Need Help-Domain seems to be blocked

[Flex]

So the strangest thing happened yesterday.
My wifes domain for her business seems to be blocked on our network.

Contacted our ISP to see if it has been blacklisted for some reason, but it seems like it is not.
Has anyone ever experienced anything like this before?

Can it be that the domain/host is blocking the connection from their side?

 

[Giovanni]

My IP got banned on my VPS all the time (assuming due to the large number of requests) - contacting the provider and asking them to whitelist it solved that.

 

[mikewazar]

What DNS?

Open CMD, type nslookup <yourdomain> 1.1.1.1 and see if it resolves to an actual IP?

Could be anti-virus?

 

[Flex]

What DNS?

Open CMD, type nslookup <yourdomain> 1.1.1.1 and see if it resolves to an actual IP?

Could be anti-virus?

Nope not antivirus. happens on all devices on my network.
Does indeed resolve to an actual IP. But if I tracert to the domains IP, it does not reach it

 

[Flex]

My IP got banned on my VPS all the time (assuming due to the large number of requests) - contacting the provider and asking them to whitelist it solved that.

So if it is hosted by cybersmart I need to contact them directly? So it can't be done on the admins side controls?

Will I just need to provide them with my public ipv4 ip?

 

[mikewazar]

Nope not antivirus. happens on all devices on my network.
Does indeed resolve to an actual IP. But if I tracert to the domains IP, it does not reach it

Sounds like the company runs a whitelist of allowed IPs to me, contact your wifes company and get their IT people to check why the connection is being blocked at their edge since that's far more probable than your ISP blocking anything. You on LTE or fixed line?

 

[Flex]

Sounds like the company runs a whitelist of allowed IPs to me, contact your wifes company and get their IT people to check why the connection is being blocked at their edge since that's far more probable than your ISP blocking anything. You on LTE or fixed line?

My ISP confirmed nothing is blocked or blacklisted on their end.

I am on fibre, nothing changed on my side. So must have been something that triggered a blacklist or something. Was just wondering why/if and how a domain/provider can block the connection

 

[dalion619]

So if it is hosted by cybersmart I need to contact them directly? So it can't be done on the admins side controls?

Will I just need to provide them with my public ipv4 ip?

Can you post the domain or PM it?

 

[aiccc]

Does the tracert get past the local firewall? Where does it drop?

Do you guy have a enterprise type firewall ?
Does the firewall have a active type of block list. It could be blocked there.

It is possible her hosting provider has blocked your ip range.

Is she using SSL?

There are numerous reasons why this can happen. You need to provide more info, to get a more targeted help

 

[Flex]

Can you post the domain or PM it?

Can post it here so everyone can see. It can be accessed out of my network

viragorecruit.co.za

 

[aiccc]

NGFW type does auto blocking

 

[dotnerd]

This a custom domain or we talking onlyfans?

 

[aiccc]

First try a vpn (opera browser) and see if you can access it from inside your network. If it works then it is blocked by cyber not so smart.

You need to send a email to the below to check if your ip range is on the block list.



Registrar Abuse Contact Email: domains@cybersmart.co.za
Registrar Abuse Contact Phone: +27.212860123

 

[Flex]

Does the tracert get past the local firewall? Where does it drop?

Do you guy have a enterprise type firewall ?
Does the firewall have a active type of block list. It could be blocked there.

It is possible her hosting provider has blocked your ip range.

Is she using SSL?

There are numerous reasons why this can happen. You need to provide more info, to get a more targeted help

It times out on cybersmarts side, so leaves my connection.
No funny lists or blocked connections on my firewall.

I asked my ISP to renew the lease on my current IP, but they had some story about the ip being with openserve and not being possible

 

[Flex]

First try a vpn (opera browser) and see if you can access it from inside your network. If it works then it is blocked by cyber not so smart.

You need to send a email to the below to check if your ip range is on the block list.



Registrar Abuse Contact Email: domains@cybersmart.co.za
Registrar Abuse Contact Phone: +27.212860123

VPS works perfecty. Tried with Opera GX which has a built in VPN.

Perfect thanks will do that. That is my only explanation for this

 

[dalion619]

Can post it here so everyone can see. It can be accessed out of my network

viragorecruit.co.za

It’s on shared web hosting so the IP is used by multiple domain names.
The routing just looks broken tbh.

Traceroute Test - Simultaneously Trace From Different Global Locations | KeyCDN Tools

Trace any IP address or hostname simultaneously from multiple locations. Analyze the path packets take to identify potential connectivity and speed issues.

tools.keycdn.com

 

[Flex]

It’s on shared web hosting so the IP is used by multiple domain names.
The routing just looks broken tbh.

Traceroute Test - Simultaneously Trace From Different Global Locations | KeyCDN Tools

Trace any IP address or hostname simultaneously from multiple locations. Analyze the path packets take to identify potential connectivity and speed issues.

tools.keycdn.com

But the routing is perfectly fine on other networks :/ Just from mine which seems not not be resolving

 

[Flex]

thanks for all the input so far gents. appreciate it

 

[mikewazar]

My ISP confirmed nothing is blocked or blacklisted on their end.

I am on fibre, nothing changed on my side. So must have been something that triggered a blacklist or something. Was just wondering why/if and how a domain/provider can block the connection

yes but on your wife's company side? it's common for corporate networks to have aggressive filtering on their edge.

 

[Flex]

yes but on your wife's company side? it's common for corporate networks to have aggressive filtering on their edge.

Not a huge company. They have no IT infrastructure.
The issue is not access their network or anything like that. Domain seems to be blocking IP range.

 

[dalion619]

But the routing is perfectly fine on other networks :/ Just from mine which seems not not be resolving

Yeah but routing on the internet basically works like 'magic'.
If you look at the traceroute test, you'll see it's failing from some locations. Even the DNS lookup fails but due to records being shared it may fail then work then fail again when the record expires.
DNS Checker - DNS Propagation Check & DNS Lookup (whatsmydns.net)

It also seems that the IP is on some blacklists, Network Tools: DNS,IP,Email (mxtoolbox.com)
This normally happens a website is comprised then it starts hosting malware or spamming people, the host is meant to fix it.
If your host responds like this, what would you do? | Smack talk | Page 2 | Carbonite

My 2c is move the website into Cloudflare's network then get them to use a proper email solution.
Network Tools: DNS,IP,Email (mxtoolbox.com)

 

[Flex]

So ISP is pointing fingers to the Host and Host is pointing theirs to the ISP :/

 

[mikewazar]

How feasible to test on another ISP and move? What FNO are you on?

 

[Flex]

How feasible to test on another ISP and move? What FNO are you on?

Sorted it out.

After many back and forths with the Host and explaining to them that the tracert leaves my network and stops on their side, they kept on insisting that it is my firewall. After about 30 min my wife noticed that her mails were starting to go through. Checked my mail and the host said they just want to test and see, they whitelisted my IP and it was indeed the problem.
No idea why it had to take so much time and communication for them to resolve the issue