Addresses

What these addresses are.

If an address from our network appeared in a log, a firewall rule or an abuse report, this page is the answer. Nothing here is secret: we publish it so nobody has to guess, and so an automated reputation list has something accurate to read.

01

Prefixes

177.177.83.0/24

AS204921

  • Anycast services: the public resolvers, authoritative DNS and the RPKI-to-Router endpoint. Also the source addresses our recursive resolvers and looking glass send from.

2602:f3ff:83::/48

AS204921

  • The same services over IPv6.
02

Reporting something

Write to noc@as204921.net with the address, the timestamp with its time zone, and what you saw. We answer. If a device on your own network is the one talking to our resolvers, it is doing so because something on that device chose to — the resolvers accept queries from anyone and initiate nothing.

03

Route origin

Every prefix above carries a signed ROA for AS204921. A route to one of them from any other origin is not ours, and any validating network will drop it. That is checkable from outside — the looking glass and any public validator will tell you the same thing.

04

What that looks like

What makes a route oursEvery prefix we announce carries a signature for our own AS. A network that validates accepts it and drops the same prefix announced from anywhere else.Our prefixannounced by our ASAny other originwith no signature for itA network that validatesreads the signed originAcceptedDropped
The signature says which AS may announce the prefix. A network that validates accepts the announcement from ours and drops the same prefix announced from anywhere else.