Skip to content
KitploitKITPLOIT
StrumentiExploitsBlog
Log in
Invia
StrumentiExploitsBlog
Invia

Strumenti di Hacking, PenTest e Cybersecurity per il tuo Arsenale di Sicurezza!

Kitploit è una directory di strumenti di hacking, cybersecurity e pentesting. Scopri gli ultimi aggiornamenti dei progetti per trovare vulnerabilità, analizzare sistemi, automatizzare i test e rafforzare la tua sicurezza.

FeedContattoPrivacy© 2026 Kitploit

Directory degli strumenti

Categorie

Vedi tutte le categorie
Loading categories
anycast-census — Longitudinal anycast census system that probes IPv4/IPv6 prefixes via ICMP, TCP, and DNS to detect anycast deployments and geolocate PoPs, publishing daily datasets and an API. | Kitploit
Strumenti/GitHubGitHub/ut-dacs/anycast-census
Packet Sniffing & AnalysisReconnaissanceNetwork MappingInformation GatheringNetwork SecurityPapers & ResearchCurated ResourcesDNS Analysis
GitHubut-dacs/anycast-census

anycast-census

Longitudinal anycast census system that probes IPv4/IPv6 prefixes via ICMP, TCP, and DNS to detect anycast deployments and geolocate PoPs, publishing daily datasets and an API.

Vedi Repository
19817 giorni faNon ancora revisionato
Sito web

Più Popolari

Vedi tutti →

Scopri gli strumenti più utilizzati dalla nostra community.

Esplora tutti gli strumenti

Sfoglia la nostra collezione di strumenti

Vedi tutti gli strumenti →
Condividi
Contenuto non disponibile nella lingua richiesta. Visualizzazione della versione inglese.

LACeS Anycast Census

DOI License: MPL 2.0 Website

LACeS: an Open, Fast, Responsible and Efficient Longitudinal Anycast Census System

Contact: [email protected]

Contents

  • Downloading census data
  • LACeS Explorer — interactive web interface
  • Using the Python helper
  • Understanding the dataset
    • Data recommendations
    • Detection methods
  • Data structure
  • Measurement methodology
  • Running your own census
  • Citation

Downloading census data

Available formats

The parquet files in this repository can be downloaded in alternative formats via the manycast.net REST API:

FormatExample
.parquethttps://manycast.net/api/v1/export/IPv4-latest.parquet
.parquet.gzhttps://manycast.net/api/v1/export/IPv4-latest.parquet.gz
.csv.gzhttps://manycast.net/api/v1/export/IPv4-latest.csv.gz
.json.gzhttps://manycast.net/api/v1/export/IPv4-latest.json.gz

Replace latest with a specific date (e.g., 2026-03-22) to download a historical snapshot. Both IPv4 and IPv6 are available with prefixes IPv4- and IPv6-.

Example:

curl -O https://manycast.net/api/v1/export/IPv4-2026-03-22.csv.gz

See the full API documentation for querying individual prefixes, ASNs, and daily statistics.

LACeS Explorer — interactive web interface

We provide an interactive dashboard for querying, visualizing, and exploring the census data:

Search & lookup. Enter any IP address, prefix, ASN, domain, or TLD to look up anycast status, geolocation of detected PoPs, and related network information. Historical snapshots are available for all census dates since March 21, 2024.

Compare mode. Select two different census dates to track how anycast deployment changed over time.

RIPE Atlas integration. Run the geolocation algorithm on public RIPE Atlas results.

Analytics. Statistics over time, anycast by region, Hilbert curve of anycast space, ...

Using the Python helper

The census_helper.py file provides convenience functions for downloading and filtering the dataset. Requires pandas, pyarrow, and requests.

Basic usage

import census_helper

# Download latest snapshot and filter to high-confidence anycast prefixes
census = census_helper.download_latest("v4")
anycast = census_helper.filter_anycast(census, "v4")

# Or use comprehensive coverage (includes borderline cases)
anycast = census_helper.filter_anycast(census, "v4", confidence="comprehensive")

Command-line usage

python census_helper.py --ip-version v4 --date latest --prefixes-only
python census_helper.py --ip-version v4 --date 2026-03-22 --confidence comprehensive

Understanding the dataset

Data recommendations

Depending on requirements we recommend the following filtering:

High confidence:

(AB > 3) || (GCD > 1)

Comprehensive coverage:

(AB > 1) || (GCD > 1)

Detection methods

The census uses two detection methods:

Anycast-based (AB): Detects anycast using anycast. A prefix is considered anycast if multiple PoPs receive replies. See MAnycast2 for details. Three probe protocols are used: ICMP/ping, TCP SYN/ACK, and DNS/UDP.

  • False positives (FPs): This method is known to produce FPs, especially when the number of receiving PoPs is < 4.

Latency-based (GCD): Detects anycast using latency measurements and Great-Circle-Distance calculations.

  • False negatives (FNs): Highly accurate, but struggles with detecting regional anycast (i.e., anycast deployed within a tight geographic area).

NOTE We provide unicast geolocation results when AB > 1 but GCD == 1. This may help with determining whether AB results are FPs or GCD results are FNs.

Data structure

File paths

Latest files (updated daily):

IPv4-latest.parquet
IPv6-latest.parquet
IPv4-latest.csv
IPv6-latest.csv
stats-latest

Historical files (since March 21, 2024):

YYYY/MM/DD/IPv4.parquet
YYYY/MM/DD/IPv6.parquet
YYYY/MM/DD/IPv4.csv
YYYY/MM/DD/IPv6.csv
YYYY/MM/DD/stats

Columns

ColumnDescription
prefixThe candidate anycast prefix: /24 for IPv4 (e.g., 1.0.0.0/24), /48 for IPv6
AB_ICMPv4/v6Locations found using anycast-based method (ICMP)
AB_TCPv4/v6Locations found using anycast-based method (TCP SYNACK)
AB_DNSv4/v6Locations found using anycast-based method (DNS/UDP)
GCD_ICMPv4/v6Locations found using latency-based method (ICMP)
GCD_TCPv4/v6Locations found using latency-based method (TCP)
partialWhether partial anycast was detected (IPv4 only)
backing_prefixCorresponding IP routing table prefix (RouteViews)
ASNASN(s) announcing the prefix (MOASes separated by ;)
locationsOne entry per geolocated location (see below)

Locations column

FieldDescription
idGeoNames ID of the city, or NoCity when no candidate city lies within the RTT disc
cityCity the site is placed in, using iGreedy's algorithm (the most populous candidate)
country_code2-character country code (ISO 3166-1 alpha-2)
latCity latitude
lonCity longitude
candidate_diameterMaximum pairwise distance (km) between surviving candidate cities; smaller values indicate higher precision
num_constraintsNumber of overlapping discs that refined the candidate set; higher values indicate higher confidence in the result

Note: Geolocation is at airport granularity for dates before 2026-10-03 ( id contains an IATA 3-letter airport code before)

CSV format

Limited data is provided in CSV format for ease of access via GitHub's Web UI:

prefix,number_of_sites,backing_prefix
1.1.1.0/24,67,1.1.1.0/24

Measurement methodology

Targets

Each probe protocol (ICMP, TCP, DNS) has its own hitlist per IP version, with several ranked targets per /24 (IPv4) or /48 (IPv6). We probe the ranked targets of a prefix iteratively, stopping once one responds, to reduce probing costs (see MAnycastR's ranked hitlists). The order of sources below are the order of probing preference.

Scarica lo strumento