download_prerequisites prohibit some AWS IPs?

[Jiang, Haochen]

> From: Mark Wielaard <mark@klomp.org>
> Sent: Monday, May 18, 2026 5:45 PM
> 
> Hi Haochen,
> 
> On Mon, May 18, 2026 at 08:10:10AM +0000, Jiang, Haochen via Gcc wrote:
> > Recently I am building gcc on AWS systems. However, when I am
> > trying to download gcc prereq, I got:
> >
> > $ ./contrib/download_prerequisites
> > https://gcc.gnu.org/pub/gcc/infrastructure/gmp-6.3.0.tar.bz2:
> > 2026-05-18 08:02:11 ERROR 403: Forbidden.
> > error: Cannot download gmp-6.3.0.tar.bz2 from
> https://gcc.gnu.org/pub/gcc/infrastructure/
> >
> > This did not happen on weekends. It just happens today.
> >
> > Is some AWS IP prohibited due to bot attack just today? Or I met
> > bad luck (I believe not since two AWS nodes reporting to me that)?
> 
> Yes, AWS is problematic because they sometimes host botnets which we
> might have to block when they get past our other defenses.
> 
> At the moment the following AWS related ip/blocks are in place:
> 
> # Specific Amazon AWS ips that hammer /git
> 35.89.156.172
> 34.218.210.115
> # 2026-01-28 git-over-http DOS, AWS
> 35.161.163.0/24
> 54.213.72.0/24
> 52.36.47.0/24
> # AWS git history/blame scraper
> 35.80.0.0/12
> 34.192.0.0/10
> 52.0.0.0/10
> 54.200.0.0/14
> # Amazon Technologies Inc. (AT-88-Z)
> 13.24.0.0/13
> # Amazon Data Services NoVa (ADSN-1)
> 100.24.0.0/13
> 
> If you are using one of these ip/ranges for normal usage and not
> scraper bots, then let us know and we'll remove the blocks.
> 

Oh I c. Let's keep those for now if that is the case since bot is really
annoying. I could change my script to upload those prereq from
local machines instead of downloading on those remote machines.

Thx for your help!

Thx,
Haochen