# My IP is blocked? **URL:** \ **Category:** Help\ **Created:** [May 1, 2024, 6:15am UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517 "2024-05-01T06:15:48Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![sergeybutakov](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sergeybutakov/32/79563_2.png) [@sergeybutakov](https://community.letsencrypt.org/u/sergeybutakov)\ **Post date:** [May 1, 2024, 6:15am UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/1 "2024-05-01T06:15:48Z")
Hi! 👋 my IP is blocked? 🥲 ```nohighlight $ traceroute acme-v02.api.letsencrypt.org traceroute to acme-v02.api.letsencrypt.org (172.65.32.248), 30 hops max, 60 byte packets 1 _gateway (192.168.0.1) 0.375 ms 0.242 ms 0.200 ms 2 * * * 3 * * * 4 * * * 5 * * * 6 * * * 7 *^C ``` ```nohighlight $ curl -4 https://acme-v02.api.letsencrypt.org/directory curl: (28) Failed to connect to acme-v02.api.letsencrypt.org port 443: Connection timed out ``` ```nohighlight $ curl -4 ifconfig.co 212.23.72.121 ``` or google ````nohighlight $ traceroute google.com traceroute to google.com (173.194.73.139), 30 hops max, 60 byte packets 1 _gateway (192.168.0.1) 0.295 ms 0.353 ms 0.198 ms 2 212.23.72.122 (212.23.72.122) 1.968 ms 2.019 ms 2.066 ms 3 10.254.8.1 (10.254.8.1) 2.076 ms 1.837 ms 2.140 ms 4 copyco.dial.sovam.com (194.67.13.77) 2.348 ms 194.67.44.169 (194.67.44.169) 1.814 ms copyco.dial.sovam.com (194.67.13.77) 2.253 ms 5 pe05.KK12.Moscow.gldn.net (79.104.225.15) 27.224 ms pe05.KK12.Moscow.gldn.net (79.104.225.13) 26.878 ms pe05.KK12.Moscow.gldn.net (79.104.225.15) 27.143 ms 6 be10.tf01-02.Moscow.gldn.net (81.211.45.63) 68.930 ms 67.768 ms 68.083 ms 7 pe03.KK12.Moscow.gldn.net (79.104.235.215) 27.757 ms pe03.KK12.Moscow.gldn.net (79.104.235.213) 27.352 ms pe03.KK12.Moscow.gldn.net (79.104.235.215) 27.407 ms 8 72.14.213.116 (72.14.213.116) 26.974 ms 26.936 ms 72.14.205.76 (72.14.205.76) 27.316 ms 9 108.170.250.34 (108.170.250.34) 27.839 ms * * 10 142.251.49.24 (142.251.49.24) 40.731 ms 172.253.69.174 (172.253.69.174) 27.832 ms 172.253.69.92 (172.253.69.92) 27.769 ms 11 108.170.250.34 (108.170.250.34) 28.414 ms 172.253.65.159 (172.253.65.159) 58.212 ms 74.125.253.94 (74.125.253.94) 38.801 ms 12 142.250.56.15 (142.250.56.15) 47.551 ms 216.239.51.32 (216.239.51.32) 41.815 ms 142.250.56.221 (142.250.56.221) 42.560 ms 13 216.239.48.224 (216.239.48.224) 47.746 ms * 142.251.237.146 (142.251.237.146) 42.103 ms 14 209.85.254.179 (209.85.254.179) 44.761 ms 142.250.56.13 (142.250.56.13) 41.612 ms 172.253.79.237 (172.253.79.237) 41.571 ms 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * lq-in-f139.1e100.net (173.194.73.139) 45.829 ms 45.747 ms``` ```` $ curl -4 [google.com](http://google.com) 301 Moved # 301 Moved The document has moved [here](http://www.google.com/). ``` ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [May 1, 2024, 6:30am UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/2 "2024-05-01T06:30:03Z")
Hi @sergeybutakov, This doesn't look like anything intentional on Let's Encrypt's part! That address `172.65.32.248` is a Cloudflare CDN instance that is hosting the Let's Encrypt API. The fact that you can't get even _one hop_ past your local gateway with a traceroute suggests a (somewhat severe) routing problem related to this, particularly because—as you can see in your traceroute to Google—a traceroute should normally pass through several routers in your ISP's own infrastructure before it even reaches the rest of the Internet. Neither Let's Encrypt nor Cloudflare would have any way to _stop_ your traceroute from at least passing through your own ISP's routers, or its upstream ISPs' routers (even if either wanted to do so). I suggest asking your ISP to help diagnose the connectivity problem with Cloudflare (if you're confident that your gateway device itself isn't dropping these packets for some reason). Alternatively, you could ask on the Cloudflare community forum for advice or ideas about the connectivity to Cloudflare, maybe one of [https://community.cloudflare.com/c/website-application-performance/reliability/7](https://community.cloudflare.com/c/website-application-performance/reliability/7) [https://community.cloudflare.com/c/international/russian/70](https://community.cloudflare.com/c/international/russian/70) ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [May 1, 2024, 11:21am UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/3 "2024-05-01T11:21:07Z")
> [@sergeybutakov](#): > > my IP is blocked? No; Not from the output shown. That output indicates a routing problem within _your_ control. If you have control of the router, show us the route table it is using. ---
**Author:** ![petercooperjr](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/petercooperjr/32/84698_2.png) [@petercooperjr](https://community.letsencrypt.org/u/petercooperjr)\ **Post date:** [May 1, 2024, 11:31am UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/4 "2024-05-01T11:31:47Z")
Yeah, we've seen a few times around these parts routers or firewalls that were misconfigured and somehow thought that `172.65.` was a private IP, rather than the "normal" public IP that it is. ---
**Author:** ![sergeybutakov](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sergeybutakov/32/79563_2.png) [@sergeybutakov](https://community.letsencrypt.org/u/sergeybutakov)\ **Post date:** [May 1, 2024, 11:59am UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/5 "2024-05-01T11:59:29Z")
What exactly can I calculate? I forgot to say that icmp packets pass through, unlike udp: ```nohighlight $ traceroute -I acme-v02.api.letsencrypt.org traceroute to acme-v02.api.letsencrypt.org (172.65.32.248), 30 hops max, 60 byte packets 1 _gateway (192.168.0.1) 0.401 ms 0.402 ms 0.451 ms 2 212.23.72.122 (212.23.72.122) 3.012 ms 3.048 ms 3.053 ms 3 10.254.8.1 (10.254.8.1) 2.379 ms 2.366 ms 2.603 ms 4 copyco.dial.sovam.com (194.67.13.77) 2.473 ms 2.530 ms 2.521 ms 5 pe02.Ekaterinburg.gldn.net (79.104.240.165) 2.718 ms 2.809 ms 2.910 ms 6 213.221.36.103 (213.221.36.103) 2.726 ms 1.893 ms 2.253 ms 7 172.65.32.248 (172.65.32.248) 1.561 ms 1.381 ms 1.350 ms ``` and if use a vpn connection, the [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org) is available ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [May 1, 2024, 12:01pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/6 "2024-05-01T12:01:23Z")
OK, that output is very different. It shows no routing problem. What shows?: `traceroute -T -p 443 acme-v02.api.letsencrypt.org` ---
**Author:** ![sergeybutakov](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sergeybutakov/32/79563_2.png) [@sergeybutakov](https://community.letsencrypt.org/u/sergeybutakov)\ **Post date:** [May 1, 2024, 12:03pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/7 "2024-05-01T12:03:26Z")
> [@rg305](#): > > traceroute -T -p 443 [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org) ```nohighlight traceroute -T -p 443 acme-v02.api.letsencrypt.org [sudo] password for hp: traceroute to acme-v02.api.letsencrypt.org (172.65.32.248), 30 hops max, 60 byte packets 1 _gateway (192.168.0.1) 0.380 ms 0.313 ms 0.451 ms 2 * * * 3 * * * 4 * * * 5 * * * 6 * * * 7 * * * 8 * * * 9 * * * 10 * * * 11 * * * 12 * *^C ``` nothing 😟 ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [May 1, 2024, 12:04pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/8 "2024-05-01T12:04:08Z")
What shows?: `traceroute -T -p 443 www.google.com` [only the first five lines are needed] ---
**Author:** ![sergeybutakov](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sergeybutakov/32/79563_2.png) [@sergeybutakov](https://community.letsencrypt.org/u/sergeybutakov)\ **Post date:** [May 1, 2024, 12:06pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/10 "2024-05-01T12:06:07Z")
traceroute -T -p 443 [www.google.com](http://www.google.com) traceroute to [www.google.com](http://www.google.com) (64.233.163.147), 30 hops max, 60 byte packets 1 \_gateway (192.168.0.1) 0.302 ms 0.376 ms 0.464 ms 2 212.23.72.122 (212.23.72.122) 4.118 ms 5.583 ms 5.627 ms 3 10.254.8.1 (10.254.8.1) 3.143 ms 3.359 ms 3.293 ms 4 [copyco.dial.sovam.com](http://copyco.dial.sovam.com) (194.67.13.77) 3.414 ms 1.819 ms 194.67.44.169 (194.67.44.169) 1.746 ms 5 [pe03.KK12.Moscow.gldn.net](http://pe03.KK12.Moscow.gldn.net) (79.104.235.215) 32.492 ms [pe03.KK12.Moscow.gldn.net](http://pe03.KK12.Moscow.gldn.net) (79.104.235.213) 29.298 ms 29.135 ms ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [May 1, 2024, 12:07pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/11 "2024-05-01T12:07:40Z")
OK, my best guess it that it is NOT a routing issue. But a very close cousin to that: It is a firewall policy issue. Your local gateway OR (more likely) `212.23.72.122` is blocking HTTPS access to IP `172.65.32.248`. [OR likely blocking to the whole 172.0.0.0/8 network] ---
**Author:** ![sergeybutakov](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sergeybutakov/32/79563_2.png) [@sergeybutakov](https://community.letsencrypt.org/u/sergeybutakov)\ **Post date:** [May 1, 2024, 12:11pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/12 "2024-05-01T12:11:28Z")
Its my mikrotik, maybe it’s him? ![Снимок экрана 2024-05-01 в 17.09.25](https://global.discourse-cdn.com/letsencrypt/original/3X/f/c/fcebba6a938457edbeeb2fc92b2aa8c3ca5ff180.jpeg) ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [May 1, 2024, 12:18pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/13 "2024-05-01T12:18:03Z")
That looks fine. What is line two?: > [@sergeybutakov](#): > > `2 212.23.72.122 (212.23.72.122) 4.118 ms 5.583 ms 5.627 ms` ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [May 1, 2024, 12:22pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/14 "2024-05-01T12:22:27Z")
As a test, you could try using: `--server https://le-acme-v02.beer4.work/directory` ---
**Author:** ![sergeybutakov](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sergeybutakov/32/79563_2.png) [@sergeybutakov](https://community.letsencrypt.org/u/sergeybutakov)\ **Post date:** [May 1, 2024, 12:30pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/15 "2024-05-01T12:30:31Z")
> [@rg305](#): > > What is line two?: This is the provider's gateway > [@rg305](#): > > As a test, you could try using: > `--server https://le-acme-v02.beer4.work/directory` Tell me in more detail what exactly should I do? thnks ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [May 1, 2024, 12:32pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/16 "2024-05-01T12:32:49Z")
> [@sergeybutakov](#): > > Tell me in more detail what exactly should I do? How are you running the ACME client? Which client, and version, is it? ---
**Author:** ![sergeybutakov](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sergeybutakov/32/79563_2.png) [@sergeybutakov](https://community.letsencrypt.org/u/sergeybutakov)\ **Post date:** [May 1, 2024, 12:36pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/17 "2024-05-01T12:36:56Z")
[nginxproxymanager with docker](https://nginxproxymanager.com/) but test traceroute from all machines ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [May 1, 2024, 12:37pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/18 "2024-05-01T12:37:43Z")
NPM... O M G ! ---
**Author:** ![sergeybutakov](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sergeybutakov/32/79563_2.png) [@sergeybutakov](https://community.letsencrypt.org/u/sergeybutakov)\ **Post date:** [May 1, 2024, 12:40pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/19 "2024-05-01T12:40:24Z")
what's wrong with npm? ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [May 1, 2024, 12:45pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/20 "2024-05-01T12:45:34Z")
I'd rather not _bad mouth_ anyone/anything. But I can say: You won't get much help with that software in this forum. ---
**Author:** ![linkp](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/linkp/32/60089_2.png) [@linkp](https://community.letsencrypt.org/u/linkp)\ **Post date:** [May 1, 2024, 12:48pm UTC](https://community.letsencrypt.org/t/my-ip-is-blocked/217517/21 "2024-05-01T12:48:57Z")
[https://community.letsencrypt.org/search?context=topic&context\_id=217517&q=Nginx%20Proxy%20Manager%20%20order%3Alatest&skip\_context=true](https://community.letsencrypt.org/search?context=topic&context_id=217517&q=Nginx%20Proxy%20Manager%20%20order%3Alatest&skip_context=true) [Next page](https://community.letsencrypt.org/t/my-ip-is-blocked/217517.md?page=2)