IP lookup doesn't give the data #200

Closed
opened 2026-10-27 18:31:30 +01:00 by sneak · 2 comments
Owner

I put eeqj.com in the IP address lookup box and it gave me this:

{
  "query": "eeqj.com",
  "results": [
    {
      "blocklists": [],
      "ip": "172.67.135.118"
    },
    {
      "blocklists": [],
      "ip": "104.21.6.237"
    },
    {
      "blocklists": [],
      "ip": "2606:4700:3035::6815:6ed"
    },
    {
      "blocklists": [],
      "ip": "2606:4700:3036::ac43:8776"
    }
  ]
}

Each IP should include all of the routing information we know about it - ASN, netblock, how long it's been announced, how many ASes are announcing it, last seen, peer count, etc.

I put `eeqj.com` in the IP address lookup box and it gave me this: ``` { "query": "eeqj.com", "results": [ { "blocklists": [], "ip": "172.67.135.118" }, { "blocklists": [], "ip": "104.21.6.237" }, { "blocklists": [], "ip": "2606:4700:3035::6815:6ed" }, { "blocklists": [], "ip": "2606:4700:3036::ac43:8776" } ] } ``` Each IP should include all of the routing information we know about it - ASN, netblock, how long it's been announced, how many ASes are announcing it, last seen, peer count, etc.
clawbot was assigned by sneak 2026-10-27 18:32:46 +01:00
Collaborator

Why the answer had no routing data: your instance had restarted 18 minutes earlier, and its table then held about half of the IPv4 prefixes; the feed had not yet announced those four prefixes to it. On a full table the same lookup of eeqj.com returns each address with its AS, netblock, peer count, first and last seen.

Plan, so the answer is complete and always has one shape:

  • Every result has the same fields, for a name and for an address.
  • New: the number of ASes announcing the netblock, and which they are.
  • An address the table has no route for yet keeps every routing field, set to null, so a client sees the same fields every time.

Model: opus-5-5

Why the answer had no routing data: your instance had restarted 18 minutes earlier, and its table then held about half of the IPv4 prefixes; the feed had not yet announced those four prefixes to it. On a full table the same lookup of `eeqj.com` returns each address with its AS, netblock, peer count, first and last seen. Plan, so the answer is complete and always has one shape: - Every result has the same fields, for a name and for an address. - New: the number of ASes announcing the netblock, and which they are. - An address the table has no route for yet keeps every routing field, set to null, so a client sees the same fields every time. Model: opus-5-5
Collaborator

Built in #206. Every result of the IP lookup now has the same fields, for a name and for an address. A field without a value is null instead of left out, so an address with no route yet still shows every routing field. Two new fields, num_origins and origin_asns, say how many origin ASes announce the netblock and which. README "HTTP Endpoints" lists every field and when it is null.

Model: opus-5-5

Built in https://git.eeqj.de/sneak/routewatch/pulls/206. Every result of the IP lookup now has the same fields, for a name and for an address. A field without a value is null instead of left out, so an address with no route yet still shows every routing field. Two new fields, `num_origins` and `origin_asns`, say how many origin ASes announce the netblock and which. README "HTTP Endpoints" lists every field and when it is null. Model: opus-5-5
Sign in to join this conversation.
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sneak/routewatch#200