New Member
•
1 Message
Some websites inaccessible
Over the past few months I have noted that we will lose access to certain websites. Some just won't load and other will work then stop working after 5 minutes. My research suggests that this is an issue with DNSSEC. Some of the sites do not appear to be DNSSEC compliant, but others are. I have ruled out internal security on our network. I am at a loss why this is occurring. The sites work fine on my ATT phone.
Accepted Solution
CC_John
Retired Employee
•
1.9K Messages
12 years ago
Welcome msdadmin. We are investigating this issue. I will update you with the results.
Thank you
0
0
Accepted Solution
msdadmin
Visitor
•
5 Messages
12 years ago
I have found this information. Can you check it for me?
lazybeescripts.co.uk
88.208.252.141
The URL is the one we can't get to. The IP is based on a lookup at godaddy.com .
Thank you!
0
0
Accepted Solution
CC_John
Retired Employee
•
1.9K Messages
12 years ago
msdadmin. Thank you. As the phishing site originates from this IP address, the ISP that owns the IP Range will have to certify that this IP address is no longer the source of a phishing site. In order to clear this issue the owner of the site lazybeescripts.co.uk will have to contact their ISP ( the owners of the IP space) Fasthost Internet Limited and inform them of the issue with the current IP address, request a new one and/or verify with the ISP that they are not the source of the phishing site. The ISP will then have to contact Comcast Security and request removal of the IP address network block.
The block was put in place on 11/26/2012. I am including the Whois data for the ISP below.
Overview for 88.208.252.141
Updated 0 seconds ago
This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '88.208.252.0 - 88.208.253.255'
inetnum: 88.208.252.0 - 88.208.253.255
netname: FASTHOSTS-UK-NETWORK
org: ORG-FHL1-RIPE
descr: Fasthosts Internet Limited - UK's largest web hosting company
descr: based in Gloucester, England
descr: Shared Hosting
country: GB
admin-c: GD8691-RIPE
tech-c: FHN5-RIPE
status: ASSIGNED PA
mnt-by: AS15418-MNT
remarks: trouble: abuse@fasthosts.co.uk
remarks: Please report abuse to abuse@fasthosts.co.uk
remarks: Abuse reports via other channels may be ignored
remarks: INFRA-AW
source: RIPE # Filtered
organisation: ORG-FHL1-RIPE
org-name: Fast Hosts LTD
org-type: LIR
address: Fasthosts Internet Limited
address: Discovery House
address: 154 Southgate Street
address: GL1 2EX Gloucester
address: UNITED KINGDOM
phone: +448445830777
fax-no: +441452541633
mnt-ref: AS15418-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
abuse-mailbox: abuse@fasthosts.co.uk
admin-c: MW8691-RIPE
admin-c: GD8691-RIPE
admin-c: MB22840-RIPE
admin-c: MM24449-RIPE
admin-c: JW3036-RIPE
source: RIPE # Filtered
person: Fasthosts Networks
address: Fasthosts Internet Limited
address: Discovery Court
address: 154 Southgate Street
address: Gloucester, GL1 2EX
phone: +44 1452 561874
abuse-mailbox: abuse@fasthosts.co.uk
remarks: Fasthosts Networks team - contact for operational issues only
remarks: Please report abuse to abuse@fasthosts.com
remarks: Abuse reports via other channels may be ignored
nic-hdl: FHN5-RIPE
mnt-by: AS15418-MNT
source: RIPE # Filtered
person: George Daly
address: Fasthosts Internet Limited
address: Discovery House
address: 154 Southgate Street
address: Gloucester, GL1 2EX
phone: +44 1452 561874
fax-no: +44 1452 541633
nic-hdl: GD8691-RIPE
mnt-by: AS15418-MNT
source: RIPE # Filtered
% Information related to '88.208.192.0/18AS15418'
route: 88.208.192.0/18
descr: FasthostInternet Ltd
origin: AS15418
mnt-by: AS15418-MNT
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.47 (WHOIS4)
0
0
Accepted Solution
msdadmin
Visitor
•
5 Messages
12 years ago
Thank you. Exactly the information I needed.
0
0
Accepted Solution
BsspTechRep
Visitor
•
2 Messages
12 years ago
Very nice catch Captain_John. Another more simple consideration for unaccessible websites could be in the SMC Gateway.Firewall when the Intelligent Subpacket Detection is either enabled or disabled, depending on the website server parametric operation. Just some food for thought......
0
0
CC_John
Retired Employee
•
1.9K Messages
12 years ago
Welcome Snellit. We can assist with this issue. We will need the URL of the websites that you are having issues with in order to proceed. Also the the Comcast DNS servers are 75.75.75.75 && 75.75.76.76.
Here is a Link to the Comcast site for the currently identified DNSSEC issues and the issue status. Also this link http://www.dnssec-failed.org/ is to the Comcast DNSSEC Validation Test Site. Using Comcast DNS Servers please check the site and post the result here.
Thank You
0
0
msdadmin
Visitor
•
5 Messages
12 years ago
I have a similar problem. The website laxybeescripts,co.uk will not connect. When I enter it into comcast dns lookup I get an error that says
This is similar to the timeout error (cannot connect to host) I get when trying to connect to the website itself.
I have tried Firefox, Safari, and Chrome. While the message varies the implication in all three cases is the same.
When I copy and past whois.nick.uk into my browser, it is not found. However, when I use nic.uk I am connected to http://www.nominet.org.uk/ and can successfully lookup whois laztbeescripts.co.uk
Our theatre director wants very badly to use that website but cannot because of this connection issue here at school using our Comcast Business class service.
Note the website loads perfectly when I use my iPhone on 3G but fails the same way when routing through our on campus Comcast Business class service.
Similarly, I can connect at home using Century LInk service --just not using Comcast Business class service at school.
I continue to work with this issue. I found (using Network solutions whois database) that the IP for lazybeescript.co.uk was 88.208.252.141 which when entered in to a browser at school using Comcast Business Class services, would not connect.
The error was the same as before but a different host whois.ripe.net . When I tried that address in a browser, it would not connect. But when I tried ripe.net connection was quick and clean.
I am stopping here. I can't afford more time spent on this today.
0
0
CC_John
Retired Employee
•
1.9K Messages
12 years ago
msdadmin. Comcast Security determined that IP 88.208.252.141 is hosting a Comcast phishing site. As the site is still active, access to/from this IP/ site is blocked by Comcast Security.
Thank you.
0
0