My ip is apparently blocked

Help
1

HI.
Apparently because newbie here, cannot pm this:

run:
#certbot certonly --standalone -d

got:

An unexpected error occurred:
requests.exceptions.SSLError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by SSLError(SSLEOFError(8, 'EOF occurred in violation of protocol (_ssl.c:1131)')))

Apparently this has to do with my ip - address being blocked.
Can you allow this please:
185.100.87.241

2

Hi @Foxina and welcome to the LE community forum :slight_smile:

To confirm, please show the output of:
curl -Iv https://acme-v02.api.letsencrypt.org/

3

Hi and thanks.

curl -Iv https://acme-v02.api.letsencrypt.org/

  • Trying 172.65.32.248:443...
  • TCP_NODELAY set
  • Connected to acme-v02.api.letsencrypt.org (172.65.32.248) port 443 (#0)
  • ALPN, offering h2
  • ALPN, offering http/1.1
  • successfully set certificate verify locations:
  • CAfile: /etc/ssl/certs/ca-certificates.crt
    CApath: /etc/ssl/certs
  • TLSv1.3 (OUT), TLS handshake, Client hello (1):
  • OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to acme-v02.api.letsencrypt.org:443
  • Closing connection 0
    curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to acme-v02.api.letsencrypt.org:443
4

Ok, how about any other site?
Like:
curl -Iv https://google.com/

5

Seems ok;

HTTP/2 301
location: https://www.google.com/
content-type: text/html; charset=UTF-8
date: Thu, 27 Jan 2022 21:17:58 GMT
expires: Sat, 26 Feb 2022 21:17:58 GMT
cache-control: public, max-age=2592000
server: gws
content-length: 220
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"

6

Ok I'm convinced - LOL
@lestaff please review IP 185.100.87.241 for blocks

7

We've unblocked this IP address. It was involved in DDoS attacks against Let's Encrypt some months ago, so if you've had this IP address for a long time, please investigate whether your system might be compromised.

8

Thanks.
This is a new server, so whatever happened then should not take place anymore.
If it does, please let me know!