A problem accessing a login site

[#1]

@outcast 

I was concerned the thread would take the wrong direction looking at routers, I was using mtr on a raspberry pi, 

AS25180  83-244-249-17.cust-83.exponential-e.net

anyway it details the route from plusnet works as does telnet www.mytescomobile.com 443

Although you've been a bit secret on who your CP is, (I suspect A&A) you can.

@MisterW already mentioned

According to Firefoxs browser console

Loading failed for the <script> with source “https://ct.captcha-delivery.com/i.js”.

Someone from plusnet need to investigate this now

[#2]

---

@Dan_the_Van wrote:

@MisterW already mentioned

According to Firefoxs browser console

Loading failed for the <script> with source “https://ct.captcha-delivery.com/i.js”.

Someone from plusnet need to investigate this now

---

In Edge:

"This XML file does not appear to have any style information associated with it. The document tree is shown below."

<Error>
<Code>AccessDenied</Code>
<Message>Access Denied</Message>
</Error>

[#3]

I've just been able to try this from my phone using a different wi-fi and broadband connection. The problem didn't occur, so I could access the PAYG login as it should be.
I don't know what ISP the connection uses though.

[#4]

I have now tried it from another different location, and again, the problem didn't occur using their wi-fi and broadband.
So I am only getting the fault using my home wi-fi and Plusnet broadband.
Thanks for all of you who have contributed above, although I understand very little of the technical stuff.
What is the way forward please? Can I report it directly to Plusnet? I couldn't find a way to raise a support ticket, which I have been able to do in the past.

[#5]

I have raised a super user escalation.

[#6]

Hi All,

From testing here I can get the same error when I'm on a non BT/EE/Plusnet connection, but have NordVPN logged in so my initial assumption is that they are blocking some valid UK IP Address ranges.

I can try reporting it to them.

Steve

[#7]

@Steve_BT 

A warm welcome to the forums.

Seeking to unpick your response, can you please clarify / confirm around the "I can get the same error when I'm on a non BT/EE/Plusnet connection" statement...

1. You have reproduced the issue when connected via BT/EE/PN
2. You have reproduced the issue when connected via some other network (echoing @jab1 's report over their Zen service)
3. You have verified that the issue does not arise on other networks ... for example EE's mobile network

Not clearly understanding where NordVPN comes into the story.  It somewhat looks as though there might be a commonality for both PlusNet and Zen routing here.

[#8]

Thanks @Townman 

He are my scenarios:

• Connected to BT Broadband IP 81.158.205.144 - mytescomobile.com Loads fine (http 200)
• Connected to BT Broadband with Nord VPN Active IP 91.196.223.75 - mytescomobile.com fails (http 403)
• Spinning up an EC2 container in AWS Ireland IP 34.255.x.x - mytescomobile.com fails (http 403)

To me it looks like they are blocking based on IP range, including plusnet IP's in 31.125.0.0/16

It's not routing - in every scenario you are getting a response from the remote web server run by Exponential-e, either a 200 or 403

Steve

[#9]

---

@Townman wrote:

@Steve_BT 

A warm welcome to the forums.

Seeking to unpick your response, can you please clarify / confirm around the "I can get the same error when I'm on a non BT/EE/Plusnet connection" statement...

1. You have reproduced the issue when connected via BT/EE/PN
2. You have reproduced the issue when connected via some other network (echoing @jab1 's report over their Zen service)
3. You have verified that the issue does not arise on other networks ... for example EE's mobile network

Not clearly understanding where NordVPN comes into the story.  It somewhat looks as though there might be a commonality for both PlusNet and Zen routing here.

---

@Townman Some misreading/misconception here - I can get the login page up without issue, a;though it is slow compared to most other site.

[#10]

Hi All,

I've spoken to a director at Exponential-e who has been very helpful. Exponential-e don't manage that part of mytescomobile.com but have passed on my details to them.

I will let you know if they respond to me.

Steve

[#11]

Good afternoon - My name's James. I am the Network Manager at mytescomobile,com.

Exponential-E have forwarded this issue to me.

The problem has been described as a user getting a 403 error when connecting to www.mytescomobile.com from 31.125.68.172, while connecting from other IP addresses works.  A suggestion was that 31.125.0.0/16 may be blocked.

I have checked our firewall configuration, and we are not blocking traffic from 31.125.0.0/16. I can see successful connections from other IPs in that range, but I do not see any attempt from 31.125.68.172 in the last few days.

Could you please try the site again, and confirm that 31.125.68.172 is still the IP address you are connecting from?

[#12]

Hello James,

A warm welcome to Plusnet's forums - really great to have a supplier reach out and offer help.  I am not Plusnet staff, but one of the forum's super users who are all Plusnet customers.  Most of the super users have extensive backgrounds in managing IT and do pick up some of the reported user experiences helping to profile the issue.

The issue is more widespread that that IP range.  I am on a static IP 84.92.*.* and I cannot access that page.  The experience is that many Plusnet users (across multiple IP ranges) cannot access that URL.

@Steve_BT is the PlusNet staff member running with the issue ... though staff do not lurk here as frequently as do others!

[#13]

@JamesRollison 

I see this in any browser screen when attempting to connect to "https://www.mytescomobile.com", my static Public IP is 80.229.nnn.nn

I do not see this message when using mobile date.

[#14]

@Dan_the_Van Same here - on a completely different (non-Plusnet) IP.

[#15]

@JamesRollison 

Does this help - browser diagnostic console when trying to access the page - note I do NOT get a 403 error, but the "Enable JS" request advised by @Dan_the_Van 

www.mytescomobile.com/:1 Refused to load the script 'https://ct.captcha-delivery.com/i.js' because it violates the following Content Security Policy directive: "script-src-elem 'self' 'unsafe-inline' https://*.3ds.modirum.com https://*.adnxs.com https://*.cardinalcommerce.com https://*.cloudfront.net https://*.content-square.fr https://*.contentsquare.net https://*.doubleclick.net https://*.ensighten.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.gstatic.com https://*.hub.hsntech.com https://*.liveperson.net https://*.lpsnmedia.net https://*.quantserve.com https://*.reevoo.com https://*.salecycle.com https://*.tealiumiq.com https://*.tesco.com https://*.tescomobile.com https://3ds.eu.vaultmaxx.com https://3ds2.digitalpayments.co.uk https://3ds2.eu.vaultmaxx.com https://aacsw.3ds.verifiedbyvisa.com https://adservice.google.com https://ajax.googleapis.com https://analytics.twitter.com https://bat.bing.com https://cap.attempts.securecode.com https://connect.facebook.net https://danskebank-3dsecure.wlp-acs.com https://eu-dbug-tam.sociomantic.com https://eu-sonar.sociomantic.com https://geo.captcha-delivery.com https://ht.blackhawknetwork.com https://insitez.blob.core.windows.net https://js.datadome.co https://maps.googleapis.com https://manage.ensighten.com https://mpsnare.iesnare.com https://nexus-test.ensighten.com https://nexus.ensighten.com https://payments.securetrading.net https://pixel.mediaiqdigital.com https://rules.quantcount.com https://sc-static.net https://secure.barclaycard.co.uk https://secure4.arcot.com https://secure5.arcot.com https://secure6.arcot.com https://secure7.arcot.com https://servedby.flashtalking.com https://service.maxymiser.net https://services.postcodeanywhere.co.uk https://ssl.google-analytics.com https://static.ads-twitter.com/ https://t.co https://tags-eu.tiqcdn.com https://tags.tiqcdn.cn https://tags.tiqcdn.com https://topup.mytescomobile.com https://tr.snapchat.com https://translate.google.com https://translate.googleapis.com https://tsys.arcot.com https://verifiedbyvisa.barclays.co.uk https://verify.monzo.com https://www.clicksafe.lloydstsb.com https://www.dwin1.com https://www.dwin1.com.x.3a4338da0f8be047130b30f0c4fd9561dd85.9270fc4.id.opendns.com https://www.facebook.com https://www.google.co.uk https://www.google.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagservices.com https://www.liveengage.com https://www.liveengage.net https://www.liveper.sn https://www.liveperson.com https://www.mycardsecure.com https://www.securesuite.co.uk".

www.mytescomobile.com/:1 Refused to load the image 'http://www.mytescomobile.com/o/favicon/' because it violates the following Content Security Policy directive: "img-src 'self' data: https://maps.gstatic.com".

retailer.js:2 No messages from Iterable
retailer.js:2 Error fetching messages from Iterable No messages from Iterable

EDIT: @jab1  is a Zen customer ... so not just Plusnet IPs ... could possibly be a BT peering / routing issue.