multiple websites "access denied" over verizon Fios network
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
My computer and other mobile devices are being denied access to certain mainstream websites ( costco ,homedepot, and many others).
Getting an access denied error message:
Access Denied
You don't have permission to access "http://www.costco.com/" on this server.
Reference #18.7224c317.1711320893.8c17baf4
https://errors.edgesuite.net/18.7224c317.1711320893.8c17baf4
These sites work fine if I disconnect from my WIFI and just use my mobile network.
I see others have experienced the same issues but not seeing anything that solves this.
I rebooted router and ONT several times. Very frustrating.
Any help would be appreciated.
Solved! Go to Correct Answer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Awesome, so we are getting somewhere now. The fact that the Akamai page is thinking your IP belongs to a Web Crawler gives us a starting point.
A web crawler can be thought of as a program which is designed to surf the web. Web crawling is what companies such as Google and Microsoft (Bing) do in order to produce a database of search results. Other times, crawlers can be used to archive information or save it for later use. Sometimes, crawlers can be unwanted because they are accessing too many resources at once, placing heavy loads onto websites. Or, crawlers may be blocked in an effort to protect copyrights or privacy.
What we need to figure out now is why Akamai thinks your IP belongs to a web crawler. There are a few things I would do here.
For each of your computers running Windows, and for your Android phones, I would do a bit of a security check-up just to make sure malware isn't the culprit here. On Windows, make sure you've got all of your Windows Updates in order. Here's a KB from Microsoft on how to update your system. If your Windows version is anything older than Windows 10, I would recommend exploring an upgrade path to something supported by Microsoft.
After making sure Windows is up to date, I would perform a malware scan. The best two tools to use for this are Windows Defender (built into Windows), along with MalwareBytes (Free edition for scanning) for a second opinion. Use both to scan for and remove any software they detect as malicious.
For your Android phones, the best thing to do here is to check the Google Play Store (or if you use a different app store, use that one), and ensure your applications are up to date. Google has something called Play Protect which can help identify any malicious applications and remove them.
If your devices seem clean, the next approach I would do is keep an eye on your IP address. Assuming you leave your router powered on all the time, your IP address should rarely change on Verizon FiOS. Take note of what your IPv4 address is when Akamai says your IP does not have a bad risk score, and then take note of what the IP address is when you do receive a bad risk score. Should the IP address remain the same when it switches between bad and good, then there's a good chance something on your network is making Akamai filter traffic. However, if the IP address is changing, then there is a good chance that whoever held the IP address previously, has something on their network which is flagging the IP address as a risk. Or perhaps it is an IP which keeps cycling through between you and others in the IP address pools, and there is a "bad" IP which needs to be cleared by Akamai.
Hope that all makes sense.
Another thing you can do to make sure something on your network (or your router for that matter) isn't exposing anything nasty to the Internet which is causing Akamai to flag the IP as bad, is run the GRC ShieldsUp test. The GRC ShieldsUp test will help scan your IP address for what we call "open ports" or "open services." To start a test, visit the link above, click Proceed, and then on the main page, choose the option to scan "All Service Ports." A good test should look something like this when it completes:
After using ShieldsUp, another resource I like to use is a service called Shodan. It is a service which allows you to see if your IP address ever operated a service. Using it is pretty simple. Obtain your IP address, then visit https://shodan.io and enter it into the Search box at the top of the page. Once you search your IP address, it may display information such as the ISP for the IP address, the location of the IP address, as well as any known services. If you get a "No Results Found" page, then the IP address has never exposed something that Shodan has encountered, which is a GOOD thing in this case.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Newbie, I am having the same exact issue. This all started with me back in Nov. 2023. The only thing that has temporarily corrected it, is changing the IP address. I have had this "access denied" and forbidden (403) on apps issues 5 times since Nov. 2023. Again, changing the IP, allowed me to access these sites, but only a short amount of time. I even swapped out the FIOS (provided) router with an Orbi Netgear router but still getting the same "access denied". I cleared all browser history; cleared cache across the board, to no prevail.
I was getting "access denied" over the weekend, changed my ISP IP address and it worked for 2 days. Now, I have "access denied" again on sites like lowes.com; royal caribbean.com' dunkindonuts.com; shark.com; costco.com; etc.
PLEASE SOMEONE HELP US!!!!! This is frustrating. Not being on FIOS network, like hotspot of mobile data, all works fine. So the underlying issue is FIOS!!!!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have tried some of those fixes besides changing out equipment to no avail. I will try to change the IP and see if it works even if its only temporary.
The only changes that I can think of recently within the same time frame is that windows had an update and I also went from a wifi connection to a hard wired connection on my desktop. Though the problem persists across all devices connected to my router hard wired or wifi. I've gone through settings and parental features, toggling through to eliminate any settings blocking access, but nothing has worked so far.
Hopefully there is someone on here with some networking knowledge, or know of some checkbox that needs to be unchecked.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for responding. I even factory reset to no avail. either. It is not a setting in the FIOS router as when swapping it for the Netgear Orbi (6000) I was still getting access denied to sites. This makes me think that it is not the router but rather how FIOS, itself, allows access to sites or not. It is them and not the router. If I got the same "access denied" after swapping out the routers, then it's is on FIOS, if that makes sense? I'm at a loss. We/I need help!
Oh, I even tried changing the DNS and it made it worse; probably more to do with me not knowing really how to do and I googled this. However, I should not be needing to do this to gain access to sites! Fios help!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Changing my IP on my router seems to work, even if temporarily. Definitely an issue Verizon FIOS needs to address.
I deal with the FiOS network at work and there are huge complaints for latency issues for devices that require direct comms with each other at remote locations. These are big money commercial accounts, and they could care less about addressing that so imagine a single person residential complaint about Costco.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
These errors are being generated by Akamai, a company responsible for providing Content Distribution services as well as web caching and web security to many large companies such as Lowes and Home Depot. The blocking isn't by Verizon in this case, because the remote web server answered back.
Akamai provides the following website which can help identify whether your current IP Address is being flagged as "Risky" and why: https://www.akamai.com/us/en/clientrep-lookup/
Once you use that tool to validate your IP address against Akamai's rule set, they will also provide an FAQ as to what may be going on.
Akamai may be flagging your IP as malicious due to a "bad neighbor" on the same IP range running things like bots, aggressive crawlers, or even things like Tor relay nodes which can bring undesirable traffic to websites. Or it's possible a device on your network has malware and is subsequently getting flagged.
One thing I typically advise for Apple devices is disabling iCloud Relay. iCloud Relay in and of itself is a public proxy, and many websites will block public proxies for reasons such as security.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you. At this moment in time, I will have to trust what you are saying but not sure if accurate. I read what you sent me and the link to the site and it stated that I have a "bad ip". How do I rectify this then? I don't "choose" my ip, as it is assigned to me. I'm a novice but can figure things out of told what to do to fix
I got this back when looked my ip up on akami
The IPv4 Address was associated with the following malicious activity:
- Web Scraper
I don't know what we scraper is at all. It is not something on my laptop or phone that I downloaded and since it happens across every device, it can't be software downloaded. Otherwise, I would be able to get to sites on other devices.
Now that you have given me something to go by as possibly what the issue is, how do I rectify it and how do I get a "good IP" address then?.
I do not have apple products. I use Android and Windows laptop. But again the sites that I have "access denied" happen on every device.
Thanks for giving me these details and hopefully this is the issue and then hopefully you can provide what I can do to get a good IP and or fix this moving forward because this has been going on since November December of last year.
Every time I do change the ip, to your point, it works but then a day maybe a month later, it no longer does. I'm at a loss please help further I hope
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I did NOT do anything but go on my laptop and I am able to get on these sites again. I went back to the akami site and got back that my IP is clean. See below:
The IP Address xxx.xx.xx.xx did not receive a bad risk score.
When I sent you the other response back (20-30 mins. ago) I was on my phone and I just checked my phone (just in case it was device related) and that too is getting that it "did not receive a bad risk score" and therefore, these sites are working like (dunkin; royal; etc.).
Now what? I'm sure it will revert "back" to a "bad IP" any minute, day, week or month later. I'm sure of it since I did NOTHING and I doubt it just "fixed itself". So, if you are accurate and this akami site is blocking me as having a bad IP, how do I permanently correct? Get rid of the web scraping; etc.? Change IP to a "good IP" at all times without having internet issues with FIOS... Please help and I thank you!!!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Sorry, another follow up...Though I now still show "not a bad risk IP" and yes, I can get on dunkindonuts.com and royalcaribbean.com, I still cannot get on Lowes.com or Costco.com as example.
So, if I "do not have a bad IP" (currently) and some sites I can access that I could not the last couple days, why am I still getting "access denied" on some sites like costco; lowes; etc.?
This is so frustrating but you have been the most helpful of late
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Awesome, so we are getting somewhere now. The fact that the Akamai page is thinking your IP belongs to a Web Crawler gives us a starting point.
A web crawler can be thought of as a program which is designed to surf the web. Web crawling is what companies such as Google and Microsoft (Bing) do in order to produce a database of search results. Other times, crawlers can be used to archive information or save it for later use. Sometimes, crawlers can be unwanted because they are accessing too many resources at once, placing heavy loads onto websites. Or, crawlers may be blocked in an effort to protect copyrights or privacy.
What we need to figure out now is why Akamai thinks your IP belongs to a web crawler. There are a few things I would do here.
For each of your computers running Windows, and for your Android phones, I would do a bit of a security check-up just to make sure malware isn't the culprit here. On Windows, make sure you've got all of your Windows Updates in order. Here's a KB from Microsoft on how to update your system. If your Windows version is anything older than Windows 10, I would recommend exploring an upgrade path to something supported by Microsoft.
After making sure Windows is up to date, I would perform a malware scan. The best two tools to use for this are Windows Defender (built into Windows), along with MalwareBytes (Free edition for scanning) for a second opinion. Use both to scan for and remove any software they detect as malicious.
For your Android phones, the best thing to do here is to check the Google Play Store (or if you use a different app store, use that one), and ensure your applications are up to date. Google has something called Play Protect which can help identify any malicious applications and remove them.
If your devices seem clean, the next approach I would do is keep an eye on your IP address. Assuming you leave your router powered on all the time, your IP address should rarely change on Verizon FiOS. Take note of what your IPv4 address is when Akamai says your IP does not have a bad risk score, and then take note of what the IP address is when you do receive a bad risk score. Should the IP address remain the same when it switches between bad and good, then there's a good chance something on your network is making Akamai filter traffic. However, if the IP address is changing, then there is a good chance that whoever held the IP address previously, has something on their network which is flagging the IP address as a risk. Or perhaps it is an IP which keeps cycling through between you and others in the IP address pools, and there is a "bad" IP which needs to be cleared by Akamai.
Hope that all makes sense.
Another thing you can do to make sure something on your network (or your router for that matter) isn't exposing anything nasty to the Internet which is causing Akamai to flag the IP as bad, is run the GRC ShieldsUp test. The GRC ShieldsUp test will help scan your IP address for what we call "open ports" or "open services." To start a test, visit the link above, click Proceed, and then on the main page, choose the option to scan "All Service Ports." A good test should look something like this when it completes:
After using ShieldsUp, another resource I like to use is a service called Shodan. It is a service which allows you to see if your IP address ever operated a service. Using it is pretty simple. Obtain your IP address, then visit https://shodan.io and enter it into the Search box at the top of the page. Once you search your IP address, it may display information such as the ISP for the IP address, the location of the IP address, as well as any known services. If you get a "No Results Found" page, then the IP address has never exposed something that Shodan has encountered, which is a GOOD thing in this case.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ok I ran through all of your recommendations and I too have been labeled a "WEB SCRAPER" on my IP associated with my router.
Did my malware Scans and came up clean. No open ports, or bad info for my IP. I requested an investigation on the Akamai site. I'm sure it isn't a quick process.
The only site I seem to be able to find that I am restricted on for now is Costco.
Thank you for sharing your knowledge.
hopefully I can get this hammered out.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Same here. All came back clean. I'm at a loss. Appreciate the details and did diligence. Don't know what to do now
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Scanning a single device won't help. All of the devices on your network could scrap the web and be attributed to your public WAN IP, so you need to check for malware on all the devices.
Verizon can't control a third party from labeling your public WAN IP as malicious. You need to contact whoever mis-classified your IP to change this classification.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Not sure how to scan Firesticks, smart TV's or an Xbox one, but changing IP's is only temporary so I'm lead to believe its a configuration or something attached to my network is creating the issue. I will keep trying different things to see if I can stumble on a solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you. I am still at a loss. I scanned all the devices I can think of in regards to malware and they all came back clean. I even contacted the administrator at certain sites and none of them got back to me to unblock my ip. However, I can't go through this to every administrator at certain sites. It's kind of crazy. There has to be a fix and I believe it is embedded with help fios gives out IP addresses. Any other solution that you find out, keep me posted and I will do the same. Appreciate the follow-up
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Smart TVs, Streaming Sticks, and Xboxes are generally safe if you've downloaded everything from the App Store. The only worry with them would be if your Fire TV is Jailbroken. Then it could be potentially running some worrisome software.
With that said, glad things have returned back clean at least from a basic security standpoint. If you've requested an investigation with Akamai on the issue, hopefully they will get back to you soon on that one.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks and I did request an investigation with Akamai on the issue, and they sent me a link to see the contact info for the administrator of a site that I'm being "access denied", which I emailed and nothing. I'm in limbo and can't access some sites.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It can take a week or two in my experience for the site administrators to get back to you. If they don't, just try again.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
By the way, I get the following when using shodan. Not sure what it is telling me or if an issue? Thanks again
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
For GRC Shieldsup - however, I failed? One red box under 554? What does this mean? Could this be my issue? If so, how do I fix?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Would a program such as IP Vanish help or inhibit. Was considering getting the app for my Firestick since it is jailbroke and possibly my issue.
