多线BGP鉴定

 有公网ip的机器上

root@PORT:~# traceroute -A www.dyxnet.com
traceroute to www.dyxnet.com (202.134.64.17), 30 hops max, 60 byte packets
 1  210.22.22.129 (210.22.22.129) [AS17623]  1.593 ms  1.727 ms  1.818 ms
 2  120.80.156.93 (120.80.156.93) [AS17623]  4.298 ms 120.80.167.165 (120.80.167.165) [AS17623]  4.537 ms 120.80.156.89 (120.80.156.89) [AS17623]  3.693 ms
 3  112.96.0.81 (112.96.0.81) [AS17816/AS4837]  5.112 ms 120.86.0.41 (120.86.0.41) [AS17816]  9.900 ms 112.96.0.81 (112.96.0.81) [AS17816/AS4837]  7.899 ms
 4  219.158.19.66 (219.158.19.66) [AS4837]  9.807 ms 219.158.8.122 (219.158.8.122) [AS4837]  6.879 ms 219.158.103.42 (219.158.103.42) [AS4837]  7.887 ms
 5  219.158.24.134 (219.158.24.134) [AS4837]  7.200 ms  15.168 ms 219.158.96.209 (219.158.96.209) [AS4837]  10.676 ms
 6  219.158.10.30 (219.158.10.30) [AS4837]  18.259 ms  17.446 ms  13.075 ms
 7  219.158.40.234 (219.158.40.234) [AS4837]  12.487 ms  11.106 ms  11.150 ms
 8  202.84.153.53 (202.84.153.53) [AS4637]  42.944 ms  42.888 ms i-0-1-1-4.hkhh-core02.bi.telstraglobal.net (202.84.154.237) [AS4637]  159.077 ms
 9  i-97.hkgg01.telstraglobal.net (202.84.156.54) [AS4637]  14.679 ms  14.828 ms  14.875 ms
10  unknown.telstraglobal.net (134.159.208.158) [AS4637]  13.638 ms  13.667 ms  13.615 ms
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *
root@PORT:~# 
root@PORT:~# whois 202.134.94.89
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '202.134.64.0 - 202.134.95.255'

% Abuse contact for '202.134.64.0 - 202.134.95.255' is 'abuse@dyxnet.com'

inetnum:        202.134.64.0 - 202.134.95.255
netname:        DIYIXIAN
descr:          Diyixian.com Limited
country:        HK
org:            ORG-DL2-AP
admin-c:        ND17-AP
tech-c:         ND17-AP
abuse-c:        AD757-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-HK-DIYIXIAN
mnt-routes:     MAINT-HK-DIYIXIAN
mnt-irt:        IRT-DIYIXIAN-HK
last-modified:  2020-06-22T05:36:39Z
source:         APNIC

irt:            IRT-DIYIXIAN-HK
address:        25/F Global Gateway,
address:        168 Yeung Uk Rd,
address:        Tsuen Wan,
address:        Hong Kong.
e-mail:         noc@dyxnet.com
abuse-mailbox:  abuse@dyxnet.com
admin-c:        ND17-AP
tech-c:         ND17-AP
auth:           # Filtered
remarks:        abuse@dyxnet.com was validated on 2020-06-22
remarks:        noc@dyxnet.com was validated on 2020-06-22
mnt-by:         MAINT-HK-DIYIXIAN
last-modified:  2020-06-22T05:35:42Z
source:         APNIC

organisation:   ORG-DL2-AP
org-name:       Diyixian.com Limited
country:        HK
address:        37/F, Tower 1, Metroplaza,
address:        223 Hing Fong Road,
address:        Kwai Fong,
address:        New Territories,
phone:          +852-2187-7600
fax-no:         +852-2187-7677
e-mail:         peering@dyxnet.com
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2017-08-29T23:20:52Z
source:         APNIC

role:           ABUSE DIYIXIANHK
address:        25/F Global Gateway,
address:        168 Yeung Uk Rd,
address:        Tsuen Wan,
address:        Hong Kong.
country:        ZZ
phone:          +000000000
e-mail:         noc@dyxnet.com
admin-c:        ND17-AP
tech-c:         ND17-AP
nic-hdl:        AD757-AP
remarks:        Generated from irt object IRT-DIYIXIAN-HK
abuse-mailbox:  abuse@dyxnet.com
mnt-by:         APNIC-ABUSE
last-modified:  2020-06-22T05:36:39Z
source:         APNIC

person:         DYX NOC
nic-hdl:        ND17-AP
e-mail:         noc@dyxnet.com
address:        Unit 2501,
address:        25/F Global Gateway,
address:        168 Yeung Uk Rd,
address:        Tsuen Wan,
address:        Hong Kong.
phone:          +852-3152-2626
fax-no:         +852-3152-5024
country:        HK
mnt-by:         MAINT-HK-GENESIS
last-modified:  2008-09-04T07:29:32Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.15-SNAPSHOT (WHOIS-NODE2)


root@PORT:~# 
root@PORT:~# whois AS9584
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to 'AS9216 - AS10239'

as-block:       AS9216 - AS10239
descr:          APNIC ASN block
remarks:        These AS numbers are further assigned by APNIC
remarks:        to APNIC members and end-users in the APNIC region
admin-c:        HM20-AP
tech-c:         HM20-AP
mnt-by:         APNIC-HM
mnt-lower:      APNIC-HM
last-modified:  2009-05-19T07:00:23Z
source:         APNIC

role:           APNIC Hostmaster
address:        6 Cordelia Street
address:        South Brisbane
address:        QLD 4101
country:        AU
phone:          +61 7 3858 3100
fax-no:         +61 7 3858 3199
e-mail:         helpdesk@apnic.net
admin-c:        AMS11-AP
tech-c:         AH256-AP
nic-hdl:        HM20-AP
remarks:        Administrator for APNIC
notify:         hostmaster@apnic.net
mnt-by:         MAINT-APNIC-AP
last-modified:  2013-10-23T04:06:51Z
source:         APNIC

% Information related to 'AS9584'

% Abuse contact for 'AS9584' is 'abuse@dyxnet.com'

aut-num:        AS9584
as-name:        GENESIS-AP
descr:          Diyixian.com Limited
country:        HK
import:         from AS4635 action pref=90; accept ANY
import:         from AS4058 action pref=100; accept ANY
import:         from AS4637 action pref=100; accept ANY
export:         to AS4635 announce AS9584
export:         to AS4058 announce AS9584
export:         to AS4637 announce AS9584
default:        to AS4058 action pref=100; networks ANY
org:            ORG-DL2-AP
admin-c:        LM29-AP
tech-c:         MY23-AP
abuse-c:        AG788-AP
mnt-lower:      MAINT-HK-GENESIS
mnt-routes:     MAINT-HK-GENESIS
mnt-by:         APNIC-HM
mnt-irt:        IRT-GEN-NET-HK
last-modified:  2020-06-22T05:36:41Z
source:         APNIC

irt:            IRT-GEN-NET-HK
address:        Unit 2501, Global Gateway (HK),
address:        168 Yeung Uk Road,
address:        Tsuen Wan,
address:        Hong Kong.
e-mail:         noc@dyxnet.com
abuse-mailbox:  abuse@dyxnet.com
admin-c:        ND17-AP
tech-c:         ND17-AP
auth:           # Filtered
remarks:        abuse@dyxnet.com was validated on 2020-06-22
remarks:        noc@dyxnet.com was validated on 2020-06-22
mnt-by:         MAINT-HK-GENESIS
last-modified:  2020-06-22T05:35:42Z
source:         APNIC

organisation:   ORG-DL2-AP
org-name:       Diyixian.com Limited
country:        HK
address:        37/F, Tower 1, Metroplaza,
address:        223 Hing Fong Road,
address:        Kwai Fong,
address:        New Territories,
phone:          +852-2187-7600
fax-no:         +852-2187-7677
e-mail:         peering@dyxnet.com
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2017-08-29T23:20:52Z
source:         APNIC

role:           ABUSE GENNETHK
address:        Unit 2501, Global Gateway (HK),
address:        168 Yeung Uk Road,
address:        Tsuen Wan,
address:        Hong Kong.
country:        ZZ
phone:          +000000000
e-mail:         noc@dyxnet.com
admin-c:        ND17-AP
tech-c:         ND17-AP
nic-hdl:        AG788-AP
remarks:        Generated from irt object IRT-GEN-NET-HK
abuse-mailbox:  abuse@dyxnet.com
mnt-by:         APNIC-ABUSE
last-modified:  2020-06-22T05:36:41Z
source:         APNIC

person:         Lap Man
address:        Unit 7-10, 27/F, Prosperity Center,
address:        25 Chong Yip Street,
address:        Ngau Tau Kok,
address:        Kowloon, Hong Kong.
country:        HK
phone:          +852-2187-7631
fax-no:         +852-2787-7677
e-mail:         manlap@diyixian.com
nic-hdl:        LM29-AP
mnt-by:         MAINT-HK-GENESIS
last-modified:  2008-09-04T07:29:14Z
source:         APNIC

person:         Max Yeung
address:        Unit 7-10, 27/F, Prosperity Center,
address:        25 Chong Yip Street,
address:        Ngau Tau Kok,
address:        Kowloon, Hong Kong.
country:        HK
phone:          +852-2187-7661
fax-no:         +852-2187-7677
e-mail:         maxy@diyixian.com
nic-hdl:        MY23-AP
mnt-by:         MAINT-HK-GENESIS
last-modified:  2008-09-04T07:29:14Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.15-SNAPSHOT (WHOIS-NODE2)


root@PORT:~# 
root@PORT:~# whois AS4635
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to 'AS4608 - AS4865'

as-block:       AS4608 - AS4865
descr:          APNIC ASN block
remarks:        These AS numbers are further assigned by APNIC
remarks:        to APNIC members and end-users in the APNIC region
admin-c:        HM20-AP
tech-c:         HM20-AP
mnt-by:         APNIC-HM
mnt-lower:      APNIC-HM
last-modified:  2019-05-20T03:52:26Z
source:         APNIC

role:           APNIC Hostmaster
address:        6 Cordelia Street
address:        South Brisbane
address:        QLD 4101
country:        AU
phone:          +61 7 3858 3100
fax-no:         +61 7 3858 3199
e-mail:         helpdesk@apnic.net
admin-c:        AMS11-AP
tech-c:         AH256-AP
nic-hdl:        HM20-AP
remarks:        Administrator for APNIC
notify:         hostmaster@apnic.net
mnt-by:         MAINT-APNIC-AP
last-modified:  2013-10-23T04:06:51Z
source:         APNIC

% Information related to 'AS4635'

% Abuse contact for 'AS4635' is 'noc-admin@hkix.net'

aut-num:        AS4635
as-name:        HKIX-RS1
descr:          Hong Kong Internet Exchange--Route Server 1
descr:          The Hong Kong Internet Exchange Limited
country:        HK
org:            ORG-THKI1-AP
admin-c:        HKIE1-AP
tech-c:         HKIE1-AP
abuse-c:        AH919-AP
mnt-lower:      MAINT-HKIX-HK
mnt-routes:     MAINT-HKIX-HK
mnt-by:         APNIC-HM
mnt-irt:        IRT-HKIX1-HK
last-modified:  2020-06-22T06:03:28Z
source:         APNIC

irt:            IRT-HKIX1-HK
address:        Pi ch'iu Building, The Chinese University of Hong Kong, Shatin N.T.
e-mail:         noc-admin@hkix.net
abuse-mailbox:  noc-admin@hkix.net
admin-c:        HKIE1-AP
tech-c:         HKIE1-AP
auth:           # Filtered
remarks:        noc-admin@hkix.net was validated on 2020-06-22
mnt-by:         MAINT-HKIX-HK
last-modified:  2020-06-22T06:03:14Z
source:         APNIC

organisation:   ORG-THKI1-AP
org-name:       The Hong Kong Internet Exchange Limited
country:        HK
address:        Room 801, 8/F., Wu Ho Man Yuen Bldg.
address:        The Chinese University of Hong Kong
phone:          +852-39438800
fax-no:         +852-26035001
e-mail:         noc-admin@hkix.net
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2019-12-19T12:55:58Z
source:         APNIC

role:           ABUSE HKIX1HK
address:        Pi ch'iu Building, The Chinese University of Hong Kong, Shatin N.T.
country:        ZZ
phone:          +000000000
e-mail:         noc-admin@hkix.net
admin-c:        HKIE1-AP
tech-c:         HKIE1-AP
nic-hdl:        AH919-AP
remarks:        Generated from irt object IRT-HKIX1-HK
abuse-mailbox:  noc-admin@hkix.net
mnt-by:         APNIC-ABUSE
last-modified:  2020-06-22T06:03:28Z
source:         APNIC

role:           Hong Kong Internet Exchange Network Admin
address:        Pi Chiu Building, The Chinese University of Hong Kong, Shatin, N.T.
country:        HK
phone:          +852-39438800
e-mail:         noc-admin@hkix.net
admin-c:        HKIE1-AP
tech-c:         HKIE1-AP
nic-hdl:        HKIE1-AP
notify:         noc-admin@hkix.net
mnt-by:         MAINT-HKIX-HK
last-modified:  2019-01-08T08:44:26Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.15-SNAPSHOT (WHOIS-NODE1)


root@PORT:~# 

香港第一线集团是香港的一个IDC服务商

在这里以香港第一线集团网站(www.dyxnet.com)为例说明其所属的数据中心是几线BGP接入

1、首先通过traceroute命令查询网站IP对应的AS号

traceroute -A www.dyxnet.com

通过IP和AS自治系统号判断数据中心是几线BGP接入-1334245-1

我们得到香港第一线集团网站IP地址是202.134.93.74,其所属的数据中心AS号是9584,对应的出口IP地址是202.134.94.89

今天很奇怪的是只有在广东的服务器上面才能traceroute出某个ip地址的结果,可能全国大网做了什么限制traceroute

2、通过whois命令查询香港第一线AS号的出口IP归属

whois 202.134.94.89

通过IP和AS自治系统号判断数据中心是几线BGP接入-1334245-2

可以看到202.134.64.0 - 202.134.95.255 这一段ip地址都是属于香港第一线集团的,其网站IP地址202.134.93.74正是在这一段IP地址内。

3、通过whois命令查询香港第一线集团数据中心是几线BGP接入

whois AS9584

通过IP和AS自治系统号判断数据中心是几线BGP接入-1334245-3

在这里可以看到,香港第一线集团的AS号9584和AS4635、AS4058、AS4637建立了BGP连接,是一个三线BGP。

我们还可以继续查这3个AS对应的相关信息

通过IP和AS自治系统号判断数据中心是几线BGP接入-1334245-4

AS4635是来自香港中文大学的一个互联网路由出口

AS4058就更强大了,和几十个AS自治系统互联!

原文地址:https://www.cnblogs.com/dream397/p/13408055.html