About the 28 Connect Timed Out issue ...

PayPal informs me of a resource that you may find helpful:

One of our engineers wrote a simple tool which can help test connections from the AT&T network directly to a merchant’s IP address.
This tool can be found at https://sadbox.net/scripts/network/

· Simply choose the provider via which you’d like to check (ie: AT&T)
· Enter the host (IP address or domain name) of the merchant / partner (your server's domain name)
· Click ‘Submit’.

The tool will connect to a server inside the AT&T network and run a traceroute to the merchant’s IP address or domain name.

· If the results show that it connects via multiple non-AT&T hops (even if the traceroute doesn’t entirely complete), the merchant is likely not blocked on the AT&T network.
· If the results show that it gets stuck after a single (AT&T-owned) hop, the merchant is definitely blocked by AT&T.

Feel free to share the test link with your merchants.