NextDNS Returning Invalid DNS Results?
I'm having an issue accessing Airtable today, and it appears NextDNS is returning an IP address that is not owned by Airtable.
If I make a DNS request for airtable.com, I get the following results:
nslookup airtable.com 45.90.28.180
Server:        45.90.28.180
Address:    45.90.28.180#53
Non-authoritative answer:
Name:    airtable.com
Address: 34.199.122.104
Name:    airtable.com
Address: 34.230.107.180
Name:    airtable.com
Address: 3.211.236.168
Name:    airtable.com
Address: 50.16.153.225The 3.211.236.168 IP address is the problem. If I curl that IP, I get the following result:
curl -v "https://3.211.236.168"
*   Trying 3.211.236.168:443...
* Connected to 3.211.236.168 (3.211.236.168) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
*  CAfile: /etc/ssl/cert.pem
*  CApath: none
* (304) (OUT), TLS handshake, Client hello (1):
* (304) (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=quickdrivingdirections.com
*  start date: Mar 18 00:00:00 2022 GMT
*  expire date: Apr 16 23:59:59 2023 GMT
*  subjectAltName does not match 3.211.236.168
* SSL: no alternative certificate subject name matches target host name '3.211.236.168'
* Closing connection 0
* TLSv1.2 (OUT), TLS alert, close notify (256):
curl: (60) SSL: no alternative certificate subject name matches target host name '3.211.236.168'
More details here: https://curl.se/docs/sslcerts.htmlYou'll see the CN is for quickdrivingdirections.com and not Airtable.
I know this can entirely be on Airtable's end, but I am seeing zero reports online of anyone having an issue with Airtable. If I query Airtable's hostname on other DNS services, I do not receive the IP not owned by Airtable. For example, on Google:
nslookup airtable.com 8.8.8.8
Server:        8.8.8.8
Address:    8.8.8.8#53
Non-authoritative answer:
Name:    airtable.com
Address: 50.16.153.225
Name:    airtable.com
Address: 34.199.122.104
Name:    airtable.com
Address: 34.230.107.180
Name:    airtable.com
Address: 34.206.165.74I am also seeing this issues when querying other configuration profiles on my account using the IPv6 address. What's going on here?
2 replies
- 
  Can't reproduce: dig airtable.com @45.90.28.0 +short 
 34.230.107.180
 34.206.165.74
 50.16.153.225
 34.199.122.104What do you get for https://test.nextdns.io ? 
Content aside
- 2 yrs agoLast active
- 2Replies
- 101Views
- 
    2
    Following
    
