dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
4780

Leem
join:2003-11-01
Nanticoke, PA

Leem

Member

[Connectivity] Comcast blocked access to website?

www.pso2.jp

Its the website for Phantasy Star Online 2 - I could access it no problems a week ago, but over the past week it has been unreachable on comcast. I can confirm the website it UP via a proxy.

Tracing route to pso2.jp [210.189.209.8]
over a maximum of 30 hops:

1 1 ms 1 ms 1 ms *.*.*.*
2 1 ms 1 ms 1 ms *.*.*.*
3 35 ms 25 ms 26 ms *.*.*.*
4 13 ms 11 ms 11 ms te-0-7-0-17-sur02.scranton.pa.pitt.comcast.net [*.*.*.*]
5 15 ms 19 ms 15 ms te-0-3-0-3-ar03.lancaster.pa.pitt.comcast.net [*.*.*.*]
6 24 ms 23 ms 24 ms be-1-ar03.mckeesport.pa.pitt.comcast.net [*.*.*.*]
7 * * * Request timed out.
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

beerbum
Premium Member
join:2000-05-06
behind you..
Motorola MB8600
ARRIS TG862
Asus RT-AC5300

beerbum

Premium Member

[Connectivity] Re: Comcast blocked access to website?

looks like a bad router/link

% traceroute pso2.jp
traceroute to pso2.jp (210.189.209.8), 30 hops max, 60 byte packets
1 rtr-1-1 (192.168.1.1) 0.245 ms 0.246 ms 0.300 ms
2 c-73-187-62-1.hsd1.pa.comcast.net (73.187.62.1) 15.795 ms 16.798 ms 35.128 ms
3 te-0-1-0-3-sur02.reading.pa.pitt.comcast.net (68.85.43.97) 16.559 ms 16.647 ms 16.680 ms
4 be-5-ar03.lancaster.pa.pitt.comcast.net (69.139.194.45) 18.264 ms 19.217 ms 19.149 ms
5 he-0-15-0-0-ar01.mckeesport.pa.pitt.comcast.net (69.139.168.141) 24.744 ms 25.601 ms 25.569 ms
6 he-4-5-0-0-cr01.ashburn.va.ibone.comcast.net (68.86.94.165) * !N * *

that tells me hop #5 knows about hop #6, but hop #6 is not reachable for whatever reason..

normally when I encounter a blocked host, the packets usually make it to that host's network gateway and die there.. above looks like one comcast router is not responding to another comcast router.

Leem
join:2003-11-01
Nanticoke, PA

Leem

Member

Here is the thing, this can't be just an isolated incident since its being reported all over the comcast network on the forums I am a member of and in fact, some other members using different ISPs like Shaws Internet in Canada have all reported similar issues.

I can access the website via a proxy without problem but obviously that isn't going to help me much.
Leem

Leem

Member

Also, I have VerizonDSL as a backup internet service - PSO2.JP is also unreachable with that service, the tracert doesn't leave PA. The website did suffer a DDOS attack early last week, is it possible that the backbone providers have blocked access to this website, or have the website owners blocked access?

beerbum
Premium Member
join:2000-05-06
behind you..
Motorola MB8600
ARRIS TG862
Asus RT-AC5300

beerbum

Premium Member

that makes more sense.. since there is no way for Comcast to block Verizon (or others in Canada) from accessing a server/site over in Japan.

if there was a DDOS involved, it's possible depending on the size of the attack, that some of the backbone providers are null-routing all packets destined for the IP or the network for that site..
AVonGauss
Premium Member
join:2007-11-01
Boynton Beach, FL

AVonGauss to Leem

Premium Member

to Leem
Well, if you already know Verizon (DSL) and Shaw users are having the same issue it clearly is not Comcast and the thread title is a bit misleading, no? With the recent DDoS it is most likely a provider or two are still null routing.

beerbum
Premium Member
join:2000-05-06
behind you..
Motorola MB8600
ARRIS TG862
Asus RT-AC5300

beerbum to Leem

Premium Member

to Leem
most of the places I checked in the US it dies..

core1.fmt2.he.net> traceroute 210.189.209.8 source-ip 216.218.252.162 numeric

Tracing the route to IP node (210.189.209.8) from 1 to 30 hops

1 1 ms 1 ms 1 ms 72.52.92.74
2 14 ms 11 ms 12 ms 184.105.213.5
3 124 ms 125 ms 124 ms 184.105.223.106
4 107 ms 148 ms 107 ms 210.171.224.49
5 * * * ?
6 * * * ?
7 * * * ?
8 * * * ?
IP: Errno(8) Trace Route Failed, no response from target node.

FWIW the IP seems to be reachable from Germany..

traceroute to 210.189.209.8 (210.189.209.8), 15 hops max, 60 byte packets
1 S-EB3.S.DE.net.DTAG.DE (194.25.0.205) 4.227 ms 4.226 ms 4.226 ms
2 tyo-sa3-i.TYO.JP.NET.DTAG.DE (62.154.5.210) 273.822 ms 270.221 ms 273.809 ms
3 as4725.ix.jpix.ad.jp (210.171.224.48) 283.468 ms 283.466 ms 275.060 ms
4 STOrc-02Te0-4-0-1.nw.odn.ad.jp (143.90.149.49) 282.032 ms 282.032 ms 273.728 ms
5 STOrw-53Te3-1.nw.odn.ad.jp (143.90.143.174) 267.551 ms 267.555 ms 267.546 ms
6 10.143090054.odn.ne.jp (143.90.54.10) 266.403 ms 305.603 ms 305.567 ms
7 ae3-105.tnhcr01.idc.jp (158.205.192.109) 263.425 ms 271.977 ms 271.706 ms
8 * * *
9 * * *
10 * * *
11 * * *
12 158.205.188.253 (158.205.188.253) 270.404 ms 262.273 ms 262.281 ms
13 lag3.l303.ta1.eg.idc.jp (158.205.188.250) 269.646 ms 282.327 ms 270.217 ms
14 158.205.104.60 (158.205.104.60) 268.641 ms 268.270 ms 260.799 ms
15 210.189.209.8 (210.189.209.8) 258.610 ms 266.839 ms 258.659 ms
beerbum

beerbum

Premium Member

goofiness from Japan.. the destination IP responds, then it doesn't.. they might still be under attack..

traceroute to pso2.jp (210.189.209.8), 30 hops max, 38 byte packets
1 ge-0-0-3.edge0302.colo01.bbtower.ad.jp (211.14.3.126) 1.051 ms 7.158 ms 0.945 ms
2 GigabitEthernet3-9.core02.colo01.bbtower.ad.jp (124.147.0.165) 0.594 ms 0.698 ms 0.442 ms
3 xe-0-0-0.border03.colo01.bbtower.ad.jp (211.14.3.37) 0.336 ms 0.449 ms 0.441 ms
4 as23816.ix.jpix.ad.jp (210.171.224.162) 0.601 ms 0.442 ms 0.455 ms
5 203.141.47.202 (203.141.47.202) 0.615 ms 0.446 ms 0.451 ms
6 ae2.tnhcr02.idc.jp (158.205.134.14) 0.618 ms 0.943 ms 0.954 ms
7 172.31.254.146 (172.31.254.146) 0.868 ms 0.934 ms 0.940 ms
8 * * *
9 * * *
10 172.31.254.150 (172.31.254.150) 1.597 ms 1.445 ms 1.475 ms
11 158.205.188.253 (158.205.188.253) 1.488 ms 1.703 ms 1.472 ms
12 lag3.l303.ta1.eg.idc.jp (158.205.188.250) 1.491 ms 11.206 ms 1.451 ms
13 158.205.104.60 (158.205.104.60) 1.739 ms 1.697 ms 1.724 ms
14 210.189.209.8 (210.189.209.8) 1.490 ms 1.451 ms 1.476 ms
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
traceroute: sendto: Operation not permitted
23 traceroute: wrote pso2.jp 38 chars, ret=-1 lg02 (211.14.3.123) 0.158 mstraceroute: sendto: Operation not permitted
traceroute: wrote pso2.jp 38 chars, ret=-1 0.298 mstraceroute: sendto: Operation not permitted

anyway.. not a Comcast problem.

Leem
join:2003-11-01
Nanticoke, PA

1 edit

Leem

Member

I've done tracerts from around the world. For the most part, none in the US reached the host and only 1 in Canada responded - Most in Europe reached the server but none in the UK did. Its strange but I think your right that it isn't a comcast problem.

I only tried my VerizonDSL service earlier, I only ever use that as a complete emergency backup. But thank you for the information, it pretty much confirms that the backbone providers are null routing - most likely in response to the DDOS attack, hopefully once the attack ends then it'll be resolved.

NormanS
I gave her time to steal my mind away
MVM
join:2001-02-14
San Jose, CA
TP-Link TD-8616
Asus RT-AC66U B1
Netgear FR114P

1 edit

NormanS to Leem

MVM

to Leem

Re: Comcast blocked access to website?

said by Leem:

www.pso2.jp

Its the website for Phantasy Star Online 2 ...

Is it?
C:\util\dig>nslookup www.pso2.jp
Server:  ordns.he.net
Address:  2001:470:20::2
 
*** ordns.he.net can't find www.pso2.jp: Non-existent domain
 

Or maybe it isn't:
C:\util\dig>nslookup pso2.jp
Server:  ordns.he.net
Address:  2001:470:20::2
 
Non-authoritative answer:
Name:    pso2.jp
Address:  210.189.209.8
 

Don't include the "www" when is not actually part of the host name. As corrected, loads from my ISP connection; but the trace does not go through:
Tracing route to pso2.jp [210.189.209.8]
over a maximum of 30 hops:
 
  1    <1 ms    <1 ms    <1 ms  Chihiro [192.168.102.1]
  2    22 ms    21 ms    22 ms  173-228-7-1.dsl.static.sonic.net [173.228.7.1]
  3    21 ms    21 ms    20 ms  gig1-4.cr1.lsatca11.sonic.net [70.36.243.13]
  4    38 ms    42 ms    32 ms  ae2.cr2.lsatca11.sonic.net [50.0.79.178]
  5    26 ms    21 ms    20 ms  50.ae4.gw.pao1.sonic.net [69.12.211.165]
  6    22 ms    21 ms    20 ms  ae2.0.gw.equinix-sj.sonic.net [50.0.2.14]
  7    22 ms    22 ms    22 ms  ix-sj1.kddnet.ad.jp [206.223.116.43]
  8    22 ms    22 ms    23 ms  pajbb002.kddnet.ad.jp [124.211.34.25]
  9   129 ms   128 ms   129 ms  otejbb206.int-gw.kddi.ne.jp [203.181.100.177]
 10   125 ms   124 ms   124 ms  cm-ote257.int-gw.kddi.ne.jp [118.155.197.180]
 11   131 ms   130 ms   131 ms  125.29.25.94
 12   140 ms   140 ms   140 ms  203.141.47.218
 13   125 ms   126 ms   125 ms  ae2.tnhcr02.idc.jp [158.205.134.14]
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17     *        *        *     Request timed out.
 18   126 ms   126 ms   125 ms  158.205.188.253
 19   132 ms   141 ms   132 ms  lag3.l303.ta1.eg.idc.jp [158.205.188.250]
 20   126 ms   126 ms   141 ms  158.205.104.60
 21   133 ms   132 ms   132 ms  210.189.209.8
 22     *        *        *     Request timed out.
 23     *        *        *     Request timed out.
 24     *        *        *     Request timed out.
 25     *        *        *     Request timed out.
 26     *        *        *     Request timed out.
 27     *        *        *     Request timed out.
 28     *        *        *     Request timed out.
 29     *        *        *     Request timed out.
 30     *        *        *     Request timed out.
 
Trace complete.
 

PSO2

Leem
join:2003-11-01
Nanticoke, PA

Leem

Member

Re: [Connectivity] Comcast blocked access to website?

Still have no access to the site, apparently the DDoS has ended and normal service has resumed so I don't understand why they would continue to null route? It is possible the host has asked the backbone providers to block access to that particular site?

Access to that site via proxy works fine, so does VPN. I'm starting to get more suspicious about a possible IP Block.
Expand your moderator at work

NormanS
I gave her time to steal my mind away
MVM
join:2001-02-14
San Jose, CA
TP-Link TD-8616
Asus RT-AC66U B1
Netgear FR114P

NormanS

MVM

Re: [Connectivity] Comcast blocked access to website?

said by nirvy:

Just tried "pso2.jp" without the www and it worked the first time. Take out the www.

I hear an echo ...
NormanS

NormanS to Leem

MVM

to Leem
said by Leem:

Access to that site via proxy works fine, so does VPN. I'm starting to get more suspicious about a possible IP Block.

What makes a "URL" a URL is the "HTTP://" part; the rest is just a FQDN. "WWW" is not a required part of a FQDN. You now have two posters who have figured this out. So make sure you are using the correct FQDN when you try to connect.

»pso2.jp

NetFixer
From My Cold Dead Hands
Premium Member
join:2004-06-24
The Boro
Netgear CM500
Pace 5268AC
TRENDnet TEW-829DRU

NetFixer

Premium Member

said by NormanS:

said by Leem:

Access to that site via proxy works fine, so does VPN. I'm starting to get more suspicious about a possible IP Block.

What makes a "URL" a URL is the "HTTP://" part; the rest is just a FQDN. "WWW" is not a required part of a FQDN. You now have two posters who have figured this out. So make sure you are using the correct FQDN when you try to connect.

»pso2.jp

OTOH, that site has been changing IP addresses so often in the past few days, that it is either difficult for DNS and routing to keep up with the changes, or that site itself (or its host) is still blocking inbound traffic from multiple sources.

»toolbar.netcraft.com/sit ··· t_reboot




I can't connect to »pso2.jp from my Comcast, U-verse, or AT&T Mobility connections even though both Comcast and AT&T DNS servers resolve to the same IP address that netcraft.com shows as their current IP address:

C:\>dig pso2.jp @75.75.75.75
 
; <<>> DiG 9.9.2 <<>> pso2.jp @75.75.75.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17915
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
 
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;pso2.jp.                       IN      A
 
;; ANSWER SECTION:
pso2.jp.                132     IN      A       210.189.209.8
 
;; Query time: 31 msec
;; SERVER: 75.75.75.75#53(75.75.75.75)
;; WHEN: Tue Jul 01 16:41:35 2014
;; MSG SIZE  rcvd: 52
 
C:\>dig pso2.jp @68.94.156.1
 
; <<>> DiG 9.9.2 <<>> pso2.jp @68.94.156.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64430
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
 
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;pso2.jp.                       IN      A
 
;; ANSWER SECTION:
pso2.jp.                600     IN      A       210.189.209.8
 
;; Query time: 406 msec
;; SERVER: 68.94.156.1#53(68.94.156.1)
;; WHEN: Tue Jul 01 16:49:03 2014
;; MSG SIZE  rcvd: 52
 



Napsterbater
Meh
MVM
join:2002-12-28
Milledgeville, GA
(Software) OPNsense
Ubiquiti UniFi UAP-AC-PRO

Napsterbater to Leem

MVM

to Leem
Anyone watching this thread checkout these two.

»ISP-level block of Phantasy Star Online 2 servers?
»Dslextreme blocking access to phantasy star online 2