奇怪的路由追踪

[a2213108]

人在墻内，手动改了 hosts 指向某韩国 ggc 。（尚未被路由封锁）
于是 traceroute 发现了一些奇怪的问题

为什么出了内网就直接到了美国 att?
按理说应该先经过国内骨干网到出口路由才出国啊

[BSD]

或许是这个 app 有毛病呢？为嘛不打开终端，直接运行 traceroute? android 只要安装了 busybox 就可以。

[a2213108]

@BSD 表示没 root ，而且似乎不是软件问题，我换了一个也是一样

[fengxing]

这个 IP 被你所使用的运营商劫持了

[Andy1999]

@fengxing 这是机房的内网 关运营商 X 事，麻烦不要误导别人

[aveline]

经常有脑残运营商把 172.0.0.0/8 整个当成内网用 ……
你就是遇到了这样的脑残运营商

[BSD]

@aveline 确实有这可能。

[a2213108]

@aveline 看来是我想太多

[raysonx]

@Andy1999 然而 172.15 开头是公网 ip

[MikuM97]

@aveline 估计就是这种情况，工程上各公司水平参差不齐，面各种奇葩内网 ip 我都见过

[raysonx]

@miaojiang22220 曾经见过把 192.186.0.0/24 当内网地址用的，无语了

[fengxing]

@Andy1999 不看帖子内容的？楼主在墙内，直接从内网直接跳到美国？

[wql]

@fengxing 难道是所谓的自带直接 fan qiang 的运营商？😓
估计是，劫持？

[popu111]

@raysonx 186 。。。这是技术人员手抖了吧

[fengxing]

@wql 在墙内测得直接从从运营商内网跳到美国，这种很明显就是劫持。
并且中美之间的理论延迟也需要至少 150 ，这是物理限制，低于这个的不是广播的 IP 就是劫持

[wdlth]

这有什么，上次还见过某地广电网还把 DOD 的 IP 段当内网 IP 用呢……

[jasontse]

@aveline
@raysonx
@miaojiang22220
@wdlth
国内机房这种事情见得多了呢

[raysonx]

@jasontse 我覺得這和阿里雲把 11.0.0.0/8 這個網段當內網地址用一個道理。

[raysonx]

WHOIS:

$ whois 172.15.0.1
[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=172.15.0.1?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 172.0.0.0 - 172.15.255.255
CIDR: 172.0.0.0/12
NetName: SIS-80-8-2012
NetHandle: NET-172-0-0-0-1
Parent: NET172 (NET-172-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS7132
Organization: AT&T Internet Services (SIS-80)
RegDate: 2012-08-20
Updated: 2012-08-20
Ref: https://whois.arin.net/rest/net/NET-172-0-0-0-1


OrgName: AT&T Internet Services
OrgId: SIS-80
Address: 3300 E Renner Rd
Address: Mailroom B2139
Address: Attn:IP Management
City: Richardson
StateProv: TX
PostalCode: 75082
Country: US
RegDate: 2000-06-20
Updated: 2016-06-17
Comment: For policy abuse issues contact [e-mail]
Comment: For all subpoena, Internet, court order related matters and emergency requests contact
Comment: 11760 US Highway 1
Comment: North Palm Beach, FL 33408
Comment: Main Number: 800-635-6840
Comment: Fax: [phone]
Ref: https://whois.arin.net/rest/org/SIS-80


OrgTechHandle: IPADM2-ARIN
OrgTechName: IPAdmin ATT Internet Services
OrgTechPhone: [phone]
OrgTechEmail: [e-mail]
OrgTechRef: https://whois.arin.net/rest/poc/IPADM2-ARIN

OrgAbuseHandle: ABUSE6-ARIN
OrgAbuseName: Abuse ATT Internet Services
OrgAbusePhone: [phone]
OrgAbuseEmail: [e-mail]
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE6-ARIN

OrgNOCHandle: SUPPO-ARIN
OrgNOCName: Support ATT Internet Services
OrgNOCPhone: [phone]
OrgNOCEmail: [e-mail]
OrgNOCRef: https://whois.arin.net/rest/poc/SUPPO-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml


$ whois 11.0.0.0
[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=11.0.0.0?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 11.0.0.0 - 11.255.255.255
CIDR: 11.0.0.0/8
NetName: DODIIS
NetHandle: NET-11-0-0-0-1
Parent: ()
NetType: Direct Allocation
OriginAS:
Organization: DoD Network Information Center (DNIC)
RegDate: 1984-01-19
Updated: 2007-08-22
Ref: https://whois.arin.net/rest/net/NET-11-0-0-0-1


OrgName: DoD Network Information Center
OrgId: DNIC
Address: 3990 E. Broad Street
City: Columbus
StateProv: OH
PostalCode: 43218
Country: US
RegDate:
Updated: 2011-08-17
Ref: https://whois.arin.net/rest/org/DNIC


OrgAbuseHandle: REGIS10-ARIN
OrgAbuseName: Registration
OrgAbusePhone: [phone]
OrgAbuseEmail: [e-mail]
OrgAbuseRef: https://whois.arin.net/rest/poc/REGIS10-ARIN

OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName: Network DoD
OrgTechPhone: [phone]
OrgTechEmail: [e-mail]
OrgTechRef: https://whois.arin.net/rest/poc/MIL-HSTMST-ARIN

OrgTechHandle: REGIS10-ARIN
OrgTechName: Registration
OrgTechPhone: [phone]
OrgTechEmail: [e-mail]
OrgTechRef: https://whois.arin.net/rest/poc/REGIS10-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

[AVC]

我这里的运营商第一跳 189.189.190.17 墨西哥呢，有什么奇怪的

[Awoer]

@wdlth
@raysonx DOD 那种没有广播的还好，没什么太大问题。。智障的是有广播的 IP 被拿去用。