Are you getting 403's when downloading? Please read here first

Stephan4711 · May 7, 2024, 4:21pm

I have got the same problem on three of our testing servers:

{
  "ip": "2a01:4f8:121:2009::36",
  "country_code": "DE",
  "country_name": "Germany",
  "region_name": "Sachsen",
  "city_name": "Falkenstein",
  "latitude": 50.47785,
  "longitude": 12.371563,
  "zip_code": "08223",
  "time_zone": "+02:00",
  "asn": "24940",
  "as": "Hetzner Online GmbH",
  "is_proxy": false,
  "message": "Limit to 500 queries per day. Sign up for a Free plan at https://www.ip2location.io to get 30K queries per month."
}

{
  "ip": "178.63.111.53",
  "country_code": "DE",
  "country_name": "Germany",
  "region_name": "Sachsen",
  "city_name": "Falkenstein",
  "latitude": 50.47785,
  "longitude": 12.371563,
  "zip_code": "08223",
  "time_zone": "+02:00",
  "asn": "24940",
  "as": "Hetzner Online GmbH",
  "is_proxy": false,
  "message": "Limit to 500 queries per day. Sign up for a Free plan at https://www.ip2location.io to get 30K queries per month."
}

and

{
  "ip": "2a01:4f8:110:402d::1400",
  "country_code": "DE",
  "country_name": "Germany",
  "region_name": "Sachsen",
  "city_name": "Falkenstein",
  "latitude": 50.47785,
  "longitude": 12.371563,
  "zip_code": "08223",
  "time_zone": "+02:00",
  "asn": "24940",
  "as": "Hetzner Online GmbH",
  "is_proxy": false,
  "message": "Limit to 500 queries per day. Sign up for a Free plan at https://www.ip2location.io to get 30K queries per month."
}

userfailure · May 7, 2024, 4:33pm

we are having the same with new version 8 and old version 7.17 but we tested others and the same, multiple users in different locations are getting 403 errors.

NominaSumpta · May 7, 2024, 4:39pm

185.233.172.0/22
Ede, Netherlands

On apt update:

Err:14 https://artifacts.elastic.co/packages/7.x/apt stable InRelease
  403  Forbidden [IP: 34.120.127.130 443]

eyablonowitz · May 7, 2024, 4:40pm

UPDATE: Was just able to download again.

Server returned HTTP response code: 403 for URL: https://artifacts.elastic.co/downloads/elasticsearch-plugins/analysis-icu/analysis-icu-7.17.20.zip

Getting this both on my home Xfinity IP (Massachusetts, USA) and on an AWS US-EAST-1 (Virginia, USA) IP.

dfp-takeda · May 7, 2024, 4:43pm

Hey running into this issue here as well also from AWS us-east-1 trying to access the yum packages. Was able to access as recently as early April. Tried specifying ipv4, no dice.

Edit: Able to access now!

  "ip": "18.206.84.254",
  "hostname": "ec2-18-206-84-254.compute-1.amazonaws.com",
  "city": "Ashburn",
  "region": "Virginia",
  "country": "US",
  "loc": "39.0437,-77.4875",
  "org": "AS14618 Amazon.com, Inc.",
  "postal": "20147",
  "timezone": "America/New_York",
  "readme": "https://ipinfo.io/missingauth"
}

nhorvath · May 7, 2024, 4:56pm

I'm also having issues with the yum repo. Doesn't work from my work DC, works from my house. DC IP Subnet is xxx please whitelist.

Edit: working now.

Bryji · May 7, 2024, 6:41pm

Getting 403 on apt update from AWS us-west-2:
E: Failed to fetch https://packages.elastic.co/elasticsearch/2.x/debian/dists/stable/InRelease 403 Forbidden [IP: 34.120.127.130 443]

{
  "ip": "52.11.212.148",
  "hostname": "ec2-52-11-212-148.us-west-2.compute.amazonaws.com",
  "city": "Boardman",
  "region": "Oregon",
  "country": "US",
  "loc": "45.8399,-119.7006",
  "org": "AS16509 Amazon.com, Inc.",
  "postal": "97818",
  "timezone": "America/Los_Angeles",
  "readme": "https://ipinfo.io/missingauth"
}

Seryozha2410 · May 7, 2024, 6:51pm

I encountered the same service again

fix pls

ip:"185.103.100.131",
city:"Rostock",
region:"Mecklenburg-Vorpommern",
country:"DE",
loc:"54.0887,12.1405",
org:"AS215590 DpkgSoft International Limited",
postal:"18055",
timezone:"Europe/Berlin",
asn:Object,

carly.richmond · May 8, 2024, 6:15am

Hi @eat.toys,

Welcome! I see a few of the blocks for the US are now working. Can you try again and confirm if you're still encountering an issue?

Let me know!

carly.richmond · May 8, 2024, 6:16am

Hi @Bryji,

Welcome back! I see some of the US issues have been marked as resolved. Can you try again and confirm if your requests are still not working?

Let me know!

carly.richmond · May 8, 2024, 6:19am

Hi @userfailure,

Welcome! Can you please share the IPs for which you are receiving the blocks, and the precise command or distribution? It's it clear what artefacts you are trying to download (Elasticsearch versus Logstash for example.

If you're not comfortable sharing the IPs publicly feel free to message me directly.

Hope that helps!

Jeya_Pradeen · May 8, 2024, 7:43am

Hi @carly.richmond ,
We are using apt-cacher-ng locally and via that cache server we do apt-update and apt-install. currently apt-get update failing with error 403 forbidden

00:04:05      "stdout": "Hit:1 https://download.docker.com/linux/ubuntu focal InRelease\nHit:2 https://deb.nodesource.com/node_14.x focal InRelease\nHit:3 https://dl.yarnpkg.com/debian stable InRelease\nHit:4 http://ppa.launchpad.net/openjdk-r/ppa/ubuntu focal InRelease\nHit:5 http://nginx.org/packages/ubuntu focal InRelease\nHit:6 http://security.ubuntu.com/ubuntu focal-security InRelease\nHit:7 http://apt.postgresql.org/pub/repos/apt focal-pgdg InRelease\nHit:9 http://archive.ubuntu.com/ubuntu focal InRelease\nHit:10 http://archive.ubuntu.com/ubuntu focal-updates InRelease\nErr:8 https://artifacts.elastic.co:443/packages/5.x/apt stable InRelease\n  403  Forbidden [IP: 34.120.127.130 443]\nHit:11 http://archive.ubuntu.com/ubuntu focal-backports InRelease\nIgn:12 http://archive.ubuntu.com/ubuntu trusty InRelease\nHit:13 http://archive.ubuntu.com/ubuntu trusty-updates InRelease\nHit:14 http://archive.ubuntu.com/ubuntu trusty Release\nReading package lists...",
00:04:05      "stdout_lines": [
00:04:05          "Hit:1 https://download.docker.com/linux/ubuntu focal InRelease",
00:04:05          "Hit:2 https://deb.nodesource.com/node_14.x focal InRelease",
00:04:05          "Hit:3 https://dl.yarnpkg.com/debian stable InRelease",
00:04:05          "Hit:4 http://ppa.launchpad.net/openjdk-r/ppa/ubuntu focal InRelease",
00:04:05          "Hit:5 http://nginx.org/packages/ubuntu focal InRelease",
00:04:05          "Hit:6 http://security.ubuntu.com/ubuntu focal-security InRelease",
00:04:05          "Hit:7 http://apt.postgresql.org/pub/repos/apt focal-pgdg InRelease",
00:04:05          "Hit:9 http://archive.ubuntu.com/ubuntu focal InRelease",
00:04:05          "Hit:10 http://archive.ubuntu.com/ubuntu focal-updates InRelease",
00:04:05          "Err:8 https://artifacts.elastic.co:443/packages/5.x/apt stable InRelease",
00:04:05          "  403  Forbidden [IP: 34.120.127.130 443]",
00:04:05          "Hit:11 http://archive.ubuntu.com/ubuntu focal-backports InRelease",
00:04:05          "Ign:12 http://archive.ubuntu.com/ubuntu trusty InRelease",
00:04:05          "Hit:13 http://archive.ubuntu.com/ubuntu trusty-updates InRelease",
00:04:05          "Hit:14 http://archive.ubuntu.com/ubuntu trusty Release",
00:04:05          "Reading package lists..."
00:04:05      ]
00:04:05  }

carly.richmond · May 8, 2024, 11:28am

Hi @Seryozha2410 ,

I've raised an issue to unblock your first IP and will report back when I have more information.

I see from ipinfo that the ASN that your IP belongs to cannot be unblocked as it has connections to a blocked country.

Hope that helps!

Radhika1 · May 8, 2024, 11:47am

@carly.richmond
Downloading from elasticsearch-releases: https://artifacts.elastic.co/maven/javax/servlet/servlet-api/maven-metadata.xml
Could not transfer metadata javax.servlet:servlet-api/maven-metadata.xml from/to elasticsearch-releases (https://artifacts.elastic.co/maven): status code: 403, reason phrase: Forbidden (403)
Downloading from elasticsearch-releases: https://artifacts.elastic.co/maven/xuggle/xuggle-xuggler/5.4/xuggle-xuggler-5.4.pom
Could not resolve dependencies for project com.projectname:project:war:0.0.1-SNAPSHOT: Failed to collect dependencies at xuggle:xuggle-xuggler:jar:5.4:

Kindly help us

Jeya_Pradeen · May 8, 2024, 12:03pm

@carly.richmond , Could you please tell how can I send DM to you

carly.richmond · May 8, 2024, 12:21pm

Hi @Radhika1,

Thanks for reaching out. I need more information. Can you please share the command you are running and the IP you are receiving the 403 from?

Radhika1 · May 8, 2024, 12:38pm

@carly.richmond Yeah Sure I will share the details below

IP from where I'm hitting 49.37.209.191
https://artifacts.elastic.co/maven I'm trying to access here,

Please check and do the needful

eat.toys · May 8, 2024, 12:40pm

Yes, thank you!

Radhika1 · May 8, 2024, 12:44pm

@carly.richmond

            <groupId>xuggle</groupId>
            <artifactId>xuggle-xuggler</artifactId>
            <version>5.4</version>
        </dependency>

Our code has this dependency configured in pom.xml.
So while generating the build for our project, this dependency is trying to get tit from the "Downloading from elasticsearch-releases: https://artifacts.elastic.co/maven/xuggle/xuggle-xuggler/5.4"
But throwing 403 forbidden

carly.richmond · May 8, 2024, 1:22pm

Thanks for confirming @Radhika1. It was the IP address where you are trying to install to that I was looking for.

I'm following up internally to see if there is an ongoing issue due to the number of requests. I'll keep you posted.

Topic		Replies	Views
Failed to fetch https://artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease 403 Forbidden [IP: 2600:1901:0:1d7:: 443] Elasticsearch	9	1228	October 10, 2023
Problem with accessing elastic from Hetzner Meta Elastic	2	686	September 20, 2023
Getting 403 denied to elastic.co (for anything: apt refresh, wget, etc) Meta Elastic	14	14935	June 6, 2022
Problem accessing charts and artifacts from hetzner.de servers Meta Elastic	4	1954	April 27, 2022
Getting 403 denied to elastic.co (for anything: apt refresh, wget, etc) Elasticsearch elastic-stack-alerting	2	1434	May 17, 2023

Are you getting 403's when downloading? Please read here first

Related topics