Skip to content

api.aspirecloud.net unreachable from certain Taiwan cable modem IP ranges (AS9676 / Savecom) #50

@gslin

Description

@gslin

Summary

api.aspirecloud.net is unreachable when accessed from a Taiwan cable modem connection routed through AS9676 (Savecom / TBC), while it works fine from HiNet (AS3462). This suggests the destination or an upstream provider may be blocking or dropping traffic from specific source IP ranges.

Environment

  • Failing connection: Taiwan cable modem (Savecom / TBC, AS9676), public IP 61.63.211.227
  • Working connection: Taiwan HiNet (AS3462)

Details

Cable modem (NOT working)

The traceroute from the cable modem connection routes through AS3491 (PCCW Global) and reaches AS7122 (Bell MTS) infrastructure, but the connection ultimately fails. Notably, hop 20 shows 90% packet loss at 64-4-72-102.dedicated.bellmts.net, and the trace never reaches the final destination in AS21774.

mtr -wz --report api.aspirecloud.net

HOST: earth                                       Loss%   Snt   Last   Avg  Best  Wrst StDev
  1. AS???    192.168.0.1                          0.0%    10    0.4   0.5   0.2   1.3   0.3
  2. AS???    10.53.255.254                        0.0%    10    8.0   8.1   3.9  11.1   2.0
  3. AS???    192.168.35.22                        0.0%    10   10.4  10.1   7.6  12.2   1.3
  4. AS???    192.168.33.13                        0.0%    10    7.2   7.9   6.9   9.4   0.9
  5. AS???    10.248.0.30                          0.0%    10   10.0   8.3   6.9  10.1   1.1
  6. AS9676   206-14-73-211.savecom.net.tw         0.0%    10    8.1   7.4   3.5   8.6   1.5
  7. AS7656   24-6-209-210.savecom.net.tw          0.0%    10    8.8   8.1   7.0   9.2   0.8
  8. AS3491 31713BE3-20.br02.tap04.as3491.net         0.0%    10    8.4   9.1   8.3  10.3   0.7
  9. AS3491 31713TenGE0-3-0-1.br03.sea01.as3491.net   0.0%    10  126.8 127.2 125.9 128.1   0.7
 10. AS3491 31713TenGE0-3-0-1.br03.sea01.as3491.net   0.0%    10  128.4 127.6 126.1 131.2   1.5
 11. AS3491   205.177.32.38                        0.0%    10  127.0 126.9 122.3 132.7   2.5
 12. AS???    ???                                 100.0    10    0.0   0.0   0.0   0.0   0.0
 13. AS???    ???                                 100.0    10    0.0   0.0   0.0   0.0   0.0
 14. AS???    142.124.126.138                      0.0%    10  156.7 157.3 155.1 159.4   1.3
 15. AS???    64.230.52.201                        0.0%    10  158.1 156.6 154.7 160.2   1.7
 16. AS577    mts_bx1-winnipeg01.net.bell.ca       0.0%    10  155.9 155.4 154.3 159.1   1.4
 17. AS7122   wnpgmb02zx3-p01-be4.as7122.net       0.0%    10  156.0 157.3 155.4 159.8   1.2
 18. AS7122   142.161.128.13                       0.0%    10  157.1 157.4 156.0 160.1   1.1
 19. AS???    ???                                 100.0    10    0.0   0.0   0.0   0.0   0.0
 20. AS7122   64-4-72-102.dedicated.bellmts.net   90.0%    10  155.2 155.2 155.2 155.2   0.0

Public IP: 61.63.211.227

HiNet (working)

The traceroute from HiNet routes through AS174 (Cogent) and successfully reaches the destination in AS21774.

mtr -wz --report api.aspirecloud.net

HOST: GSLINHOME                                      Loss%   Snt   Last   Avg  Best  Wrst StDev
  1. AS3462   h254.s98.ts.hinet.net                   0.0%    10    1.3   1.3   0.9   1.6   0.2
  2. AS3462   168-95-75-226.pcpc-3332.hinet.net       0.0%    10    1.4   1.5   1.3   2.0   0.2
  3. AS???    ???                                    100.0    10    0.0   0.0   0.0   0.0   0.0
  4. AS???    ???                                    100.0    10    0.0   0.0   0.0   0.0   0.0
  5. AS???    220-128-27-153.skc1-4111.hinet.net      0.0%    10    5.7   6.2   5.6   8.0   0.7
  6. AS???    220-128-30-113.skc1-4011.hinet.net      0.0%    10    6.1   5.9   5.7   6.5   0.3
  7. AS???    220-128-30-129.skc1-4012.hinet.net      0.0%    10    6.2   6.0   5.6   6.5   0.3
  8. AS9680   202-39-91-29.pa-r32.us.hinet.net        0.0%    10  135.9 140.6 135.7 172.7  11.7
  9. AS???    ???                                    100.0    10    0.0   0.0   0.0   0.0   0.0
 10. AS174    be2379.ccr21.sfo01.atlas.cogentco.com   0.0%    10  137.1 136.8 136.5 137.3   0.2
 11. AS174    be2075.ccr21.sea02.atlas.cogentco.com   0.0%    10  154.4 154.3 153.6 157.3   1.1
 12. AS174    38.142.50.226                           0.0%    10  154.7 153.9 153.2 154.7   0.5
 13. AS???    ???                                    100.0    10    0.0   0.0   0.0   0.0   0.0
 14. AS???    142.124.126.140                         0.0%    10  191.4 190.2 188.3 191.7   1.1
 15. AS???    64.230.52.203                           0.0%    10  182.6 182.3 182.1 182.7   0.2
 16. AS577    mts_bx1-winnipeg01.net.bell.ca          0.0%    10  189.6 190.0 189.5 190.8   0.4
 17. AS7122   wnpgmb02zx3-p01-be4.as7122.net          0.0%    10  185.0 184.0 183.1 185.3   0.7
 18. AS7122   142.161.128.13                          0.0%    10  184.0 185.6 183.9 199.9   5.0
 19. AS7122   64-4-72-102.dedicated.bellmts.net       0.0%    10  184.1 184.9 183.6 189.6   2.1
 20. AS21774  209.177.111.29                          0.0%    10  183.3 183.4 183.2 183.9   0.3
 21. AS21774  209.177.111.44                          0.0%    10  184.2 183.8 183.3 184.2   0.3
 22. AS21774  209.177.102.133                         0.0%    10  189.1 189.1 188.8 189.3   0.2

Observation

Both paths converge at AS7122 (Bell MTS) infrastructure, but only the cable modem path fails. The cable modem trace stops at hop 20 (64-4-72-102.dedicated.bellmts.net) with 90% loss and never reaches AS21774, while the HiNet trace passes through the same Bell MTS hop with 0% loss and successfully reaches the destination.

This may indicate IP-based filtering or an ACL blocking the source IP 61.63.211.227 (or its /24 range) at the AS7122 → AS21774 boundary.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions