{"id":1832,"date":"2024-05-21T03:01:04","date_gmt":"2024-05-21T07:01:04","guid":{"rendered":"https:\/\/www.rfdm.com\/blog\/?p=1832"},"modified":"2024-05-21T03:04:43","modified_gmt":"2024-05-21T07:04:43","slug":"unacknowledged-syns-by-as-autonomous-system-may-20-2024","status":"publish","type":"post","link":"https:\/\/www.rfdm.com\/blog\/?p=1832","title":{"rendered":"Unacknowledged SYNs by AS (autonomous system) May 20, 2024"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Congratulations to Hetzner Online for hosting douchebag of the day (144.76.72.24, i.e. static.24.72.76.144.clients.your-server.de).  I&#8217;ve had all of Hetzner Online&#8217;s address space blocked from my web server for a long time due to this sort of thing (their customers running braindead bots).  They&#8217;re another AS I&#8217;d recommend completely blocking from your web site.<\/p>\n\n\n\n<canvas id=\"synChart20240521\" style=\"height:600px;width:100%;display:flex;flex-flow:column;\"><\/canvas>\n<script src=\"https:\/\/cdn.jsdelivr.net\/npm\/chart.js\"><\/script>\n<script>\nnew Chart(document.getElementById('synChart20240521'),\n{type:'bar',data:{labels: ['24940 Hetzner Online GmbH (DE)','15169 Google (US)','16509 Amazon (US)','8075 Microsoft (US)','32934 Facebook (US)','215766 Emanuel Hosting Ltd. (GB)','396982 Google Cloud (US)','21859 Zenlayer (US)','13335 Cloudflare (US)','20473 The Constant Company, LLC (US)','22616 Zscaler, Inc. (US)','4808 China Unicom (CN)','57523 Chang Way (HK)','14618 Amazon (US)','136907 Huawei cloud (HK)','209366 SEMrush CY LTD (CY)','14061 DigitalOcean (US)','4134 China Telecom (CN)','132203 Tencent (CN)','147277 C FIBER COMMUNICATIONS PVT LTD (IN)','4847 China Networks Inter-Exchange (CN)','209 CenturyLink (US)','398324 Censys, Inc. (US)','3356 LEVEL3 (US)','202425 IP Volume inc (SC)'],datasets:[{label:'Unacknowledged SYNs by AS',data:[22745,7429,3942,1993,1954,1938,1416,1379,1347,922,770,643,580,570,563,504,504,467,380,373,369,363,344,285,280],borderWidth:1,backgroundColor:\"rgba(255,160,0,0.7)\"}]},options:{plugins:{legend:{labels:{color:\"white\"}},title:{color:'white',display:true,font:{size:14},text:'May 20, 2024 00:00 - May 21, 2024 00:00'}},scales:{x:{ticks:{autoSkip:false,color:'white'},title:{text:'autonomous system',color:'white',display:true}},y:{ticks:{color:'white'},title:{text:'Unacknowledged SYNs',color:'white',display:true}}},y:{beginAtZero:true}}});\n<\/script>\n\n\n\n<p class=\"wp-block-paragraph\">If it helps anyone, here&#8217;s a list of the routes currently originating from Hetzner&#8217;s AS 24940.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>5.9\/16\n5.75.128\/17\n23.88.0\/17\n37.27\/16\n45.136.70\/23\n45.145.227\/24\n45.148.28\/22\n46.4\/16\n49.12\/15\n65.21\/16\n65.108\/15\n78.46\/15\n78.138.62\/24\n85.10.192\/18\n88.99\/16\n88.198\/16\n89.42.83\/24\n91.107.128\/17\n91.190.240\/21\n91.233.8\/22\n94.130\/16\n95.216\/15\n116.202\/15\n128.140.0\/17\n135.181\/16\n136.243\/16\n138.201\/16\n142.132.128\/17\n144.76\/16\n148.251\/16\n157.90\/16\n159.69\/16\n162.55\/16\n167.233\/16\n167.235\/16\n168.119\/16\n171.25.225\/24\n176.9\/16\n178.63\/16\n178.212.75\/24\n185.50.120\/23\n185.107.52\/22\n185.126.28\/22\n185.157.83\/24\n185.157.176\/22\n185.171.224\/22\n185.189.228\/22\n185.213.45\/24\n185.216.237\/24\n185.226.99\/24\n185.228.8\/23\n185.242.76\/24\n185.253.111\/24\n188.34.128\/17\n188.40\/16\n188.245\/16\n193.25.170\/23\n193.110.6\/23\n193.163.198\/24\n194.42.180\/22\n194.42.184\/22\n194.62.106\/24\n195.60.226\/24\n195.201\/16\n195.248.224\/24\n197.242.84\/22\n201.131.3\/24\n204.29.146\/24\n213.133.96\/19\n213.232.193\/24\n213.239.192\/18\n216.55.108\/22\n217.78.237\/24\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Congratulations to Hetzner Online for hosting douchebag of the day (144.76.72.24, i.e. static.24.72.76.144.clients.your-server.de). I&#8217;ve had all of Hetzner Online&#8217;s address space blocked from my web server for a long time due to this sort of thing (their customers running braindead bots). They&#8217;re another AS I&#8217;d recommend completely blocking from your web site. If it helps &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.rfdm.com\/blog\/?p=1832\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Unacknowledged SYNs by AS (autonomous system) May 20, 2024&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[93,85,86,12],"tags":[],"class_list":["post-1832","post","type-post","status-publish","format-standard","hentry","category-cloud","category-network-security","category-networks","category-software-development"],"_links":{"self":[{"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1832","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1832"}],"version-history":[{"count":7,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1832\/revisions"}],"predecessor-version":[{"id":1839,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1832\/revisions\/1839"}],"wp:attachment":[{"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1832"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1832"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1832"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}