{"id":1841,"date":"2024-05-24T17:26:25","date_gmt":"2024-05-24T21:26:25","guid":{"rendered":"https:\/\/www.rfdm.com\/blog\/?p=1841"},"modified":"2024-05-24T23:28:48","modified_gmt":"2024-05-25T03:28:48","slug":"unacknowledged-syns-by-as-autonomous-system-may-17-2024-to-may-23-2024","status":"publish","type":"post","link":"https:\/\/www.rfdm.com\/blog\/?p=1841","title":{"rendered":"Unacknowledged SYNs by AS (autonomous system) May 17, 2024 to May 23, 2024"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">I still have just two of Google&#8217;s \/24&#8217;s blocked in AS 15169: 66.249.66\/24 and 66.249.72\/24.  But connections from these 2 networks accounted for 58,935 unacknowledged SYNs sent to my home network this week.  That&#8217;s more than one every 11 seconds on average.  Should I assume this is all due to Google looking for more training data to prevent their LLM from <a href=\"https:\/\/www.theverge.com\/2024\/5\/23\/24162896\/google-ai-overview-hallucinations-glue-in-pizza\" data-type=\"link\" data-id=\"https:\/\/www.theverge.com\/2024\/5\/23\/24162896\/google-ai-overview-hallucinations-glue-in-pizza\">telling me to put glue on my pizza<\/a>? \ud83d\ude42<\/p>\n\n\n\n<canvas id=\"synChart20240524\" style=\"height:600px;width:100%;display:flex;flex-flow:column;\"><\/canvas>\n<script src=\"https:\/\/cdn.jsdelivr.net\/npm\/chart.js\"><\/script>\n<script>\nnew Chart(document.getElementById('synChart20240524'),\n{type:'bar',data:{labels: ['15169 Google (US)','16509 Amazon (US)','24940 Hetzner Online GmbH (DE)','8075 Microsoft (US)','136907 Huawei cloud (HK)','215766 Emanuel Hosting Ltd. (GB)','13335 Cloudflare (US)','396982 Google Cloud (US)','32934 Facebook (US)','21859 Zenlayer (US)','201814 Mevspace sp. z o.o. (PL)','14061 DigitalOcean (US)','4808 China Unicom (CN)','4134 China Telecom (CN)','57523 Chang Way (HK)','209366 SEMrush CY LTD (CY)','398324 Censys, Inc. (US)','13238 Yandex LLC (RU)','202425 IP Volume inc (SC)','132203 Tencent (CN)','36183 Akamai (US)','14618 Amazon (US)','7922 Comcast Cable (US)','4837 China Unicom (CN)','20473 The Constant Company, LLC (US)'],datasets:[{label:'Unacknowledged SYNs by AS',data:[58935,28448,23877,16100,13812,13536,12166,11285,10249,8380,6893,4029,4010,3647,3562,3030,2475,2095,2059,1920,1899,1896,1794,1765,1637],borderWidth:1,backgroundColor:\"rgba(255,160,0,0.7)\"}]},options:{plugins:{legend:{labels:{color:\"white\"}},title:{color:'white',display:true,font:{size:14},text:'May 17, 2024 00:00 - May 24, 2024 00:00'}},scales:{x:{ticks:{autoSkip:false,color:'white'},title:{text:'autonomous system',color:'white',display:true}},y:{ticks:{color:'white'},title:{text:'Unacknowledged SYNs',color:'white',display:true}}},y:{beginAtZero:true}}});\n<\/script>\n\n\n\n<p class=\"wp-block-paragraph\">Probably worth noting that as of today, I&#8217;m blocking more than 20% of the publicly routable IPv4 address space from my web server.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>% dwmnet -f \/etc\/pf.www_losers\nAddresses: 831,455,990 (19.36% of 2^32, 20.85% of publicly routable unicast)<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>I still have just two of Google&#8217;s \/24&#8217;s blocked in AS 15169: 66.249.66\/24 and 66.249.72\/24. But connections from these 2 networks accounted for 58,935 unacknowledged SYNs sent to my home network this week. That&#8217;s more than one every 11 seconds on average. Should I assume this is all due to Google looking for more training &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.rfdm.com\/blog\/?p=1841\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Unacknowledged SYNs by AS (autonomous system) May 17, 2024 to May 23, 2024&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[93,85,86,12],"tags":[],"class_list":["post-1841","post","type-post","status-publish","format-standard","hentry","category-cloud","category-network-security","category-networks","category-software-development"],"_links":{"self":[{"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1841"}],"version-history":[{"count":9,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1841\/revisions"}],"predecessor-version":[{"id":1850,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1841\/revisions\/1850"}],"wp:attachment":[{"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rfdm.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}