Re: download_prerequisites prohibit some AWS IPs?

Hi Haochen,

On Mon, May 18, 2026 at 08:10:10AM +0000, Jiang, Haochen via Gcc wrote:
> Recently I am building gcc on AWS systems. However, when I am
> trying to download gcc prereq, I got:
> 
> $ ./contrib/download_prerequisites
> https://gcc.gnu.org/pub/gcc/infrastructure/gmp-6.3.0.tar.bz2:
> 2026-05-18 08:02:11 ERROR 403: Forbidden.
> error: Cannot download gmp-6.3.0.tar.bz2 from https://gcc.gnu.org/pub/gcc/infrastructure/
> 
> This did not happen on weekends. It just happens today.
> 
> Is some AWS IP prohibited due to bot attack just today? Or I met
> bad luck (I believe not since two AWS nodes reporting to me that)?

Yes, AWS is problematic because they sometimes host botnets which we
might have to block when they get past our other defenses.

At the moment the following AWS related ip/blocks are in place:

# Specific Amazon AWS ips that hammer /git
35.89.156.172
34.218.210.115
# 2026-01-28 git-over-http DOS, AWS
35.161.163.0/24
54.213.72.0/24
52.36.47.0/24
# AWS git history/blame scraper
35.80.0.0/12
34.192.0.0/10
52.0.0.0/10
54.200.0.0/14
# Amazon Technologies Inc. (AT-88-Z)
13.24.0.0/13
# Amazon Data Services NoVa (ADSN-1)
100.24.0.0/13

If you are using one of these ip/ranges for normal usage and not
scraper bots, then let us know and we'll remove the blocks.

Cheers,

Mark