Problem with Cloudflare and Wind/Tre connection (Italy)

Website, Application, Performance
1

Hi guys, on my site, with active cloudflare, my problem with the Italian operator “Wind/Tre”. Users who have this connection cannot access my site. Below are some tests from Wind connection. If I disable the cloudflare proxy, the problem doesn’t occur How can I fix?

Thank you

C:\Users***>nslookup www.milanworld.net
Server: dns.google
Address: 8.8.8.8

Non-authoritative answer:
Name: www.milanworld.net
Addresses: 2606:4700:20::681a:ada
2606:4700:20::681a:bda
2606:4700:20::ac43:48f0
172.67.72.240
104.26.11.218
104.26.10.218

C:\Users***>nslookup www.milanworld.net 8.8.8.8
Server: dns.google
Address: 8.8.8.8

Non-authoritative answer:
Name: www.milanworld.net
Addresses: 2606:4700:20::681a:ada
2606:4700:20::681a:bda
2606:4700:20::ac43:48f0
104.26.11.218
104.26.10.218
172.67.72.240

C:\Users***>nslookup www.milanworld.net 1.1.1.1
Server: one.one.one.one
Address: 1.1.1.1

Non-authoritative answer:
Name: www.milanworld.net
Addresses: 2606:4700:20::681a:ada
2606:4700:20::ac43:48f0
2606:4700:20::681a:bda
104.26.11.218
172.67.72.240
104.26.10.218

C:\Users***>tracert www.milanworld.net

Tracing route to www.milanworld.net [172.67.72.240]
over a maximum of 30 hops:

1 4 ms 5 ms 3 ms 192.168.149.123
2 55 ms 53 ms 42 ms 172.16.138.129
3 86 ms 47 ms 40 ms 172.16.138.42
4 149 ms 41 ms 34 ms 172.16.2.50
5 210 ms 48 ms 47 ms 151.6.52.207
6 50 ms 44 ms 72 ms 151.6.52.234
7 110 ms 55 ms 47 ms 151.6.3.188
8 53 ms 45 ms 48 ms 151.6.1.178
9 * * * Request timed out.
10 130 ms 47 ms 49 ms 188.114.100.11
11 53 ms 61 ms 42 ms 172.67.72.240

Trace complete.

Test #2
C:\Users\Vincenzo>tracert www.milanworld.net

Traccia instradamento verso www.milanworld.net [104.26.11.218]
su un massimo di 30 punti di passaggio:

1 <1 ms <1 ms <1 ms RT-AX82U-F768 [192.168.50.1]
2 1 ms <1 ms <1 ms fritz.box [192.168.1.1]
3 11 ms 12 ms 11 ms 151.6.141.22
4 11 ms 11 ms 11 ms 151.6.52.248
5 17 ms 17 ms 17 ms 151.6.3.192
6 17 ms 17 ms 17 ms 151.6.7.231
7 17 ms 16 ms 16 ms 151.7.80.73
8 * * * Richiesta scaduta.
9 * * * Richiesta scaduta.
10 * * * Richiesta scaduta.
11 * * * Richiesta scaduta.
12 * * * Richiesta scaduta.
13 * * * Richiesta scaduta.
14 * * * Richiesta scaduta.
15 * * * Richiesta scaduta.
16 * * * Richiesta scaduta.
17 * * * Richiesta scaduta.
18 * * * Richiesta scaduta.
19 * * * Richiesta scaduta.
20 * * ^C
C:\Users\Vincenzo>
C:\Users\Vincenzo>
C:\Users\Vincenzo>
C:\Users\Vincenzo>tracert www.milanworld.net

Traccia instradamento verso www.milanworld.net [172.67.72.240]
su un massimo di 30 punti di passaggio:

1 <1 ms <1 ms <1 ms RT-AX82U-F768 [192.168.50.1]
2 <1 ms <1 ms <1 ms fritz.box [192.168.1.1]
3 12 ms 13 ms 14 ms 151.6.141.22
4 13 ms 12 ms 11 ms 151.6.52.248
5 16 ms 15 ms 15 ms 151.6.7.32
6 16 ms 15 ms 16 ms 151.6.1.178
7 16 ms 16 ms 16 ms cloudflare.mix-it.net [217.29.66.167]
8 17 ms 18 ms 17 ms 172.71.112.4
9 16 ms 16 ms 16 ms 172.67.72.240

Traccia completata.

C:\Users\Vincenzo>tracert www.milanworld.net

Traccia instradamento verso www.milanworld.net [172.67.72.240]
su un massimo di 30 punti di passaggio:

1 <1 ms <1 ms <1 ms RT-AX82U-F768 [192.168.50.1]
2 <1 ms <1 ms <1 ms fritz.box [192.168.1.1]
3 11 ms 10 ms 11 ms 151.6.141.22
4 11 ms 11 ms 11 ms 151.6.52.248
5 16 ms 15 ms 15 ms 151.6.7.32
6 17 ms 16 ms 16 ms 151.6.1.178
7 17 ms 17 ms 16 ms cloudflare.mix-it.net [217.29.66.167]
8 22 ms 19 ms 19 ms 172.71.112.4
9 17 ms 16 ms 15 ms 172.67.72.240

Traccia completata.

4

The traceroute that you provided here:

says that the traffic towards that Cloudflare IP address is ending within Wind/Tre’s network.

Such things have been seen before when the ISP (e.g., Wind/Tre in this specific case) is blocking access to specific IP addresses and/or IP ranges, as an attempt to block access to specific sites.

Unfortunately, blocking websites by IP address does not offer per-site granularity, and will, as close to always as it can be, be resulting in situations like this, with the collateral damage where a lot of innocent sites are being hit as well.

Contact Wind/Tre, and request them to look in to the situation of why traffic to this destination (that specific IP address) doesn’t exit their network, as well as request them remediate the issue.

5

Thank you!