K

Visitor

 • 

4 Messages

Friday, June 11th, 2021 11:42 AM

Closed

Getting Access Denied error for some websites

Hello, when I try to navigate to URLs for American Express, Vistaprint, Old Navy, United and some others on my home network, I immediately get a following message below and the reference number changing slightly if you reload the page. 

Access Denied

You don't have permission to access "http://www.united.com/" on this server.

Reference #18.b4a83817.1623410394.2aa7f9f1

This issue has been going on for almost couple of months now, after spending hours on numerous phone calls with various agents at Comcast Customer Service/Advanced Tech Support/Customer Security Team, swapping four modems (initially I was using my own Xfinity Arris Modem, few years old, then bought a new Xfinity compatible one, which I returned and now finally on a second rental from the company) and going through various steps to reboot, restart, clearing cache, turning off XFi Security, tweaking browser settings, I'm still facing the same issue, irrespective of what device/browser/etc. I try it on.  Apparently, no one is able to figure out why this is happening or able to assist in resolving the issue. 

All the websites were working to our knowledge until we realized we couldn't go to United Airlines website or use their app to check our itinerary recently.  The strange part is when the modem is initially setup and activated, the sites do work briefly and then they stop working some time later.  I have read about others facing similar issue and it maybe due to CDN like Akamai could block access to websites.  I checked my IP on their reputation tool and it stated that I have a bad score due to a scanning tool, however I'm not running anything.  I also submitted a request to have them investigate the IP, but have not heard back.  Can someone please help me with this issue?!!! I'm tired of going in circles and just want my internet fully working again like before.

Thank you in advance!

Kedar

--------------------------------------------------------------------------------------------------------------

Sample Trace Route 

tracert www.united.com

Tracing route to e2788.x.akamaiedge.net [104.114.0.54]
over a maximum of 30 hops:

  1     1 ms     1 ms     1 ms  10.0.0.1
  2    11 ms    10 ms    10 ms  96.120.25.189
  3    13 ms    15 ms    11 ms  96.110.165.157
  4    11 ms    12 ms    12 ms  te-0-7-0-23-sur01.columbus.in.indiana.comcast.net [68.86.188.81]
  5    12 ms    11 ms    11 ms  162.151.36.253
  6    15 ms    10 ms    11 ms  be-125-ar01.elmhurst.il.chicago.comcast.net [68.86.188.61]
  7    11 ms    12 ms    16 ms  be-32221-cs02.chicago.il.ibone.comcast.net [96.110.40.37]
  8    13 ms    12 ms    12 ms  be-1212-cr12.chicago.il.ibone.comcast.net [96.110.36.38]
  9    13 ms    12 ms    12 ms  be-304-cr13.350ecermak.il.ibone.comcast.net [96.110.38.221]
 10    12 ms    12 ms    16 ms  be-1413-cs04.350ecermak.il.ibone.comcast.net [96.110.35.45]
 11    12 ms    12 ms    11 ms  be-2411-pe11.350ecermak.il.ibone.comcast.net [96.110.33.206]
 12    13 ms    11 ms    10 ms  as16509-2-c.seattle.wa.ibone.comcast.net [50.242.148.94]
 13    17 ms    15 ms    15 ms  ae7.ctl-ord.netarch.akamai.com [23.203.151.207]
 14    11 ms    12 ms    10 ms  a104-114-0-54.deploy.static.akamaitechnologies.com [104.114.0.54]

Trace complete.

Official Employee

 • 

1.8K Messages

3 years ago

Hi there @kman2021!  Thank you so much for taking the time to reach out to Comcast here on our Community Forums.  We are so glad to hear from you and ready to assist with this in any way that we can today.  Your experience with your internet is something that we understand is extremely important. Let's get started!  First, could you please send me a private message and provide me with your full name, complete service address (city state and zip code included) and your 16 digit account number?  That way I will be able to access your account fully to take a look at this for you.  

Visitor

 • 

4 Messages

@ComcastArmand I sent you a message on the p2p chat. Let me know if any other info is needed! Thanks.

Problem Solver

 • 

369 Messages

Ok, thanks very much! I don't believe we have received your message yet and just to clarify the process a bit more detail, please send us a private chat message by following the process that our very own Communities Expert, BruceW so graciously outlined here:

  •    Click "Sign In" if necessary
  •    Click the "Peer to peer chat" icon or https://comca.st/2RROcVs
  •    Click the "New message" (pencil and paper) icon
  •    The "To:" line prompts you to "Type the name of a person". Instead, type "Xfinity Support" there.
  •    - As you are typing a drop-down list appears. Select "Xfinity Support" from that list.
  •    - An "Xfinity Support" graphic replaces the "To:" line.
  •    Type your message in the text area near the bottom of the window
  •    Press Enter to send it

Once you have started a chat message, please provide your name and service address as it appears on your monthly billing statements. Thanks again for both your time and patience!

Visitor

 • 

4 Messages

Hello, thanks for the reponse. I resent the message to Xfinity Support.  Let me know if you guys received it.

Thanks. 

Visitor

 • 

1 Message

3 years ago

Having the same issue as mentioned here and on several other threads of the like that have been closed out by ComCast.  I wanted to chime in b/c I have found that the common denominator seems to be (after tests of several website destinations) with sites that use Akamai to front end their content delivery (CDN).  Each test that I did via Trace Route (TraceRT) shows the final hop as XXXX-XX-XXX-XX.deploy.static.akamaitecnologoes.com [ip address].  Each HTTP request destined for an Akamai-fronted URL results in a HTTP 403 Access Denied response.

Akamai has an info page on this scenario (https://community.akamai.com/customers/s/article/Why-is-Akamai-blocking-me?language=en_US) and offers their Client Reputation Lookup tool that will tell you exactly why you are being blocked.  On this page, you can request an investigation.  (https://www.akamai.com/us/en/clientrep-lookup/).  

I just thought that I would share to help other Xfinity customers understand what is going on and pursue resolution with the source of the issue (Akamai).

Some Test Results from my troubleshooting:

tracert www.oldnavy.com

Tracing route to e12405.x.akamaiedge.net [104.88.73.134]
over a maximum of 30 hops:

  1     4 ms     2 ms     3 ms  10.0.0.1
  2    12 ms    12 ms    12 ms  96.120.65.193
  3    11 ms    15 ms    11 ms  96.108.101.25
  4    13 ms    13 ms    13 ms  be-316-ar01.needham.ma.boston.comcast.net [96.108.47.13]
  5    19 ms    14 ms    17 ms  50-234-87-10-static.hfc.comcastbusiness.net [50.234.87.10]
  6    15 ms    12 ms    13 ms  a104-88-73-134.deploy.static.akamaitechnologies.com [104.88.73.134]

tracert www.shein.com

Tracing route to e29831.b.akamaiedge.net [23.38.112.73]
over a maximum of 30 hops:

  1     4 ms     3 ms     3 ms  10.0.0.1
  2    13 ms    11 ms    19 ms  96.120.65.193
  3    10 ms    10 ms    11 ms  24.124.211.121
  4    11 ms    10 ms    13 ms  96.108.159.153
  5    13 ms    14 ms    13 ms  be-316-ar01.needham.ma.boston.comcast.net [96.108.47.13]
  6    16 ms    22 ms    22 ms  50-222-48-18-static.hfc.comcastbusiness.net [50.222.48.18]
  7    14 ms    15 ms    15 ms  a23-38-112-73.deploy.static.akamaitechnologies.com [23.38.112.73]

tracert www.lowes.com

Tracing route to www.lowes.com [104.88.72.117]
over a maximum of 30 hops:

  1     3 ms     2 ms     2 ms  10.0.0.1
  2     *        *      179 ms  96.120.65.193
  3     *        *       12 ms  96.108.101.25
  4    13 ms    14 ms    12 ms  be-316-ar01.needham.ma.boston.comcast.net [96.108.47.13]
  5   100 ms    72 ms    57 ms  50-234-87-10-static.hfc.comcastbusiness.net [50.234.87.10]
  6    14 ms    15 ms    15 ms  a104-88-72-117.deploy.static.akamaitechnologies.com [104.88.72.117]

Hope this is helpful.

(edited)

Visitor

 • 

4 Messages

@tsmolinsky You're absolutely correct, I saw the same thing and I became a member of the Akamai Community forum and requested to have my IP investigated on why it's being blocked, but never got a response.  I emailed their Customer support and unfortunately, they weren't of much help.  They asked me to reach out to site owners to find out why I'm being blocked, because they themselves don't block anyone. 

I talked to numerous agents at Xfinity support, but they have no clue when I bring up Akamai and haven't been able to resolve this issue. I'm to the point where I'm going to cancel my internet sub w/them.  Hopefully, you have better luck.

Visitor

 • 

1 Message

3 years ago

Did this ever get resolved? I am not able to log into my Xfinity account no matter what device or data provider I use. I've tried from home and away from home. 

forum icon

New to the Community?

Start Here