Our server's IP is blacklisted from launchpad.net

Asked by Martin Konecny

I tried asking on IRC #launchpad but no luck -

Adding a PPA (sudo apt-add-repository package) on one of our servers blocks for a few minutes and eventually fails.

I've tracked it down to our server not being able to contact launchpad.net at all.

For example, I can run "telnet launchpad.net 80" or "curl https://launchpad.net" from any machine except from our server. We are a 2 year old startup running on AWS servers and have never DDOS'ed the site.

I've tried to manually add the GPG key using

sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys

But our server appears blocked from keyserver.ubuntu.com as well!

Here is the traceroute info:

$ traceroute launchpad.net
 1 216.182.224.64 (216.182.224.64) 1.395 ms 216.182.224.198 (216.182.224.198) 1.089 ms 216.182.224.204 (216.182.224.204) 1.189 ms
 2 * * *
 3 * * *
 4 * * *
 5 * * *
 6 * * *
 7 * * *
 8 * * *
 9 * * *
10 205.251.245.120 (205.251.245.120) 2.792 ms 205.251.244.228 (205.251.244.228) 1.435 ms 205.251.244.208 (205.251.244.208) 0.800 ms
11 54.239.111.34 (54.239.111.34) 6.961 ms 54.239.111.100 (54.239.111.100) 25.677 ms 54.239.111.38 (54.239.111.38) 8.708 ms
12 54.239.109.169 (54.239.109.169) 1.573 ms 54.239.108.249 (54.239.108.249) 0.854 ms 54.239.109.233 (54.239.109.233) 1.699 ms
13 72.21.222.213 (72.21.222.213) 6.580 ms * *
14 52.93.1.3 (52.93.1.3) 16.876 ms 52.93.1.35 (52.93.1.35) 16.695 ms 52.93.1.31 (52.93.1.31) 29.108 ms
15 52.93.1.82 (52.93.1.82) 6.571 ms 52.93.1.80 (52.93.1.80) 6.701 ms 52.93.1.74 (52.93.1.74) 6.448 ms
16 * xe-1-1-0-core0.tx60h.us.as6908.net (198.32.160.138) 6.561 ms *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *

Question information

Language:
English Edit question
Status:
Solved
For:
Launchpad itself Edit question
Assignee:
No assignee Edit question
Solved by:
Martin Konecny
Solved:
Last query:
Last reply:
Revision history for this message
Martin Konecny (martin-konecny) said :
#1

If there is some private email I can send our IP address to, please let me know.

Revision history for this message
Colin Watson (cjwatson) said :
#2

As far as our sysadmins can tell, there are no blocks in place that should affect your IP address. I think you'll need to investigate other things along the relevant network path; perhaps there is some routing bug between you and us.

If you need further assistance on IRC, it would be best to cut out the intermediate step and ask on #canonical-sysadmin; Launchpad staff don't have direct access to investigate firewall problems, and the best we can do is talk to sysadmins on your behalf.

Revision history for this message
Colin Watson (cjwatson) said :
#4

Response from our sysadmins:

"nothing we're doing. it looks to be (quite) farther up. if I had to guess, I would say routing misconfiguration of some sort on the amazon side of datahop/6dg's peer"

Revision history for this message
Martin Konecny (martin-konecny) said :
#5

We restarted our production server, and the problem went away. Thank you for your guidance.