個網段當內網地址用一個道理。
    raysonx
        18
    raysonx  
       Jun 25, 2016
    WHOIS:

    $ whois 172.15.0.1
    [Querying whois.arin.net]
    [whois.arin.net]

    #
    # ARIN WHOIS data and services are subject to the Terms of Use
    # available at: https://www.arin.net/whois_tou.html
    #
    # If you see inaccuracies in the results, please report at
    # https://www.arin.net/public/whoisinaccuracy/index.xhtml
    #


    #
    # The following results may also be obtained via:
    # https://whois.arin.net/rest/nets;q=172.15.0.1?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
    #

    NetRange: 172.0.0.0 - 172.15.255.255
    CIDR: 172.0.0.0/12
    NetName: SIS-80-8-2012
    NetHandle: NET-172-0-0-0-1
    Parent: NET172 (NET-172-0-0-0-0)
    NetType: Direct Allocation
    OriginAS: AS7132
    Organization: AT&T Internet Services (SIS-80)
    RegDate: 2012-08-20
    Updated: 2012-08-20
    Ref: https://whois.arin.net/rest/net/NET-172-0-0-0-1


    OrgName: AT&T Internet Services
    OrgId: SIS-80
    Address: 3300 E Renner Rd
    Address: Mailroom B2139
    Address: Attn:IP Management
    City: Richardson
    StateProv: TX
    PostalCode: 75082
    Country: US
    RegDate: 2000-06-20
    Updated: 2016-06-17
    Comment: For policy abuse issues contact [email protected]
    Comment: For all subpoena, Internet, court order related matters and emergency requests contact
    Comment: 11760 US Highway 1
    Comment: North Palm Beach, FL 33408
    Comment: Main Number: 800-635-6840
    Comment: Fax: 888-938-4715
    Ref: https://whois.arin.net/rest/org/SIS-80


    OrgTechHandle: IPADM2-ARIN
    OrgTechName: IPAdmin ATT Internet Services
    OrgTechPhone: +1-888-510-5545
    OrgTechEmail: [email protected]
    OrgTechRef: https://whois.arin.net/rest/poc/IPADM2-ARIN

    OrgAbuseHandle: ABUSE6-ARIN
    OrgAbuseName: Abuse ATT Internet Services
    OrgAbusePhone: +1-919-319-8167
    OrgAbuseEmail: [email protected]
    OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE6-ARIN

    OrgNOCHandle: SUPPO-ARIN
    OrgNOCName: Support ATT Internet Services
    OrgNOCPhone: +1-888-510-5545
    OrgNOCEmail: [email protected]
    OrgNOCRef: https://whois.arin.net/rest/poc/SUPPO-ARIN


    #
    # ARIN WHOIS data and services are subject to the Terms of Use
    # available at: https://www.arin.net/whois_tou.html
    #
    # If you see inaccuracies in the results, please report at
    # https://www.arin.net/public/whoisinaccuracy/index.xhtml


    $ whois 11.0.0.0
    [Querying whois.arin.net]
    [whois.arin.net]

    #
    # ARIN WHOIS data and services are subject to the Terms of Use
    # available at: https://www.arin.net/whois_tou.html
    #
    # If you see inaccuracies in the results, please report at
    # https://www.arin.net/public/whoisinaccuracy/index.xhtml
    #


    #
    # The following results may also be obtained via:
    # https://whois.arin.net/rest/nets;q=11.0.0.0?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
    #

    NetRange: 11.0.0.0 - 11.255.255.255
    CIDR: 11.0.0.0/8
    NetName: DODIIS
    NetHandle: NET-11-0-0-0-1
    Parent: ()
    NetType: Direct Allocation
    OriginAS:
    Organization: DoD Network Information Center (DNIC)
    RegDate: 1984-01-19
    Updated: 2007-08-22
    Ref: https://whois.arin.net/rest/net/NET-11-0-0-0-1


    OrgName: DoD Network Information Center
    OrgId: DNIC
    Address: 3990 E. Broad Street
    City: Columbus
    StateProv: OH
    PostalCode: 43218
    Country: US
    RegDate:
    Updated: 2011-08-17
    Ref: https://whois.arin.net/rest/org/DNIC


    OrgAbuseHandle: REGIS10-ARIN
    OrgAbuseName: Registration
    OrgAbusePhone: +1-844-347-2457
    OrgAbuseEmail: [email protected]
    OrgAbuseRef: https://whois.arin.net/rest/poc/REGIS10-ARIN

    OrgTechHandle: MIL-HSTMST-ARIN
    OrgTechName: Network DoD
    OrgTechPhone: +1-844-347-2457
    OrgTechEmail: [email protected]
    OrgTechRef: https://whois.arin.net/rest/poc/MIL-HSTMST-ARIN

    OrgTechHandle: REGIS10-ARIN
    OrgTechName: Registration
    OrgTechPhone: +1-844-347-2457
    OrgTechEmail: [email protected]
    OrgTechRef: https://whois.arin.net/rest/poc/REGIS10-ARIN


    #
    # ARIN WHOIS data and services are subject to the Terms of Use
    # available at: https://www.arin.net/whois_tou.html
    #
    # If you see inaccuracies in the results, please report at
    # https://www.arin.net/public/whoisinaccuracy/index.xhtml
    #
    AVC
        19
    AVC  
       Jun 26, 2016 via Android
    我这里的运营商第一跳 189.189.190.17 墨西哥呢,有什么奇怪的
    Awoer
        20
    Awoer  
       Jun 26, 2016
    @wdlth
    @raysonx DOD 那种没有广播的还好,没什么太大问题。。智障的是有广播的 IP 被拿去用。
    akw2312
        21
    akw2312  
       Jun 27, 2016
    IPIP.net 上面的監測點就有把 172.x.x.x 全拿去當成內網用的
    akw2312
        22
    akw2312  
       Jun 27, 2016
    上面那個 我也忘記是哪個點了
    不過移動內網其實也是很愛用 172.15
    ``
    目标 IP: 202.103.24.68

    1 192.168.1.1 0 ms 0 ms 0 ms 局域网 * PandoraBox.lan
    2 100.64.0.1 4 ms 4 ms 4 ms 共享地址 *
    3 120.202.15.5 3 ms 4 ms 4 ms 中国 湖北 随州 移动 AS9808
    4 120.202.0.117 31 ms 43 ms 44 ms 中国 湖北 武汉 移动 AS9808
    5 120.202.0.214 9 ms 10 ms 12 ms 中国 湖北 武汉 移动 AS9808
    6 211.137.48.6 11 ms 11 ms 12 ms 中国 湖北 武汉 移动 AS9808
    7 * * * *
    8 172.82.6.1 12 ms 12 ms 20 ms 美国 乔治亚州 亚特兰大 AS63008
    9 172.21.0.1 11 ms 12 ms 12 ms 局域网 *
    10 172.16.200.254 9 ms 9 ms 9 ms 局域网 *
    11 * * * *
    12 172.15.72.1 36 ms 41 ms 52 ms 美国 att.com AS7018 172-15-72-1.lightspeed.irvnca.sbcglobal.net
    13 * * * *
    14 192.168.78.5 37 ms 37 ms 858 ms 局域网 *
    15 218.74.126.53 38 ms 39 ms 39 ms 中国 浙江 丽水 电信 AS4134
    16 218.74.115.33 37 ms 41 ms * 中国 浙江 丽水 电信 AS4134 33.115.74.218.broad.ls.zj.dynamic.163data.com.cn
    17 202.97.67.49 55 ms 55 ms 56 ms 中国 湖北 武汉 电信 AS49597
    18 111.175.209.50 59 ms 59 ms 59 ms 中国 湖北 武汉 电信 AS4134 localhost
    19 111.175.209.58 58 ms 62 ms 108 ms 中国 湖北 武汉 电信 AS4134 localhost
    20 202.103.24.68 55 ms 55 ms 56 ms 中国 湖北 武汉 电信 AS4134 ns.wuhan.net.cn
    ``
    kang000feng
        23
    kang000feng  
       Jun 27, 2016
    @a2213108 兄台,能否分享个韩国 ggc IP 段让我扫扫, google 学术用代理经常被屏蔽,谢谢!
    a2213108
        24
    a2213108  
    OP
       Jun 28, 2016 via Android
    @kang000feng 不如给你越南 113.171.252.0
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   2502 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 62ms · UTC 09:16 · PVG 17:16 · LAX 02:16 · JFK 05:16
    ♥ Do have faith in what you're doing.