2Deg fiber & access to ASB.co.nz

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › 2Deg fiber & access to ASB.co.nz

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#272616 5-Jul-2020 19:16

Can other 2Deg customers access www.asb.co.nz &

I can't get to their website this whole weekend. Using mobile data works, using mobile app on home Wi-Fi fails.

Traceroute output

username:~$ traceroute online.asb.co.nz --resolve-hostnames
traceroute to online.asb.co.nz (140.168.252.26), 64 hops max
  1   192.168.1.9 (_gateway)  6.010ms  4.437ms  4.458ms 
  2   111.69.7.41 (41.7.69.111.static.snap.net.nz)  18.133ms  14.448ms  19.610ms 
  3   43.243.21.30 (as23655.akl.ix.nz)  12.276ms  13.372ms  13.051ms 
  4   43.243.21.27 (as4826.akl.ix.nz)  41.239ms  35.128ms  40.083ms 
  5   114.31.202.50 (be12.cor01.akl05.akl.nz.vocus.network)  39.965ms  35.257ms  35.118ms 
  6   114.31.202.55 (be202.cor01.syd11.nsw.vocus.network)  40.695ms  35.662ms  36.391ms 
  7   114.31.192.81 (be100.bdr01.syd11.nsw.vocus.network)  35.002ms  37.457ms  34.324ms 
  8   49.255.93.14 (49.255.93.14)  45.252ms  51.960ms  53.470ms 
  9   23.57.108.245 (po110.bs-b.sech-syd3.netarch.akamai.com)  46.541ms  36.269ms  33.294ms 
 10   72.52.1.145 (a72-52-1-145.deploy.static.akamaitechnologies.com)  38.047ms  42.377ms  34.436ms 
 11   23.57.108.249 (ae120.access-a.sech-syd3.netarch.akamai.com)  34.825ms  36.373ms  35.314ms 
 12   72.52.63.146 (a72-52-63-146.deploy.static.akamaitechnologies.com)  34.277ms  35.740ms  36.910ms 
 13   69.192.6.136 (a69-192-6-136.deploy.static.akamaitechnologies.com)  36.881ms  39.192ms  40.402ms 
 14   *  *  * 
 15   *  *  * 
^C
username:~$ traceroute www.asb.co.nz --resolve-hostnames
traceroute to www.asb.co.nz (140.168.252.24), 64 hops max
  1   192.168.1.9 (_gateway)  12.203ms  4.423ms  7.266ms 
  2   111.69.7.41 (41.7.69.111.static.snap.net.nz)  21.280ms  19.789ms  13.266ms 
  3   43.243.21.30 (as23655.akl.ix.nz)  10.633ms  12.695ms  17.959ms 
  4   43.243.21.27 (as4826.akl.ix.nz)  37.242ms  38.636ms  40.632ms 
  5   114.31.202.48 (be11.cor01.alb01.akl.nz.vocus.network)  40.484ms  40.675ms  36.246ms 
  6   114.31.202.53 (be201.cor01.syd11.nsw.vocus.network)  37.479ms  66.953ms  35.978ms 
  7   114.31.192.81 (be100.bdr01.syd11.nsw.vocus.network)  40.435ms  39.510ms  36.091ms 
  8   49.255.93.14 (49.255.93.14)  45.405ms  40.804ms  32.853ms 
  9   23.57.108.245 (po110.bs-b.sech-syd3.netarch.akamai.com)  39.561ms  33.802ms  37.221ms 
 10   72.52.1.147 (a72-52-1-147.deploy.static.akamaitechnologies.com)  39.882ms  54.115ms  63.115ms 
 11   23.57.108.249 (ae120.access-a.sech-syd3.netarch.akamai.com)  55.379ms  53.683ms  60.557ms 
 12   72.52.63.147 (a72-52-63-147.deploy.static.akamaitechnologies.com)  53.509ms  61.882ms  67.456ms 
 13   69.192.6.136 (a69-192-6-136.deploy.static.akamaitechnologies.com)  40.292ms  40.255ms  39.281ms 
 14   *  *  * 
 15   *  *  * 
^C

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

davidcole

6036 posts

Uber Geek

Trusted

#2517692 5-Jul-2020 19:28

Still? I just did it on my phone using safari on 2degrees Fibre.

Seemed to load fine.

Previously known as psycik

Home Assistant: Gigabyte AMD A8 Brix, Home Assistant with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Shelly Humidity and Temperature sensors
Media:Chromecast v2, ATV4 4k, ATV4, HDHomeRun Dual
Server Host Plex Server 3x3TB, 4x4TB using MergerFS, Samsung 850 evo 512 GB SSD, Proxmox Server with 1xW10, 2xUbuntu 22.04 LTS, Backblaze Backups, usenetprime.com fastmail.com Sharesies Trakt.TV Sharesight

michaelmurfy

meow
13257 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2517695 5-Jul-2020 19:32

See here: https://www.geekzone.co.nz/forums.asp?forumid=40&topicid=269759&page_no=1#2456073

dasimpsonsrule:

I have come across this issue before. We found out that ASB use brightcloud protection on their website, so if brightcloud decides to blacklist your IP address then you loose access to their site. You can check your IP here: https://www.brightcloud.com/tools/url-ip-lookup.php.

To fix it we emailed brightcloud and they eventually unblocked our IP address, but I do remember it took about a week for them to look into it and remove the block.

I'd say with 2degrees now using CG-NAT this may become more of a problem if somebody on that CG-NAT public IP is doing something dodgy.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

msukiwi

2418 posts

Uber Geek

Lifetime subscriber

#2517701 5-Jul-2020 19:45

Not a problem from Christchurch.

2Degrees Fibre with Static IP.

Sideface

9360 posts

Uber Geek

Trusted

Lifetime subscriber

#2517725 5-Jul-2020 20:35

Not a problem in Wellington either.

I'm on 2degrees UFB, and login to that address daily - including today.

Have never had a problem.

EDIT I am NOT on a static IP.

Sideface

timmmay

20582 posts

Uber Geek

Trusted

Lifetime subscriber

#2517726 5-Jul-2020 20:36

No problems in Wellington on 2degrees fiber with static IP.

My traceroute to the online site looks a bit different to yours at the start. Seems my traffic goes via megaport, yours via IX.

3 14 ms 14 ms 13 ms as23655.auckland.megaport.com [43.243.22.49]
4 43 ms 41 ms 40 ms as4826.auckland.megaport.com [43.243.22.18]
5 40 ms 37 ms 40 ms be11.cor01.alb01.akl.nz.vocus.network [114.31.202.48]
6 56 ms 55 ms 53 ms be201.cor01.syd11.nsw.vocus.network [114.31.202.53]
7 57 ms 57 ms 55 ms be100.bdr01.syd11.nsw.vocus.network [114.31.192.81]
8 38 ms 41 ms 37 ms 49.255.93.14
9 37 ms 37 ms 57 ms po110.bs-a.sech-syd3.netarch.akamai.com [23.57.108.243]
10 40 ms 40 ms 37 ms a72-52-1-147.deploy.static.akamaitechnologies.com [72.52.1.147]
11 39 ms 37 ms 41 ms ae120.access-a.sech-syd3.netarch.akamai.com [23.57.108.249]
12 41 ms 37 ms 37 ms a72-52-63-147.deploy.static.akamaitechnologies.com [72.52.63.147]
13 38 ms 37 ms 40 ms a69-192-6-136.deploy.static.akamaitechnologies.com [69.192.6.136]
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.

davidcole

6036 posts

Uber Geek

Trusted

#2517730 5-Jul-2020 20:45

Yeah, all those saying it’s fine are on static ips (me included)

JayADee

2148 posts

Uber Geek

#2517733 5-Jul-2020 20:58

Static IP no problem.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2517762 5-Jul-2020 22:56

michaelmurfy:

See here: https://www.geekzone.co.nz/forums.asp?forumid=40&topicid=269759&page_no=1#2456073

dasimpsonsrule:

I have come across this issue before. We found out that ASB use brightcloud protection on their website, so if brightcloud decides to blacklist your IP address then you loose access to their site. You can check your IP here: https://www.brightcloud.com/tools/url-ip-lookup.php.

To fix it we emailed brightcloud and they eventually unblocked our IP address, but I do remember it took about a week for them to look into it and remove the block.

I'd say with 2degrees now using CG-NAT this may become more of a problem if somebody on that CG-NAT public IP is doing something dodgy.

BrightCloud is reporting my IPv4 & IPv6 address as benign. So no issues there (hopefully).

I have a dynamically assigned address. I'll contact ASB in the morning & see if they know of anything.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2517763 5-Jul-2020 23:00

davidcole: Still? ...

Yes, still. I did work on my replacing my Pi-Hole device, so did a lot of troubleshooting there first. Changed DNS settings back, disabled IPv6, rebooted router, rebooted PC & still problematic.

Will set DNS to ISP default & try again. Either way, I'll contact ASB in the morning.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2517764 5-Jul-2020 23:06

Initially also had problems connecting to www.superlife.co.nz. Thought the two were related. Once I could connect to Superlife again, I was hopeful about ASB ...

username:~$ traceroute --resolve-hostnames my.superlife.co.nz
traceroute to my-superlife-co-nz.cdn.red-shield.net (103.241.87.110), 64 hops max
1 192.168.1.9 (_gateway) 7.207ms 4.506ms 7.840ms
2 111.69.7.41 (41.7.69.111.static.snap.net.nz) 17.368ms 10.733ms 13.872ms
3 * * *
4 103.26.68.14 (as23655.sydney.megaport.com) 33.982ms 44.424ms 35.113ms
5 103.26.68.102 (as36351.sydney.megaport.com) 32.101ms 35.766ms 43.345ms
6 169.45.18.246 (ae6.cbs01.eq02.syd02.networklayer.com) 40.201ms 33.281ms 31.869ms
7 169.45.19.23 (17.13.2da9.ip4.static.sl-reverse.com) 37.251ms 39.874ms 34.039ms
8 130.198.118.135 (87.76.c682.ip4.static.sl-reverse.com) 46.687ms 50.320ms 39.951ms
9 130.198.118.157 (9d.76.c682.ip4.static.sl-reverse.com) 37.794ms 38.450ms 36.166ms
10 130.198.86.12 (c.56.c682.ip4.static.sl-reverse.com) 35.558ms 33.983ms 37.625ms
11 * * *
12 * * *
13 * * *

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#2517768 5-Jul-2020 23:44

ANglEAUT: ... Will set DNS to ISP default & try again.

Well, that seems to have fixed it for now. 🤔 Why are IPS DNS server settings working when OPenDNS settings (original, before Pi-Hole) didn't work anymore after reverting back from Pi-Hole to OpenDNS?

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.