RE: Comcast.net email servers - temporarily blacklisted IP Address errors

2024-06-07 Thread Brotman, Alex via NANOG
Hey folks,

Someone forwarded this directly to my inbox, much appreciated.  We’ll work with 
Martin to get this sorted out.

--
Alex Brotman
Sr. Engineer, Anti-Abuse & Messaging Policy
Comcast

From: NANOG  On Behalf Of 
Martin Cook
Sent: Friday, June 7, 2024 2:15 PM
To: nanog@nanog.org
Subject: Comcast.net email servers - temporarily blacklisted IP Address errors

Hello NANOG,

We recently started getting some complaints from customers experiencing an 
error when trying to access their old Comcast.net email accounts with one of 
their email clients (outlook tbird etc.) via POP3 or IMAP. Web based use of 
their email via the Comcast portal is unaffected.
  "ERR [AUTH] Temporarily blacklisted IP Address - try again later"

These customers are previous Residential HSI subscribers of Comcast who have 
since moved to other internet service providers, including ours, and are still 
allowed to use their old email accounts.

There is a web portal based method for attempting to get individual IP 
addresses removed from the "temporary black list". But due to the number of 
reports we have had in a very short period of time we believe an entire range 
of IP's (possibly a /17) has been blacklisted as of last Friday-ish

We're having difficulty resolving this issue through Comcast customer support 
or the Comcast Security assurance team. So I'm looking to see if anyone from 
Comcast or someone who has had this issue before reach out off-list to assist 
with resolving this headache.



Enjoy N91 next week for all the people attending, stop by to attend Jason 
Rokeach's talk on "meshrr: Hierarchical Route Distribution @ Scale w/ 
Kubernetes on Wednesday!" I'm sure he will have some awesome things to show 
everyone.

Thanks,

Martin Cook


Re: Comcast.net email servers - temporarily blacklisted IP Address errors

2024-06-07 Thread Mike Hammett
https://www.mailop.org/ 




- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 

Midwest-IX 
http://www.midwest-ix.com 

- Original Message -

From: "Martin Cook"  
To: nanog@nanog.org 
Sent: Friday, June 7, 2024 1:15:17 PM 
Subject: Comcast.net email servers - temporarily blacklisted IP Address errors 


Hello NANOG, 


We recently started getting some complaints from customers experiencing an 
error when trying to access their old Comcast.net email accounts with one of 
their email clients (outlook tbird etc.) via POP3 or IMAP. Web based use of 
their email via the Comcast portal is unaffected. 


"ERR [AUTH] Temporarily blacklisted IP Address - try again later" 


These customers are previous Residential HSI subscribers of Comcast who have 
since moved to other internet service providers, including ours, and are still 
allowed to use their old email accounts. 


There is a web portal based method for attempting t o get individual IP 
addresses removed from the "temporary black list". But due to the number of 
reports we have had in a very short period of time we believe an entire range 
of IP's (possibly a /17) has been blacklisted as of last Friday-ish 

We're having difficulty resolving this issue through Comcast customer support 
or the Comcast Security assurance team. So I'm looking to see if anyone from 
Comcast or someone who has had this issue before reach out off-list to assist 
with resolving this headache. 




 
Enjoy N91 next week for all the people attending, stop by to attend Jason 
Rokeach's talk on "meshrr: Hierarchical Route Distribution @ Scale w/ 
Kubernetes on Wednesday!" I'm sure he will have some awesome things to show 
everyone. 


Thanks, 


Martin Cook 



Comcast.net email servers - temporarily blacklisted IP Address errors

2024-06-07 Thread Martin Cook
Hello NANOG,

We recently started getting some complaints from customers experiencing an 
error when trying to access their old Comcast.net email accounts with one of 
their email clients (outlook tbird etc.) via POP3 or IMAP. Web based use of 
their email via the Comcast portal is unaffected.

  "ERR [AUTH] Temporarily blacklisted IP Address - try again later"

These customers are previous Residential HSI subscribers of Comcast who have 
since moved to other internet service providers, including ours, and are still 
allowed to use their old email accounts.

There is a web portal based method for attempting to get individual IP 
addresses removed from the "temporary black list". But due to the number of 
reports we have had in a very short period of time we believe an entire range 
of IP's (possibly a /17) has been blacklisted as of last Friday-ish

We're having difficulty resolving this issue through Comcast customer support 
or the Comcast Security assurance team. So I'm looking to see if anyone from 
Comcast or someone who has had this issue before reach out off-list to assist 
with resolving this headache.



Enjoy N91 next week for all the people attending, stop by to attend Jason 
Rokeach's talk on "meshrr: Hierarchical Route Distribution @ Scale w/ 
Kubernetes on Wednesday!" I'm sure he will have some awesome things to show 
everyone.

Thanks,

Martin Cook


Weekly Global IPv4 Routing Table Report

2024-06-07 Thread Routing Table Analysis Role Account
This is an automated weekly mailing describing the state of the Global
IPv4 Routing Table as seen from APNIC's router in Japan.

The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG
UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG.

Daily listings are sent to bgp-st...@lists.apnic.net.

For historical data, please see https://thyme.apnic.net.

If you have any comments please contact Philip Smith .

IPv4 Routing Table Report   04:00 +10GMT Sat 08 Jun, 2024

  BGP Table (Global) as seen in Japan.

Report Website: https://thyme.apnic.net
Detailed Analysis:  https://thyme.apnic.net/current/

Analysis Summary


BGP routing table entries examined:  952310
Prefixes after maximum aggregation (per Origin AS):  362531
Deaggregation factor:  2.63
Unique aggregates announced (without unneeded subnets):  464792
Total ASes present in the Internet Routing Table: 75901
Prefixes per ASN: 12.55
Origin-only ASes present in the Internet Routing Table:   65054
Origin ASes announcing only one prefix:   26721
Transit ASes present in the Internet Routing Table:   10847
Transit-only ASes present in the Internet Routing Table:540
Average AS path length visible in the Internet Routing Table:   4.3
Max AS path length visible:  60
Max AS path prepend of ASN ( 53153)  57
Prefixes from unregistered ASNs in the Routing Table:   997
Number of instances of unregistered ASNs:   999
Number of 32-bit ASNs allocated by the RIRs:  44691
Number of 32-bit ASNs visible in the Routing Table:   36556
Prefixes from 32-bit ASNs in the Routing Table:  187335
Number of bogon 32-bit ASNs visible in the Routing Table:14
Special use prefixes present in the Routing Table:1
Prefixes being announced from unallocated address space:605
Number of addresses announced to Internet:   3024734848
Equivalent to 180 /8s, 73 /16s and 202 /24s
Percentage of available address space announced:   81.7
Percentage of allocated address space announced:   81.7
Percentage of available address space allocated:  100.0
Percentage of address space in use by end-sites:   99.6
Total number of prefixes smaller than registry allocations:  312161

APNIC Region Analysis Summary
-

Prefixes being announced by APNIC Region ASes:   255145
Total APNIC prefixes after maximum aggregation:   74211
APNIC Deaggregation factor:3.44
Prefixes being announced from the APNIC address blocks:  247236
Unique aggregates announced from the APNIC address blocks:   101269
APNIC Region origin ASes present in the Internet Routing Table:   14205
APNIC Prefixes per ASN:   17.40
APNIC Region origin ASes announcing only one prefix:   4335
APNIC Region transit ASes present in the Internet Routing Table:   1910
Average APNIC Region AS path length visible:4.6
Max APNIC Region AS path length visible: 55
Number of APNIC region 32-bit ASNs visible in the Routing Table:   9598
Number of APNIC addresses announced to Internet:  761679488
Equivalent to 45 /8s, 102 /16s and 78 /24s
APNIC AS Blocks4608-4864, 7467-7722, 9216-10239, 17408-18431
(pre-ERX allocations)  23552-24575, 37888-38911, 45056-46079, 55296-56319,
   58368-59391, 63488-64098, 64297-64395, 131072-153913
APNIC Address Blocks 1/8,  14/8,  27/8,  36/8,  39/8,  42/8,  43/8,
49/8,  58/8,  59/8,  60/8,  61/8, 101/8, 103/8,
   106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8,
   116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8,
   123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8,
   163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8,
   203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8,
   222/8, 223/8,

ARIN Region Analysis Summary


Prefixes being announced by ARIN Region ASes:276985
Total ARIN prefixes after maximum aggregation:   125335
ARIN Deaggregation factor: 2.21
Prefixes being announced from the ARIN address blocks:   281544
Unique aggregates announced from the ARIN address blocks:134667
ARIN Region origin ASes present in the Internet Routing Table:19149
ARIN Prefixes per ASN:

Hosteurope / GoDaddy contact

2024-06-07 Thread Umut Alemdar
Hi,

We are dealing with unannounced SOA record changes from Hosteurope to our
domain.
Is there anyone from Hosteurope / GoDaddy who we could reach out to quickly
resolve this matter?

Thanks,
Umut