[193594] in North American Network Operators' Group
Re: ticketmaster.com 403 Forbidden
daemon@ATHENA.MIT.EDU (joel jaeggli)
Mon Feb 6 19:44:19 2017
X-Original-To: nanog@nanog.org
To: Suresh Ramasubramanian <ops.lists@gmail.com>, mike.lyon@gmail.com,
"Ethan E. Dee" <edee@globalvision.net>
From: joel jaeggli <joelja@bogus.com>
Date: Mon, 6 Feb 2017 16:37:37 -0800
In-Reply-To: <64260455-395C-4864-B492-0BFD99EDC89D@gmail.com>
Cc: Niels Bakker <niels=nanog@bakker.net>, nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--UcOt5rn9Im0JqaooHSWdn5hMXRXE7CP7h
From: joel jaeggli <joelja@bogus.com>
To: Suresh Ramasubramanian <ops.lists@gmail.com>, mike.lyon@gmail.com,
"Ethan E. Dee" <edee@globalvision.net>
Cc: Niels Bakker <niels=nanog@bakker.net>, nanog@nanog.org
Message-ID: <676ebaf4-48c9-1bd4-9de3-1a3fe3c5f97b@bogus.com>
Subject: Re: ticketmaster.com 403 Forbidden
References: <a8c0d142c7f04196938c89de196f1563@SC58MEXGP033.CORP.CHARTERCOM.com>
<20170206160901.GA86663@excession.tpb.net>
<a05fe78f-27d1-0e23-e69a-6ddfebf2a2c0@globalvision.net>
<0B7AD244-66FD-4CC2-95AD-DCC0316432C4@gmail.com>
<64260455-395C-4864-B492-0BFD99EDC89D@gmail.com>
In-Reply-To: <64260455-395C-4864-B492-0BFD99EDC89D@gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
On 2/6/17 8:49 AM, Suresh Ramasubramanian wrote:
> My guess is you have or had sometime in the long distant past a scalper=
operating on your network, using automated ticket purchase bots.
>
> If you still have that scalper around, you might want to turf him. If =
he=E2=80=99s ancient history, saying so might induce them to remove the b=
lock.
Note that scalper bots benefit from pools of residential ip addresses to
work with in subverting the anti-bot countermeasures of ticket sale
platforms. so there are the legitimate possibility that subverted hosts
are being used for that sort of thing.
> --srs
>
> On 06/02/17, 8:45 AM, "nanog-bounces@nanog.org on behalf of mike.lyon@g=
mail.com" <nanog-bounces@nanog.org on behalf of mike.lyon@gmail.com> wrot=
e:
>
> Yup, i have a /22 that has the same problem. Support is useless...
> =20
> > On Feb 6, 2017, at 08:35, Ethan E. Dee <edee@globalvision.net> wr=
ote:
> >=20
> > It gives me a Forbidden error.
> > It has for over a year.
> > There support says they are not allowed to me why by their policy=
=2E
> > it is across an entire /19.
> > I gave up after the fifth time and encourage the customers to cal=
l them individually.
> >=20
> >> On 02/06/2017 11:09 AM, Niels Bakker wrote:
> >> * Charles.Manser@charter.com (Manser, Charles J) [Mon 06 Feb 201=
7, 16:21 CET]:
> >>> It seems that browsing to ticketmaster.com or any of the associ=
ated IP addresses results in a 403 Forbidden for our customers today. Is =
anyone else having this issue?
> >>=20
> >> http://help.ticketmaster.com/why-am-i-getting-a-blocked-forbidde=
n-or-403-error-message/=20
> >>=20
> >>=20
> >> -- Niels.
> >=20
> =20
>
>
>
--UcOt5rn9Im0JqaooHSWdn5hMXRXE7CP7h
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iEYEARECAAYFAliZFtEACgkQ8AA1q7Z/VrKOwgCeOf/aYGYBgbvmSZbu0BK01Scw
QCsAn2U1F9mTIETX8IBj4H5lDjP91tPU
=r2Nq
-----END PGP SIGNATURE-----
--UcOt5rn9Im0JqaooHSWdn5hMXRXE7CP7h--
