from Hacker News

Hetzner Oregon region IP's blocked by sites

by jollyjerry on 3/8/24, 7:51 AM with 3 comments

I was tracking down why my app couldn't make http requests after moving to Hetzner. Initially, I suspected openssl handshake issues based on the error messages, but after making sure that all the versions were the same to compare with a working host, I realized that the oregon region IP's are just blocked. Support was quick to answer, suggesting creating another instance / IP. However, all the IP's were 5.78.x.x, and they all appear to be blocked as well.

$ curl https://www.google.com -vvv # snip <p><b>403.</b> <ins>That’s an error.</ins> <p>Your client does not have permission to get URL <code>/</code> from this server. <ins>That’s all we know.</ins> * Connection #0 to host www.google.com left intact

Creating another VM in Virginia region running the same commands work:

$ curl https://www.google.com -vvv <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"> <TITLE>302 Moved</TITLE></HEAD><BODY> <H1>302 Moved</H1> The document has moved <A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/&amp;q=EhAqAQT_APCPKwAAAAAAAAABGMaDq68GIjC2bqBnnF_Ayy8Wat70eMWXugq1W1Tmj1nrlx-STddRNpyR4pXlau8FWkxxnUPpK_AyAXJaAUM">here</A>. </BODY></HTML>

  • by Hetzner_OL on 3/8/24, 8:48 AM

    In case you haven't done so already, please let our support team know about this at the end of your support ticket: "Support was quick to answer, suggesting creating another instance / IP. However, all the IP's were 5.78.x.x, and they all appear to be blocked as well. [...] Creating another VM in Virginia region running the same commands work." It can be helpful for our team to know what troubleshooting works. And thank you in advance. --Katie

  • by jmspring on 3/9/24, 3:35 AM

    A buddy and I have both run into the bad IP range in Oregon. We moved to using VMs in Virginia. It wasn't worth chasing down the bad IP range. I always use a blacklist check - https://mxtoolbox.com/blacklists.aspx - for instance.