Are you getting 403's when downloading? Please read here first

Meta Elastic
356

I have got the same problem on three of our testing servers:

{
  "ip": "2a01:4f8:121:2009::36",
  "country_code": "DE",
  "country_name": "Germany",
  "region_name": "Sachsen",
  "city_name": "Falkenstein",
  "latitude": 50.47785,
  "longitude": 12.371563,
  "zip_code": "08223",
  "time_zone": "+02:00",
  "asn": "24940",
  "as": "Hetzner Online GmbH",
  "is_proxy": false,
  "message": "Limit to 500 queries per day. Sign up for a Free plan at https://www.ip2location.io to get 30K queries per month."
}

{
  "ip": "178.63.111.53",
  "country_code": "DE",
  "country_name": "Germany",
  "region_name": "Sachsen",
  "city_name": "Falkenstein",
  "latitude": 50.47785,
  "longitude": 12.371563,
  "zip_code": "08223",
  "time_zone": "+02:00",
  "asn": "24940",
  "as": "Hetzner Online GmbH",
  "is_proxy": false,
  "message": "Limit to 500 queries per day. Sign up for a Free plan at https://www.ip2location.io to get 30K queries per month."
}

and

{
  "ip": "2a01:4f8:110:402d::1400",
  "country_code": "DE",
  "country_name": "Germany",
  "region_name": "Sachsen",
  "city_name": "Falkenstein",
  "latitude": 50.47785,
  "longitude": 12.371563,
  "zip_code": "08223",
  "time_zone": "+02:00",
  "asn": "24940",
  "as": "Hetzner Online GmbH",
  "is_proxy": false,
  "message": "Limit to 500 queries per day. Sign up for a Free plan at https://www.ip2location.io to get 30K queries per month."
}
357

we are having the same with new version 8 and old version 7.17 but we tested others and the same, multiple users in different locations are getting 403 errors.

359

185.233.172.0/22
Ede, Netherlands

On apt update:

Err:14 https://artifacts.elastic.co/packages/7.x/apt stable InRelease
  403  Forbidden [IP: 34.120.127.130 443]
360

UPDATE: Was just able to download again.

Server returned HTTP response code: 403 for URL: https://artifacts.elastic.co/downloads/elasticsearch-plugins/analysis-icu/analysis-icu-7.17.20.zip

Getting this both on my home Xfinity IP (Massachusetts, USA) and on an AWS US-EAST-1 (Virginia, USA) IP.

1 Like
361

Hey running into this issue here as well also from AWS us-east-1 trying to access the yum packages. Was able to access as recently as early April. Tried specifying ipv4, no dice.

Edit: Able to access now!

  "ip": "18.206.84.254",
  "hostname": "ec2-18-206-84-254.compute-1.amazonaws.com",
  "city": "Ashburn",
  "region": "Virginia",
  "country": "US",
  "loc": "39.0437,-77.4875",
  "org": "AS14618 Amazon.com, Inc.",
  "postal": "20147",
  "timezone": "America/New_York",
  "readme": "https://ipinfo.io/missingauth"
}
1 Like
362

I'm also having issues with the yum repo. Doesn't work from my work DC, works from my house. DC IP Subnet is xxx please whitelist.

Edit: working now.

363

Getting 403 on apt update from AWS us-west-2:
E: Failed to fetch https://packages.elastic.co/elasticsearch/2.x/debian/dists/stable/InRelease 403 Forbidden [IP: 34.120.127.130 443]

{
  "ip": "52.11.212.148",
  "hostname": "ec2-52-11-212-148.us-west-2.compute.amazonaws.com",
  "city": "Boardman",
  "region": "Oregon",
  "country": "US",
  "loc": "45.8399,-119.7006",
  "org": "AS16509 Amazon.com, Inc.",
  "postal": "97818",
  "timezone": "America/Los_Angeles",
  "readme": "https://ipinfo.io/missingauth"
}
364

I encountered the same service again

image
image1249×120 8.12 KB

fix pls

  • ip:"185.103.100.131",

  • city:"Rostock",

  • region:"Mecklenburg-Vorpommern",

  • country:"DE",

  • loc:"54.0887,12.1405",

  • org:"AS215590 DpkgSoft International Limited",

  • postal:"18055",

  • timezone:"Europe/Berlin",

  • asn:Object,

365

Hi @eat.toys,

Welcome! I see a few of the blocks for the US are now working. Can you try again and confirm if you're still encountering an issue?

Let me know!

366

Hi @Bryji,

Welcome back! I see some of the US issues have been marked as resolved. Can you try again and confirm if your requests are still not working?

Let me know!

367

Hi @userfailure,

Welcome! Can you please share the IPs for which you are receiving the blocks, and the precise command or distribution? It's it clear what artefacts you are trying to download (Elasticsearch versus Logstash for example.

If you're not comfortable sharing the IPs publicly feel free to message me directly.

Hope that helps!

368

Hi @carly.richmond ,
We are using apt-cacher-ng locally and via that cache server we do apt-update and apt-install. currently apt-get update failing with error 403 forbidden

00:04:05      "stdout": "Hit:1 https://download.docker.com/linux/ubuntu focal InRelease\nHit:2 https://deb.nodesource.com/node_14.x focal InRelease\nHit:3 https://dl.yarnpkg.com/debian stable InRelease\nHit:4 http://ppa.launchpad.net/openjdk-r/ppa/ubuntu focal InRelease\nHit:5 http://nginx.org/packages/ubuntu focal InRelease\nHit:6 http://security.ubuntu.com/ubuntu focal-security InRelease\nHit:7 http://apt.postgresql.org/pub/repos/apt focal-pgdg InRelease\nHit:9 http://archive.ubuntu.com/ubuntu focal InRelease\nHit:10 http://archive.ubuntu.com/ubuntu focal-updates InRelease\nErr:8 https://artifacts.elastic.co:443/packages/5.x/apt stable InRelease\n  403  Forbidden [IP: 34.120.127.130 443]\nHit:11 http://archive.ubuntu.com/ubuntu focal-backports InRelease\nIgn:12 http://archive.ubuntu.com/ubuntu trusty InRelease\nHit:13 http://archive.ubuntu.com/ubuntu trusty-updates InRelease\nHit:14 http://archive.ubuntu.com/ubuntu trusty Release\nReading package lists...",
00:04:05      "stdout_lines": [
00:04:05          "Hit:1 https://download.docker.com/linux/ubuntu focal InRelease",
00:04:05          "Hit:2 https://deb.nodesource.com/node_14.x focal InRelease",
00:04:05          "Hit:3 https://dl.yarnpkg.com/debian stable InRelease",
00:04:05          "Hit:4 http://ppa.launchpad.net/openjdk-r/ppa/ubuntu focal InRelease",
00:04:05          "Hit:5 http://nginx.org/packages/ubuntu focal InRelease",
00:04:05          "Hit:6 http://security.ubuntu.com/ubuntu focal-security InRelease",
00:04:05          "Hit:7 http://apt.postgresql.org/pub/repos/apt focal-pgdg InRelease",
00:04:05          "Hit:9 http://archive.ubuntu.com/ubuntu focal InRelease",
00:04:05          "Hit:10 http://archive.ubuntu.com/ubuntu focal-updates InRelease",
00:04:05          "Err:8 https://artifacts.elastic.co:443/packages/5.x/apt stable InRelease",
00:04:05          "  403  Forbidden [IP: 34.120.127.130 443]",
00:04:05          "Hit:11 http://archive.ubuntu.com/ubuntu focal-backports InRelease",
00:04:05          "Ign:12 http://archive.ubuntu.com/ubuntu trusty InRelease",
00:04:05          "Hit:13 http://archive.ubuntu.com/ubuntu trusty-updates InRelease",
00:04:05          "Hit:14 http://archive.ubuntu.com/ubuntu trusty Release",
00:04:05          "Reading package lists..."
00:04:05      ]
00:04:05  }
369

Hi @Seryozha2410 ,

I've raised an issue to unblock your first IP and will report back when I have more information.

I see from ipinfo that the ASN that your IP belongs to cannot be unblocked as it has connections to a blocked country.

Hope that helps!

370

@carly.richmond
Downloading from elasticsearch-releases: https://artifacts.elastic.co/maven/javax/servlet/servlet-api/maven-metadata.xml
Could not transfer metadata javax.servlet:servlet-api/maven-metadata.xml from/to elasticsearch-releases (https://artifacts.elastic.co/maven): status code: 403, reason phrase: Forbidden (403)
Downloading from elasticsearch-releases: https://artifacts.elastic.co/maven/xuggle/xuggle-xuggler/5.4/xuggle-xuggler-5.4.pom
Could not resolve dependencies for project com.projectname:project:war:0.0.1-SNAPSHOT: Failed to collect dependencies at xuggle:xuggle-xuggler:jar:5.4:

Kindly help us

372

@carly.richmond , Could you please tell how can I send DM to you

373

Hi @Radhika1,

Thanks for reaching out. I need more information. Can you please share the command you are running and the IP you are receiving the 403 from?

374

@carly.richmond Yeah Sure I will share the details below

IP from where I'm hitting 49.37.209.191
https://artifacts.elastic.co/maven I'm trying to access here,

Screenshot 2024-05-08 180810
Screenshot 2024-05-08 1808101401×695 14.6 KB

Please check and do the needful

375

Yes, thank you!

376

@carly.richmond

            <groupId>xuggle</groupId>
            <artifactId>xuggle-xuggler</artifactId>
            <version>5.4</version>
        </dependency>

Our code has this dependency configured in pom.xml.
So while generating the build for our project, this dependency is trying to get tit from the "Downloading from elasticsearch-releases: https://artifacts.elastic.co/maven/xuggle/xuggle-xuggler/5.4"
But throwing 403 forbidden

377

Thanks for confirming @Radhika1. It was the IP address where you are trying to install to that I was looking for.

I'm following up internally to see if there is an ongoing issue due to the number of requests. I'll keep you posted.