Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
anycast-census — Longitudinal anycast census system that probes IPv4/IPv6 prefixes via ICMP, TCP, and DNS to detect anycast deployments and geolocate PoPs, publishing daily datasets and an API. | Kitploit
Tools/GitHubGitHub/ut-dacs/anycast-census
Packet Sniffing & AnalysisReconnaissanceNetwork MappingInformation GatheringNetwork SecurityPapers & ResearchCurated ResourcesDNS Analysis
GitHubut-dacs/anycast-census

anycast-census

Longitudinal anycast census system that probes IPv4/IPv6 prefixes via ICMP, TCP, and DNS to detect anycast deployments and geolocate PoPs, publishing daily datasets and an API.

18118h 49m agoNot yet reviewed
View Repository
Website

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

LACeS Anycast Census

DOI License: MPL 2.0 Website

LACeS: an Open, Fast, Responsible and Efficient Longitudinal Anycast Census System

Contact: [email protected]

Contents

  • Downloading census data
  • LACeS Explorer — interactive web interface
  • Using the Python helper
  • Understanding the dataset
    • Data recommendations
    • Detection methods
  • Data structure
    • Columns
    • Geolocation accuracy metrics
    • Unicast geolocation results
  • Measurement methodology
  • Running your own census
  • Citation
  • Downloading census data

    Available formats

    The parquet files in this repository can be downloaded in alternative formats via the manycast.net REST API:

    FormatExample
    .parquethttps://manycast.net/api/v1/export/IPv4-latest.parquet
    .parquet.gzhttps://manycast.net/api/v1/export/IPv4-latest.parquet.gz
    .csv.gzhttps://manycast.net/api/v1/export/IPv4-latest.csv.gz
    .json.gzhttps://manycast.net/api/v1/export/IPv4-latest.json.gz

    Replace latest with a specific date (e.g., 2026-03-22) to download a historical snapshot. Both IPv4 and IPv6 are available with prefixes IPv4- and IPv6-.

    Example:

    root@kitploit:~
    curl -O https://manycast.net/api/v1/export/IPv4-2026-03-22.csv.gz
    

    See the full API documentation for querying individual prefixes, ASNs, and daily statistics.

    LACeS Explorer — interactive web interface

    We provide an interactive dashboard for querying, visualizing, and exploring the census data:

    Search & lookup. Enter any IP address, prefix, ASN, domain, or TLD to look up anycast status, geolocation of detected PoPs, and related network information. Historical snapshots are available for all census dates since March 21, 2024.

    Compare mode. Select two different census dates to track how anycast deployment changed over time.

    RIPE Atlas integration. Run the geolocation algorithm on public RIPE Atlas results.

    Analytics. Statistics over time, anycast by region, Hilbert curve of anycast space, ...

    Using the Python helper

    The census_helper.py file provides convenience functions for downloading and filtering the dataset. Requires pandas, pyarrow, and requests.

    Basic usage

    root@kitploit:~
    import census_helper
    
    # Download latest snapshot and filter to high-confidence anycast prefixes
    census = census_helper.download_latest("v4")
    anycast = census_helper.filter_anycast(census, "v4")
    
    # Or use comprehensive coverage (includes borderline cases)
    anycast = census_helper.filter_anycast(census, "v4", confidence="comprehensive")
    

    Command-line usage

    root@kitploit:~
    python census_helper.py --ip-version v4 --date latest --prefixes-only
    python census_helper.py --ip-version v4 --date 2026-03-22 --confidence comprehensive
    

    Understanding the dataset

    Data recommendations

    Depending on requirements we recommend the following filtering:

    High confidence:

    root@kitploit:~
    (AB > 3) || (GCD > 1)
    

    Comprehensive coverage:

    root@kitploit:~
    (AB > 1) || (GCD > 1)
    

    Detection methods

    The census uses two detection methods:

    Anycast-based (AB): Detects anycast using anycast. A prefix is considered anycast if multiple PoPs receive replies. See MAnycast2 for details. Three probe protocols are used: ICMP/ping, TCP SYN/ACK, and DNS/UDP.

    • False positives (FPs): This method is known to produce FPs, especially when the number of receiving PoPs is < 4.

    Latency-based (GCD): Detects anycast using latency measurements and Great-Circle-Distance calculations.

    • False negatives (FNs): Highly accurate, but struggles with detecting regional anycast (i.e., anycast deployed within a tight geographic area).

    NOTE We provide unicast geolocation results when AB > 1 but GCD == 1. This may help with determining whether AB results are FPs or GCD results are FNs.

    Data structure

    File paths

    Latest files (updated daily):

    root@kitploit:~
    IPv4-latest.parquet
    IPv6-latest.parquet
    IPv4-latest.csv
    IPv6-latest.csv
    stats-latest
    

    Historical files (since March 21, 2024):

    root@kitploit:~
    YYYY/MM/DD/IPv4.parquet
    YYYY/MM/DD/IPv6.parquet
    YYYY/MM/DD/IPv4.csv
    YYYY/MM/DD/IPv6.csv
    YYYY/MM/DD/stats
    

    Columns

    ColumnDescription
    prefixThe candidate anycast /24 prefix (e.g., 1.0.0.0/24)
    AB_ICMPv4/v6Locations found using anycast-based method (ICMP)
    AB_TCPv4/v6Locations found using anycast-based method (TCP SYNACK)
    AB_DNSv4/v6Locations found using anycast-based method (DNS/UDP)
    GCD_ICMPv4/v6Sites found using latency-based method (ICMP)
    GCD_TCPv4/v6Sites found using latency-based method (TCP)
    partialWhether partial anycast was detected (IPv4 only)
    backing_prefixCorresponding IP routing table prefix (RouteViews)
    ASNASN(s) announcing the prefix (MOASes separated by ;)
    locationsDetailed geolocation data from detected sites (see below)

    Locations column

    FieldDescription
    cityGeolocated city using iGreedy's algorithm
    country_code2-character country code (ISO 3166-1 alpha-2)
    airport_codeNearest airport IATA 3-letter code
    latAirport latitude
    lonAirport longitude
    radiusRadius of the RTT disc in kilometers
    candidate_diameterMaximum pairwise distance (km) between surviving candidate cities; smaller values indicate higher precision
    num_constraintsNumber of overlapping discs that refined the candidate set; higher values indicate higher confidence in the result

    The last three fields help in determining the confidence of geolocation results.

    CSV format

    Limited data is provided in CSV format for ease of access via GitHub's Web UI:

    root@kitploit:~
    prefix,number_of_sites,backing_prefix
    1.1.1.0/24,67,1.1.1.0/24
    

    Measurement methodology

    IPv4 targets

    We use the USC/ISI ANT IPv4 hitlist (ranked ICMP/ping responsive IP addresses per /24), supplemented by:

    • Public DNS nameservers
    • OpenINTEL infra:ns records

    IPv6 targets

    We use:

    • AAAA records from OpenINTEL
    • IPv6Hitlist
    • IPv6-SRA from TU Dresden and HAW Hamburg

    Partial anycast

    To minimize daily probing impact, we scan at /24 granularity. However, some prefixes contain mixed unicast and anycast IP addresses (see paper for details) which we detect using multi-target probing.

    Running your own census

    We make all measurement and analysis tooling publicly available under the MPL 2.0 license:

    Measurement tooling

    MAnycastR provides implementations for AB and GCD measurements

    Geolocation

    MiGreedy is our optimized implementation of iGreedy's algorithm for IP geolocation, designed for large-scale production censuses. It supports unicast geolocation, improved detection using intersection, and confidence/accuracy metrics.

    Citation

    When using this dataset for academic research, please cite the following paper:

    root@kitploit:~
    @inproceedings{10.1145/3730567.3764484,
      author = {Hendriks, Remi and Luckie, Matthew and Jonker, Mattijs and van Rijswijk-Deij, Roland},
      title = {LACeS: an Open, Fast, Responsible and Efficient Longitudinal Anycast Census System},
      year = {2025},
      booktitle = {Proceedings of the 2025 Internet Measurement Conference}
    }
    
    Download Tool