Country Flag Mistake for RFC6598 Addresses - 100.64.0.0/10

GlassWire Help
1

This IP space is erronously being labeled as Thailand.

Windows 11, Glasswire 3.3.664

image
image875×250 18.8 KB

NetRange:       100.64.0.0 - 100.127.255.255
CIDR:           100.64.0.0/10
NetName:        SHARED-ADDRESS-SPACE-RFC6598-IANA-RESERVED
NetHandle:      NET-100-64-0-0-1
Parent:         NET100 (NET-100-0-0-0-0)
NetType:        IANA Special Use
OriginAS:       
Organization:   Internet Assigned Numbers Authority (IANA)
RegDate:        2012-03-13
Updated:        2022-04-05
Comment:        This block is used as Shared Address Space. Traffic from these addresses does not come from IANA. IANA has simply reserved these numbers in its database and does not use or operate them. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/ 
Comment:        
Comment:        Shared Address Space can only be used in Service Provider networks or on routing equipment that is able to do address translation across router interfaces when addresses are identical on two different interfaces. 
Comment:        
Comment:        This block was assigned by the IETF in the Best Current Practice document, 
Comment:        RFC 6598 which can be found at: 
Comment:        http://tools.ietf.org/html/rfc6598
Ref:            https://rdap.arin.net/registry/ip/100.64.0.0
2

Agree this seems to be erroneous given these are carrier grade NAT addresses for use by ISPs. Interestingly the Glasswire lookup page Host info reports this as a private address, so I am wondering whether these have been corrected since your OP?

3

This is still an issue as of today in 3.3.664 as mentioned in my original post. Not seeing a newer version on the /changes url (apparently I’m too new to post urls)

image
image616×662 68.2 KB

seems like the hostinfo page is not what the app is using data wise for GeoIP information.

4

GW had this problem on an older version. I still have an older version of GW 2.3.449 and it’s doing the same thing. I ignore it because I know it’s a server in San Francisco, California and sometimes it does it on a Local Private IP Address. :man_shrugging: