AT&T Fiber blocking websites/IP Addresses

hosted on my business server are completely blocked

What messages do you get such that you know they are "completely blocked?"

It simply times out.  No error message. If I activate my VPN service these websites load immediately. 

A timeout would typically produce an error message in the browser.

Have you done a traceroute to that IP?  How does one with the VPN up compare to one with no VPN?

With VPN ::

Start: 2023-09-25T01:12:01+0500
HOST: DNSChecker.org                                                 Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- ???                                                            100.0     3    0.0   0.0   0.0   0.0   0.0
  2.|-- 10.74.194.216                                                   0.0%     3    0.9   1.6   0.9   2.2   0.7
  3.|-- 138.197.248.228                                                 0.0%     3    4.5   2.4   1.2   4.5   1.8
  4.|-- 138.197.248.54                                                  0.0%     3    2.2   1.7   1.0   2.2   0.6
  5.|-- 138.197.244.36                                                  0.0%     3   13.3  18.8   1.4  41.8  20.8
  6.|-- ce-3-1-0.a02.nycmny17.us.bb.gin.ntt.net (157.238.179.69)        0.0%     3    1.4   4.0   1.4   8.8   4.2
  7.|-- ae-16.r21.nwrknj03.us.bb.gin.ntt.net (129.250.3.16)             0.0%     3    3.6   3.2   2.4   3.7   0.7
  8.|-- ae-1.a03.nycmny17.us.bb.gin.ntt.net (129.250.3.128)             0.0%     3    2.1   2.8   2.1   4.0   1.1
  9.|-- ???                                                            100.0     3    0.0   0.0   0.0   0.0   0.0
 10.|-- be3496.ccr42.jfk02.atlas.cogentco.com (154.54.0.141)            0.0%     3    8.3   8.8   8.3   9.1   0.4
 11.|-- be2897.rcr24.jfk01.atlas.cogentco.com (154.54.84.214)           0.0%     3    8.8   8.8   8.8   8.8   0.0
 12.|-- be2159.rcr22.b001362-2.jfk01.atlas.cogentco.com (154.54.40.25)  0.0%     3    9.1   9.7   9.1  10.1   0.6
 13.|-- 38.142.116.210                                                  0.0%     3    8.6   8.8   8.5   9.3   0.4
 14.|-- cloud1.spear.limited (154.53.36.229)                            0.0%     3    8.8   9.1   8.8   9.8   0.6

Start: 2023-09-25T01:14:04+0500
HOST: DNSChecker.org                                                 Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- ???                                                            100.0     3    0.0   0.0   0.0   0.0   0.0
  2.|-- 10.74.11.38                                                     0.0%     3    0.4   0.6   0.3   1.0   0.4
  3.|-- 138.197.248.248                                                 0.0%     3    1.1   1.4   0.9   2.1   0.6
  4.|-- 138.197.248.16                                                  0.0%     3    0.5   1.2   0.5   2.4   1.1
  5.|-- 138.197.244.44                                                  0.0%     3    1.1   1.1   1.1   1.3   0.1
  6.|-- ce-3-1-0.a02.nycmny17.us.bb.gin.ntt.net (157.238.179.69)        0.0%     3    1.2   1.3   1.2   1.5   0.2
  7.|-- ae-16.r21.nwrknj03.us.bb.gin.ntt.net (129.250.3.16)             0.0%     3    1.9   2.2   1.9   2.6   0.3
  8.|-- ae-1.a03.nycmny17.us.bb.gin.ntt.net (129.250.3.128)             0.0%     3    2.0   2.0   1.9   2.0   0.1
  9.|-- ???                                                            100.0     3    0.0   0.0   0.0   0.0   0.0
 10.|-- be3495.ccr41.jfk02.atlas.cogentco.com (66.28.4.181)             0.0%     3    8.3  12.5   8.3  20.6   7.1
 11.|-- be2896.rcr23.jfk01.atlas.cogentco.com (154.54.84.202)           0.0%     3    8.5  14.7   8.0  27.5  11.1
 12.|-- be2158.rcr22.b001362-2.jfk01.atlas.cogentco.com (154.54.40.17)  0.0%     3    8.6  10.4   8.5  14.2   3.2
 13.|-- 38.142.116.210                                                  0.0%     3    7.9   9.7   7.9  12.9   2.8
 14.|-- ???                                                            100.0     3    0.0   0.0   0.0   0.0   0.0
 15.|-- cloud1.spear.limited (154.53.36.229)                           33.3%     3    8.2   8.3   8.2   8.5   0.2

Since this is obviously not an issue with your connection to the AT&T network, don't bother restarting or resetting your Gateway.

Wince you're not getting a blocked message from AT&T Internet Security, I wouldn't bother with that either.

You're 0 for 2 on this one FionaA.  I hope you'll do better on your next one.

@Devenspear , the traffic is getting from AT&T to cogentco, the ISP for the server IP you shared with and without the VPN.  You might want to try a continuous ping to make sure that's actually stable without the VPN (because your traceroute did show one failure of the attempts).  

I, also an AT&T residential customer, am able to get to the website that you can't.  My non-VPN traceroute looks different because I don't start in the same place.  I'd like to hear the results of a higher count of pings against the server.

Do you, or your company's IT staff, control this webserver at cogent co, or are they or some other web site hosting provider doing so?  What I'm getting at is do you know what kind if IDS/IPS might be running on this server or the network this server is on.

I really appreciate your help @JefferMC !

My staff controls this VPS at Contabo. It's located in New York. I can instruct them to make any changes but it seems like it's not a server config issue when I can easily access via Verizon, TMobile and (ATT Fiber) VPN.

Attached the Ping results from my Mac. No issues with VPN. Timeout using AT&T.

Often these sorts of things turn out to be a block on your AT&T IP address.  Since when you use your phone or VPN you get a different Public IP, you bypass the IP block.  Getting your "Dynamic" Public IP address changed by AT&T is nearly impossible, so you usually have to find out if someone is blocking your IP (actually, it's much more likely that they're blocking a larger group of IPs that includes yours).

Hi @Devenspear,

We understand the importance of being able to access the websites. We're here to shed some lights. 

We recommend that you review the firewall settings on your BGW320-500 and TP-Link router (R605). Ensure that the firewall settings are not blocking traffic to the specific IP address (154.53.36.229) or port that your business server uses.

Also, if your business server uses specific ports for its services (e.g., HTTP on port 80), make sure that port forwarding is correctly configured on both your BGW320-500 and TP-Link R605 to direct incoming traffic to the server.

Note: Check if there are any network-level restrictions or content filtering settings that might be blocking access to certain websites. This could be set up on either the BGW320-500 or TP-Link router since it is working with the VPN as there is high chances of network restrictions.

Let us know if you need further assistance!

FionaA, AT&T Community Forum Specialist

It is possible that he has set up a traffic filter, so I suppose that is worth checking.  Highly unlikely, but possible.

Port Forwarding doesn't affect outgoing traffic, which is what the poster is having an issue with.