Our ip address was spoofed, letsencrypt servers were attacked for a month with the fake ip address. We did not make this attack, but letsencrypt sent us reply packets due to the fake tcp packets sent to letsencrypt. For this reason, we also received a high degree of reverse attack. Letsencrypt block…

[image] Yoncu: It produced this output: During secondary validation: 185.50.70.28: Fetching http://bijuteridiyari.com/.well-known/acme-challenge/01ahHL4nA7fTC5uvarTi_jepaekeFddW7H7ntcAvaDk: Timeout during connect (likely firewall problem) This is not a symptom of blocking on Let's Encrypts si…

[image] Nummer378: This is not a symptom of blocking on Let's Encrypts side. Let's Encrypt blocks generally mean that you cannot connect to the ACME endpoint. Failure to connect indicates an interference. Timeout indicates a drop, not a rejection. This does not indicate where the blocking occ…

I'm sorry, but I do not agree with your conclusion. The reason is the "During secondary validation" part of the error message. That piece of extra information is ONLY added to the error message when the primary endpoint succeeds, but the secondary endpoint fails. If the primary endpoint fails, wi…

[image] Osiris: Can you confirm features.MultiVAFullResults is enabled in Boulder, as MultiVAFullResults is enabled in production.

[image] Yoncu: As I mentioned above, there is a drop in my detection. Letsencrypt is accessing me using 23.178.112.0/24 class for all site HTTP validations. I haven't received a request from a different class for months. As stated above by @Osiris , you'll also receive up to three additional …

Thanks you :slight_smile: So that confirms my suspicion that the mentioning of the secondary validation failure means that the validation attempt from 23.178.112.0/24 (primary) as actually successful, despite all the pcap investigations and the problem lies with at least two of the three attempts f…

[image] Yoncu: Since I have determined that this blocking is not on my side and that packets containing TCP flags are going out over my network, but letsencrypt does not respond to this packet, letsencrypt has blocked me or letsencrypt is a clear evidence that there is a blocking in the data cen…

Letsencrypt Blocked My IP Address

Help

Topic		Replies	Views
Verify error: During secondary validation: Fetching .. timeout Help	6	2728	September 30, 2020
IP addresses seem to be blocked from getting new certicates Help	9	3752	October 20, 2020
Consistent connection errors during secondary validation Help	17	1030	March 19, 2022
Authorization issues Help	13	4696	March 17, 2020
Problem with LetEncrypt validation after blocking all server IPs Help	13	531	September 1, 2024

Letsencrypt Blocked My IP Address

Related topics