Open `serverinfo` tab provokes ip ban by apps.nextcloud.com

ernolf · September 13, 2023, 7:01am

The appstore seams to be down since ± 5:30

Is it because of maintenance or disruption?

ernolf

SysKeeper · September 13, 2023, 7:10am

Hey, working fine here?

bb77 · September 13, 2023, 7:17am

No issues here, the Appstore is working fine for me.

ernolf · September 13, 2023, 8:16am

ping ok:

root@optiplex:~# ping -c 3 apps.nextcloud.com
PING apps.nextcloud.com (176.9.217.53) 56(84) bytes of data.
64 bytes from apps.nextcloud.com (176.9.217.53): icmp_seq=1 ttl=57 time=12.5 ms
64 bytes from apps.nextcloud.com (176.9.217.53): icmp_seq=2 ttl=57 time=11.2 ms
64 bytes from apps.nextcloud.com (176.9.217.53): icmp_seq=3 ttl=57 time=11.0 ms

--- apps.nextcloud.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 10.983/11.567/12.499/0.665 ms

traceroute ok:

root@optiplex:~# traceroute --resolve-hostnames apps.nextcloud.com
traceroute to apps.nextcloud.com (176.9.217.53), 64 hops max
  1   192.168.188.1 (fritzbox-7580.fritz.box)  0,947ms  0,602ms  0,516ms
  2   62.155.246.85 (p3e9bf655.dip0.t-ipconnect.de)  3,533ms  1,783ms  1,520ms
  3   217.5.75.90 (n-ea9-i.N.DE.NET.DTAG.DE)  8,999ms  7,696ms  7,580ms
  4   62.157.248.138 (62.157.248.138)  9,190ms  7,674ms  7,548ms
  5   213.239.252.250 (core24.fsn1.hetzner.com)  10,631ms  25,279ms  11,903ms
  6   213.239.224.6 (ex9k2.dc13.fsn1.hetzner.com)  11,363ms  9,989ms  9,959ms
  7   88.198.19.60 (s2.nextcloud.com)  10,633ms  9,051ms  9,059ms
  8   176.9.217.53 (apps.nextcloud.com)  11,443ms  9,822ms  9,709ms

http(s) respone not ok:

root@optiplex:~# curl -L apps.nextcloud.com
curl: (7) Failed to connect to apps.nextcloud.com port 80 after 16 ms: Connection refused
root@optiplex:~# curl -L https://apps.nextcloud.com
curl: (7) Failed to connect to apps.nextcloud.com port 443 after 16 ms: Connection refused

Looks like webserver is down.

Or is my IP been blocked maybe?

EDIT: It was my IP that obviously has been blocked

I’ll mark this as solved. Sorry for the confusion

ernolf · September 14, 2023, 9:42am

I got to the bottom of the matter and it looks like the ApstoreFetcher, as called by serverinfo, is the cause of the problem.

I opened an issue:

github.com/nextcloud/serverinfo

Function `getAppsInfo()`as used by `serverinfo` provokes IP-ban (Connection refused) by apps.nextcloud.com

opened 08:42AM - 14 Sep 23 UTC

ernolf

bug 1. to develop

I reported this already in the appstore issue-tracker: https://github.com/nextcl…oud/appstore/issues/1137 I'm posting this here, because I observed this behavior only when the AppstoreFetcher is called by `serverinfo`. ### Steps to reproduce 1. make sure apps.nextcloud.com is accessible: ```sh serverprompt:~# echo -e "\nResponse-Code: $(curl -Lo /dev/null -w "%{http_code}" apps.nextcloud.com)\n==================\n" % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 320 100 320 0 0 8396 0 --:--:-- --:--:-- --:--:-- 8421 100 301k 100 301k 0 0 271k 0 0:00:01 0:00:01 --:--:-- 319k Response-Code: 200 ================== ``` 2. tail -f your logfile: `tail -F $(nextcloud logfile) | jq` and keep it open 3. open serverinfo in a browser tab 4. whait for log message as below. 5. close serverinfo tab, since the message repeates every 5 minutes. 6. recheck accessibility as under 1: ```sh serverprompt:~# echo -e "\nResponse-Code: $(curl -Lo /dev/null -w "%{http_code}" apps.nextcloud.com)\n==================\n" % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (7) Failed to connect to apps.nextcloud.com port 80 after 22 ms: Connection refused Response-Code: 000 ================== ``` ### Expected behaviour no impairments in the connection to apps.nextcloud.com ### Actual behaviour The affected IP get banned/blocked by apps.nextcloud.com. Since it is my home network, I can easily fetch a new IP but every time a serverinfo tab is opened (no matter what instance, even newly setup in a virtual machine) it get banned again. Because in my case it's the WAN Ip of my home network, i can not reach the appstore in my browser eather. ### Server configuration **Operating system**: Ubuntu 22.04.3 LTS **Web server:** Apache2 **Database:** MySQL and PostgeSQL **PHP version:** 8.1.0 and 8.2.10 **Nextcloud version:** (see Nextcloud admin page) 27+ ### Client configuration **Browser:** Chrome, Brave, Opera **Operating system:** Windows, Linux, Mac #### Nextcloud log (data/owncloud.log) ``` { "reqId": "5snl2JvDWBJ4eLJYKjN7", "level": 2, "time": "2023-09-14T08:46:28+02:00", "remoteAddr": "192.168.188.36", "user": "ernolf", "app": "appstoreFetcher", "method": "GET", "url": "/apps/serverinfo/update", "message": "Could not connect to appstore: cURL error 7: Failed to connect to apps.nextcloud.com port 443 after 41 ms: Connection refused (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://apps.nextcloud.com/api/v1/apps.json", "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36", "version": "27.1.0.5", "data": { "app": "appstoreFetcher" } } ``` ### My workaround: coment this line: https://github.com/nextcloud/serverinfo/blob/544bacf952cc94ea0d6ec1a828e1de4971acbb94/lib/SystemStatistics.php#L74 ```php // 'apps' => $this->getAppsInfo() ``` I hope this helps.