dslreports logo
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
2748
share rss forum feed

auweia1

join:2011-08-27

Sonic blocking Bitmit.net?

I just found out that Sonic is blocking Bitmit.net as of 3 days ago and I couldn't finalize an order for three days. I called support and they said it was reported as a phishing attack site. wtf?

Is anybody on Sonic and also can't access Bitmit?. It's an Ebay like site that uses bitcoins


leibold
Premium,MVM
join:2002-07-09
Sunnyvale, CA
kudos:10
Reviews:
·SONIC.NET
$ nslookup bitmit.net
Server: 208.201.224.11
Address: 208.201.224.11#53

Non-authoritative answer:
bitmit.net canonical name = dns-blocked.sonic.net.
Name: dns-blocked.sonic.net
Address: 209.204.190.68

$ ping bitmit.net
PING dns-blocked.sonic.net (209.204.190.68) 56(84) bytes of data.
64 bytes from dns-blocked.tld (209.204.190.68): icmp_req=1 ttl=58 time=29.2 ms
64 bytes from dns-blocked.tld (209.204.190.68): icmp_req=2 ttl=58 time=32.3 ms
64 bytes from dns-blocked.tld (209.204.190.68): icmp_req=3 ttl=58 time=30.9 ms

As you can see, when looking up bitmit.net using the Sonic.net DNS resolvers you will get redirected to dns-blocked.sonic.net

If you really want to access the site bitmit.net you can do so by using some other DNS server (such as Google DNS 8.8.8.8):

$ nslookup
> server 8.8.8.8
Default server: 8.8.8.8
Address: 8.8.8.8#53
> bitmit.net.
Server: 8.8.8.8
Address: 8.8.8.8#53

Non-authoritative answer:
Name: bitmit.net
Address: 108.162.202.86
Name: bitmit.net
Address: 108.162.201.86
>

$ ping 108.162.202.86
PING 108.162.202.86 (108.162.202.86) 56(84) bytes of data.
64 bytes from 108.162.202.86: icmp_req=4 ttl=56 time=28.6 ms
64 bytes from 108.162.202.86: icmp_req=5 ttl=56 time=26.8 ms
64 bytes from 108.162.202.86: icmp_req=6 ttl=56 time=24.9 ms

As you can see from the ping response, the access is not blocked but I'm not curious enough to see what malware that website may contain to actually connect with a browser.
--
Got some spare cpu cycles ? Join Team Helix or Team Starfire!

auweia1

join:2011-08-27
I see, and thanks alot. Dane Jasper just said on the internal Sonic forums that the site was reported as a phishing site.

»forums.sonic.net/viewtopic.php?f ··· 8#p10278

I don't know why and I seriously doubt it is since I've had an account and bought things there with no problems for many months

Bitmit themselves have had problems with a DDoS attack last month an went to one of those pro hosting companies that helps fight DDoS, but they themselves have never done any funny stuff as far as I know. If they did we'd be hearing more about it on forums like this

»bitcointalk.org/index.php?topic= ··· =41592.0

Bitmit was getting massive DDoS attacks 2 months ago and sought more professional companies to help them stay online, but that was 2 months ago and Sonic didn't block them then

»bitcointalk.org/index.php?topic= ··· 259646.0

very strange stuff


leibold
Premium,MVM
join:2002-07-09
Sunnyvale, CA
kudos:10
Reviews:
·SONIC.NET
I don't think being the victim of a DDoS attack would be the reason they are blocked.

If this is an online auction/trading site it is more likely that they are being blocked because of complaints against some of the sellers on the site (who may claim to be someone other then they really are). The legitimate sellers on the site then become "collateral damage" of blocking the bad guys.
--
Got some spare cpu cycles ? Join Team Helix or Team Starfire!

auweia1

join:2011-08-27
oh man...that's messed up

there's gotta be a better way than blocking the whole thing for everybody. And why not other ISP?. Sonic is relatively small compared to Comcast and AT&T

Like there's no shady sellers on Ebay?

still doesn't smell right, especially with Sonic and the activist open internet CEO

C/mon, that's why they have a feedback system. Any seller who rips people off won't last too long with bad reviews

Ironically, I myself almost got a bad review, drumroll....becaus I couldn't access the site to release the funds after I bought bike tools

auweia1

join:2011-08-27
I got a response from the head of Bitmit who said they had been added, falsely, to a spam/phishing blacklist. pretty much like I suspected

»bitcointalk.org/index.php?topic= ··· .new#new

Sonic has now unblocked Bitmit so there is access once again. It is not a phishing site. Somebody may have said that, but that doesn't make it true.

There has to be a better way. Like maybe ISP actually verifying if a site is malicious before banning it. Otherwise, any website owner with enemies is subject to banning. Had a bad experience with Wells Fargo or Wkipedia lately? Don't like one of the editors of Wikipedia? Get the website on the blacklist. That'll teach em

I really hope this is just an isolated incident that sort of slipped through the cracks. The implications are enormous if it isn't


leibold
Premium,MVM
join:2002-07-09
Sunnyvale, CA
kudos:10
Reviews:
·SONIC.NET
Unfortunately things like this happen a lot. In some cases it was even the US government (instead of some private entity) that shutdown thousands of legitimate sites (also by DNS redirects) just to block a few online stores because of trademark infringement. For another common example look at blacklists for spam filtering and see how frequently perfectly valid opt-in mailing lists end up being reported as spammers.

I doubt Sonic or any other ISP is maintaining their own blacklist. It is far more common to subscribe to a blacklisting service since keeping those lists up to date is quite labor intensive (often the part of adding a site to be blacklisted is pretty quick and automatic, it is the part about dealing with the complaint about being unfairly blacklisted that gets complicated and time consuming).
--
Got some spare cpu cycles ? Join Team Helix or Team Starfire!


Zed

@sonic.net
Sonic.net maintains four DNS servers. They are 75.101.19.197, 75.101.19.196, 208.201.224.33, and 208.201.224.11.

The first two are for people who "opt out" of the default level of protection, the last two filter attack sites etc.


leibold
Premium,MVM
join:2002-07-09
Sunnyvale, CA
kudos:10
Thanks, that is good to know. It seems I'm already using the right ones