奇怪的路由追踪

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

<-- Campaign content will be loaded here -->

这是一个创建于 3481 天前的主题，其中的信息可能已经有所发展或是发生改变。

人在内，手动改了 hosts 指向某韩国 ggc 。（尚未被路由封锁）
于是 traceroute 发现了一些奇怪的问题

为什么出了内网就直接到了美国 att?
按理说应该先经过国内骨干网到出口路由才出国啊

出口路

奇怪

traceroute

ggc

24 条回复 2016-06-28 06:26:08 +08:00

BSD

2016-06-25 14:53:07 +08:00

或许是这个 app 有毛病呢？为嘛不打开终端，直接运行 traceroute? android 只要安装了 busybox 就可以。

a2213108

2016-06-25 15:02:11 +08:00 via Android

@BSD 表示没 root ，而且似乎不是软件问题，我换了一个也是一样

fengxing

2016-06-25 15:07:09 +08:00

这个 IP 被你所使用的运营商劫持了

Andy1999

2016-06-25 15:11:07 +08:00 via iPhone

@fengxing 这是机房的内网关运营商 X 事，麻烦不要误导别人

aveline

2016-06-25 15:15:42 +08:00 via iPhone

经常有脑残运营商把 172.0.0.0/8 整个当成内网用 ……
你就是遇到了这样的脑残运营商

BSD

2016-06-25 15:40:07 +08:00

@aveline 确实有这可能。

a2213108

2016-06-25 16:18:04 +08:00

@aveline 看来是我想太多

raysonx

2016-06-25 20:12:01 +08:00 via iPad

@Andy1999 然而 172.15 开头是公网 ip

MikuM97

2016-06-25 20:13:47 +08:00

@aveline 估计就是这种情况，工程上各公司水平参差不齐，面各种奇葩内网 ip 我都见过

raysonx

2016-06-25 20:15:31 +08:00 via iPad

@miaojiang22220 曾经见过把 192.186.0.0/24 当内网地址用的，无语了

fengxing

2016-06-25 20:18:58 +08:00

@Andy1999 不看帖子内容的？楼主在墙内，直接从内网直接跳到美国？

wql

2016-06-25 20:27:27 +08:00 via Android

@fengxing 难道是所谓的自带直接 fan qiang 的运营商？
估计是，劫持？

popu111

2016-06-25 20:39:09 +08:00

@raysonx 186 。。。这是技术人员手抖了吧

fengxing

2016-06-25 20:47:48 +08:00

@wql 在墙内测得直接从从运营商内网跳到美国，这种很明显就是劫持。
并且中美之间的理论延迟也需要至少 150 ，这是物理限制，低于这个的不是广播的 IP 就是劫持

wdlth

2016-06-25 20:51:53 +08:00

这有什么，上次还见过某地广电网还把 DOD 的 IP 段当内网 IP 用呢……

jasontse

2016-06-25 21:00:21 +08:00 via Android

@aveline
@raysonx
@miaojiang22220
@wdlth
国内机房这种事情见得多了呢

raysonx

2016-06-25 21:26:51 +08:00

@jasontse 我得和阿里把 11.0.0.0/8 段地址用一道理。

raysonx

2016-06-25 21:28:16 +08:00

WHOIS:

$ whois 172.15.0.1
[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=172.15.0.1?showDetails=true&showARIN=false&showNOnArinTopLevelNet=false&ext=netref2
#

NetRange: 172.0.0.0 - 172.15.255.255
CIDR: 172.0.0.0/12
NetName: SIS-80-8-2012
NetHandle: NET-172-0-0-0-1
Parent: NET172 (NET-172-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS7132
Organization: AT&T Internet Services (SIS-80)
RegDate: 2012-08-20
Updated: 2012-08-20
Ref: https://whois.arin.net/rest/net/NET-172-0-0-0-1

OrgName: AT&T Internet Services
OrgId: SIS-80
Address: 3300 E Renner Rd
Address: Mailroom B2139
Address: Attn:IP Management
City: Richardson
StateProv: TX
PostalCode: 75082
Country: US
RegDate: 2000-06-20
Updated: 2016-06-17
Comment: For policy abuse issues contact [email protected]
Comment: For all subpoena, Internet, court order related matters and emergency requests contact
Comment: 11760 US Highway 1
Comment: North Palm Beach, FL 33408
Comment: Main Number: 800-635-6840
Comment: Fax: 888-938-4715
Ref: https://whois.arin.net/rest/org/SIS-80

OrgTechHandle: IPADM2-ARIN
OrgTechName: IPAdmin ATT Internet Services
OrgTechPhone: +1-888-510-5545
OrgTechEmail: [email protected]
OrgTechRef: https://whois.arin.net/rest/poc/IPADM2-ARIN

OrgAbuseHandle: ABUSE6-ARIN
OrgAbuseName: Abuse ATT Internet Services
OrgAbusePhone: +1-919-319-8167
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE6-ARIN

OrgNOCHandle: SUPPO-ARIN
OrgNOCName: Support ATT Internet Services
OrgNOCPhone: +1-888-510-5545
OrgNOCEmail: [email protected]
OrgNOCRef: https://whois.arin.net/rest/poc/SUPPO-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://ww.arin.net/public/whoisinaccuracy/index.xhtml

$ whois 11.0.0.0
[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=11.0.0.0?showDetails=true&showARIN=false&showNOnArinTopLevelNet=false&ext=netref2
#

NetRange: 11.0.0.0 - 11.255.255.255
CIDR: 11.0.0.0/8
NetName: DODIIS
NetHandle: NET-11-0-0-0-1
Parent: ()
NetType: Direct Allocation
OriginAS:
Organization: DoD Network Information Center (DNIC)
RegDate: 1984-01-19
Updated: 2007-08-22
Ref: https://whois.arin.net/rest/net/NET-11-0-0-0-1

OrgName: DoD Network Information Center
OrgId: DNIC
Address: 3990 E. Broad Street
City: Columbus
StateProv: OH
PostalCode: 43218
Country: US
RegDate:
Updated: 2011-08-17
Ref: https://whois.arin.net/rest/org/DNIC

OrgAbuseHandle: REGIS10-ARIN
OrgAbuseName: Registration
OrgAbusePhone: +1-844-347-2457
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://whois.arin.net/rest/poc/REGIS10-ARIN

OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName: Network DoD
OrgTechPhone: +1-844-347-2457
OrgTechEmail: [email protected]
OrgTechRef: https://whois.arin.net/rest/poc/MIL-HSTMST-ARIN

OrgTechHandle: REGIS10-ARIN
OrgTechName: Registration
OrgTechPhone: +1-844-347-2457
OrgTechEmail: [email protected]
OrgTechRef: https://whois.arin.net/rest/poc/REGIS10-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

AVC

2016-06-26 00:26:46 +08:00 via Android

我这里的运营商第一跳 189.189.190.17 墨西哥呢，有什么奇怪的

Awoer

2016-06-26 05:21:15 +08:00

@wdlth
@raysonx DOD 那种没有广播的还好，没什么太大问题。。智障的是有广播的 IP 被拿去用。

akw2312

2016-06-27 05:00:17 +08:00

IPIP.net 上面的就有把 172.x.x.x 全拿去成用的

akw2312

2016-06-27 05:02:46 +08:00

上面那我也忘是哪了
不移其也是很用 172.15
``
目标 IP: 202.103.24.68

1 192.168.1.1 0 ms 0 ms 0 ms 局域网 * PandoraBox.lan
2 100.64.0.1 4 ms 4 ms 4 ms 共享地址 *
3 120.202.15.5 3 ms 4 ms 4 ms 中国湖北随州移动 AS9808
4 120.202.0.117 31 ms 43 ms 44 ms 中国湖北武汉移动 AS9808
5 120.202.0.214 9 ms 10 ms 12 ms 中国湖北武汉移动 AS9808
6 211.137.48.6 11 ms 11 ms 12 ms 中国湖北武汉移动 AS9808
7 * * * *
8 172.82.6.1 12 ms 12 ms 20 ms 美国乔治亚州亚特兰大 AS63008
9 172.21.0.1 11 ms 12 ms 12 ms 局域网 *
10 172.16.200.254 9 ms 9 ms 9 ms 局域网 *
11 * * * *
12 172.15.72.1 36 ms 41 ms 52 ms 美国 att.com AS7018 172-15-72-1.lightspeed.irvnca.sbcglobal.net
13 * * * *
14 192.168.78.5 37 ms 37 ms 858 ms 局域网 *
15 218.74.126.53 38 ms 39 ms 39 ms 中国浙江丽水电信 AS4134
16 218.74.115.33 37 ms 41 ms * 中国浙江丽水电信 AS4134 33.115.74.218.broad.ls.zj.dynamic.163data.com.cn
17 202.97.67.49 55 ms 55 ms 56 ms 中国湖北武汉电信 AS49597
18 111.175.209.50 59 ms 59 ms 59 ms 中国湖北武汉电信 AS4134 localhost
19 111.175.209.58 58 ms 62 ms 108 ms 中国湖北武汉电信 AS4134 localhost
20 202.103.24.68 55 ms 55 ms 56 ms 中国湖北武汉电信 AS4134 ns.wuhan.net.cn
``

kang000feng

2016-06-27 23:24:07 +08:00

@a2213108 兄台，能否分享个韩国 ggc IP 段让我扫扫， google 学术用代理经常被屏蔽，谢谢！

a2213108

2016-06-28 06:26:08 +08:00 via Android

@kang000feng 不如给你越南 113.171.252.0