Server Blocked by Cisco Umbrella / Open DNS

[tmno2]

Hi Aidan,
And others as effected.

5D584391-1BC1-43C5-A6F9-59DEBD1A79A4.png (207.66 KiB) Viewed 48279 times

AF7B1411-FAE9-4C9C-8287-699077331E23.png (150.44 KiB) Viewed 48279 times

It was about the 16th or 17th of March, I forget at what time, that my access to the GrassGames, Solitaire 3D, Intelligence, scoreboard was blocked by an update failure, due to passage through the first hop DNS server “ syd16“ being blocked by “ Cisco Umbrella / Open dns” purportedly because resident malware was found either on this server or on the next hop.

This blocked access was cleared around 1600 Australian eastern daylight saving time, Thursday 22/03/2018, indicated by a sudden return of accessibility to the scoreboard which had been previously blocked, with normal access and updating following.

This appears to be a completely new type of malware spread management by Open dns / Cisco that both surprised and interfered with, to me, “ONLY” access to the “GrassGames” platform and no other as all my other internet activity was not effected.

It would be nice to know firstly, if others were similarly effected, and secondly, how and who fixed the problem thus allowing things to go back to normal.

Here’s hoping I was not the only one effected.

tmno2
Terry

[tmno2]

Hi Aidan,


The same blockage occurred for the same reasons (ie Cisco Umbrella / Open.dsl ) again AM , about 0830 +/- Tuesday, 3rd April, Aust eastern standard time. And as I was researching and analysing the search route, and “work around“ the blockage was disengaged around 1430 AU Eastern std time, and things were back to normal. Except for the grassgames.com site being shown as “Site Insecure (in red) “ in the Safari “search and address” field, unfortunately unable to get a screen shot of this, as this warning has since been removed, and later attempts to bring it to the screen proved unsuccessful.
This stuff has probably got a lot to do with that Russian attempting to hot spot your site with a Russian porno site address, which appeared to be removed fairly quickly from the forums.
He probably dropped a bit of malware on the site in passing just for practice.

B48B24CA-A30F-4E5A-BE46-877E66319988.png (207.66 KiB) Viewed 48239 times

CC4FB5F3-AAA4-4604-9BC5-3BDBAACD1739.png (150.44 KiB) Viewed 48239 times

tmno2
Terry

[Aidan]

Sorry, I didn't see this post at the time. GrassGames.com has moved since so hopefully this is not an issue anymore.

[tmno2]

Hi Aidan.
I think this problem must have been overcome as you advise, because I have had nothing to complain about for ages.
The only thing thing I would like to see fixed really is the dating format used in the forums.
I think dd/ mm / yyyy would be more relevant than the actual number of days since your original birth date.
Terry