Nagios Support Forum

Hi,

I have a problem with the this support site from our corporate LAN.
maxcdn.bootstrapcdn.com 104.18.11.207 is blacklisted as a spam/phishing site.

It appears that support.nagios.com is loading something from this website.
When it fails the whole screen turns opaque white and cannot click anything.

I am creating this ticket from my mobile.

Please advise on how to sort this problem. Thanks.

Hi rajasegar,

Is the problem intermittent or consistent ? Does the page load normally after maxcdn.bootstrapcdn.com times out ?

Thanks in Advance,
Keith

Testing

kfanselow wrote:Hi rajasegar,

Is the problem intermittent or consistent ? Does the page load normally after maxcdn.bootstrapcdn.com times out ?

Thanks in Advance,
Keith

It is consistent. It remains white. Please assist on this as we need to create support cases.

Hi rajasegar,

Have you tried using a different browser ? I did some testing using Firefox with bootstrapcdn.com blocked and observed the behavior you described intermittently. When I did observe the behavior it was simply a matter of reloading or waiting for the connection attempts to timeout before the page returned to normal.

Regardless you should reach out to your security team about the issue. Blocking bootstrapcdn.com will probably cause problems with a number of websites and they seem to be flagged as "safe" by quite a few security vendors.


Thanks and Best Regards,
Keith

kfanselow wrote:Hi rajasegar,

Have you tried using a different browser ? I did some testing using Firefox with bootstrapcdn.com blocked and observed the behavior you described intermittently. When I did observe the behavior it was simply a matter of reloading or waiting for the connection attempts to timeout before the page returned to normal.

Regardless you should reach out to your security team about the issue. Blocking bootstrapcdn.com will probably cause problems with a number of websites and they seem to be flagged as "safe" by quite a few security vendors.


Thanks and Best Regards,
Keith

The company encountered valid phishing attempt from this IP 104.18.11.207. This is the one that is blocked not the URL. The security team refuses to budge unless someone can prove it is not a phishing site.

I tried using Firefox 94.0.1 32bit and the same result. It turn white even refreshing 5 times same issue.

The issue now is the IP has been confirmed being used as a phishing site and blocked.
We need a solution from Nagios as we need to access your support site.

Stating other security vendors consider it as safe does not help as no security team will accept that statement.

Check this site and see all the reports coming in.
https://www.abuseipdb.com/check/104.18.11.207

Nagios team can you please revert back on this.
Thanks

None of us are seeing issues on our end, it is likely something in your network that is having issues if you are having issues with the site (we use it all day long to answer questions and we are remote so using different IPs/networks).

Please try disabling any proxies, try clearing your browser cache, and try accessing it from another system (internally AND externally) to validate where the issue is coming from.

ssax wrote:None of us are seeing issues on our end, it is likely something in your network that is having issues if you are having issues with the site (we use it all day long to answer questions and we are remote so using different IPs/networks).

Please try disabling any proxies, try clearing your browser cache, and try accessing it from another system (internally AND externally) to validate where the issue is coming from.

I already told you maxcdn.bootstrapcdn.com 104.18.11.207 is blacklisted as a spam/phishing site.
It is being used by support.nagios.com.