# Are you getting 403's when downloading? Please read here first

**URL:** <https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340>\
**Category:** Meta Elastic\
**Created:** [June 16, 2022, 4:54am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340 "2022-06-16T04:54:50Z")\
**Posts on this page:** 20\
**Page:** 3

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 30, 2022, 9:09pm UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/48 "2022-10-30T21:09:13Z")

</div>

This has been allowed.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 30, 2022, 9:10pm UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/49 "2022-10-30T21:10:13Z")

</div>

This has been allowed.

---

<div class="post-metadata">

**Author:** ![farmerKZ](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/farmerkz/32/97753_2.png) [@farmerKZ](https://discuss.elastic.co/u/farmerKZ)\
**Post date:** [October 31, 2022, 6:54am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/50 "2022-10-31T06:54:26Z")

</div>

> [@warkolm](#):
>
> This has been allowed.

No!

```auto
root@graylog-2:~# apt-get update
Hit:1 http://kz.archive.ubuntu.com/ubuntu focal InRelease
Get:2 http://kz.archive.ubuntu.com/ubuntu focal-updates InRelease [114 kB]
Err:3 https://artifacts.elastic.co/packages/oss-7.x/apt stable InRelease
  403 Forbidden [IP: 34.120.127.130 443]

```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 3, 2022, 9:29pm UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/51 "2022-11-03T21:29:04Z")

</div>

Can you please try again, we've checked and this is being allowed.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 3, 2022, 9:29pm UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/52 "2022-11-03T21:29:25Z")

</div>

This has been allowed.

---

<div class="post-metadata">

**Author:** ![todeveni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/todeveni/32/112691_2.png) [@todeveni](https://discuss.elastic.co/u/todeveni)\
**Post date:** [November 4, 2022, 7:50pm UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/53 "2022-11-04T19:50:58Z")

</div>

Also:  
IPv6: In 2a04:3540:1000:310::/64 range  
Location: Helsinki, Finland

```auto
Err:9 https://artifacts.elastic.co/packages/7.x/apt stable InRelease
  403 Forbidden [IP: 2600:1901:0:1d7:: 443]

```

---

<div class="post-metadata">

**Author:** ![SuperTux88](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@SuperTux88](https://discuss.elastic.co/u/SuperTux88)\
**Post date:** [November 14, 2022, 12:05am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/55 "2022-11-14T00:05:33Z")

</div>

My server is now also getting blocked since a few days:

IP: 2a01:4f8:10a:1c49::/64  
Location: Germany

---

<div class="post-metadata">

**Author:** ![bhawk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhawk/32/99970_2.png) [@bhawk](https://discuss.elastic.co/u/bhawk)\
**Post date:** [November 14, 2022, 7:23am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/56 "2022-11-14T07:23:27Z")

</div>

Range:  
217.174.224.0/20  
95.85.96.0/19

Location:  
Turkmenistan

Reposting because of no answer for one month.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 14, 2022, 7:26am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/57 "2022-11-14T07:26:06Z")

</div>

Sorry about that, I must have missed this one ☹ I have raised this internally and will chase it up with priority.

---

<div class="post-metadata">

**Author:** ![niemanz](https://avatars.discourse-cdn.com/v4/letter/n/f08c70/32.png) [@niemanz](https://discuss.elastic.co/u/niemanz)\
**Post date:** [November 16, 2022, 12:01am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/58 "2022-11-16T00:01:49Z")

</div>

Tried via DM, but no response, so posting here for visibility:

**IPv6:** 2a03:94e0::/30 subnet  
**Location:** Norway

403 error example:

```auto
wget https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.0-linux-x86_64.tar.gz
--2022-11-09 18:05:09-- https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.0-linux-x86_64.tar.gz
Resolving artifacts.elastic.co (artifacts.elastic.co)... 2600:1901:0:1d7::, 34.120.127.130
Connecting to artifacts.elastic.co (artifacts.elastic.co)|2600:1901:0:1d7::|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2022-11-09 18:05:09 ERROR 403: Forbidden.

```

[ipinfo.io](http://ipinfo.io) data for IPv6:

```auto
{
  "ip": "2a03:94e0::",
  "city": "Sandefjord",
  "region": "Vestfold og Telemark",
  "country": "NO",
  "loc": "59.1729,10.2149",
  "org": "AS56655 TerraHost AS",
  "postal": "3241",
  "timezone": "Europe/Oslo",
  "readme": "https://ipinfo.io/missingauth"
}

```

I truly appreciate what elastic team members do in their spare time to help with these issues. But I hope that someday we can get an automated system to report IP block for faster unblocks because right now this is a real nightmare to update manually all servers (8.5.1 just released)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 16, 2022, 1:59am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/59 "2022-11-16T01:59:44Z")

</div>

I got your DM, unfortunately I am still waiting for the IP to be allowed sorry.

---

<div class="post-metadata">

**Author:** ![Althea\_Vestrit](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/althea_vestrit/32/104116_2.png) [@Althea\_Vestrit](https://discuss.elastic.co/u/Althea_Vestrit)\
**Post date:** [November 17, 2022, 2:57pm UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/60 "2022-11-17T14:57:10Z")

</div>

DM sent ! Thanks a lot !

---

<div class="post-metadata">

**Author:** ![braidner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/braidner/32/99894_2.png) [@braidner](https://discuss.elastic.co/u/braidner)\
**Post date:** [November 21, 2022, 1:14am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/62 "2022-11-21T01:14:44Z")

</div>

Hello, unblock pls.

- ip:"31.172.77.158",
- city:"Frankfurt am Main",
- region:"Hesse",
- country:"DE",

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 22, 2022, 12:58am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/63 "2022-11-22T00:58:45Z")

</div>

@bhawk @SuperTux88 @xinyi @todeveni @farmerKZ @niemanz these have been allowed. Thanks for your patience.

---

<div class="post-metadata">

**Author:** ![SuperTux88](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@SuperTux88](https://discuss.elastic.co/u/SuperTux88)\
**Post date:** [November 22, 2022, 1:21am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/64 "2022-11-22T01:21:25Z")

</div>

It looks like I'm still blocked, have you allowed the whole /64 subnet?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 22, 2022, 2:32am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/65 "2022-11-22T02:32:10Z")

</div>

Chasing this up now.

---

<div class="post-metadata">

**Author:** ![toscom\_felix](https://avatars.discourse-cdn.com/v4/letter/t/8797f3/32.png) [@toscom\_felix](https://discuss.elastic.co/u/toscom_felix)\
**Post date:** [November 22, 2022, 6:40am UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/66 "2022-11-22T06:40:10Z")

</div>

Hello, please unblock:

IP: 167.235.199.24  
Location: Germany

---

<div class="post-metadata">

**Author:** ![niemanz](https://avatars.discourse-cdn.com/v4/letter/n/f08c70/32.png) [@niemanz](https://discuss.elastic.co/u/niemanz)\
**Post date:** [November 22, 2022, 1:20pm UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/67 "2022-11-22T13:20:27Z")

</div>

@warkolm sorry, but it is still blocked from here:

```auto
$ wget https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.1-linux-x86_64.tar.gz
--2022-11-22 13:11:03-- https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.1-linux-x86_64.tar.gz
Resolving artifacts.elastic.co (artifacts.elastic.co)... 2600:1901:0:1d7::, 34.120.127.130
Connecting to artifacts.elastic.co (artifacts.elastic.co)|2600:1901:0:1d7::|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2022-11-22 13:11:03 ERROR 403: Forbidden.

```

```auto
$ wget elastic.co
--2022-11-22 13:09:28-- http://elastic.co/
Resolving elastic.co (elastic.co)... 2600:1901:0:1f6d::, 34.107.161.234
Connecting to elastic.co (elastic.co)|2600:1901:0:1f6d::|:80... connected.
HTTP request sent, awaiting response... 308 unknown
Location: https://elastic.co:443/ [following]
--2022-11-22 13:09:28-- https://elastic.co/
Connecting to elastic.co (elastic.co)|2600:1901:0:1f6d::|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2022-11-22 13:09:29 ERROR 403: Forbidden.

```

This happens on numerous servers from 2a03:94e0::/30 subnet, with a few weird exclusions here and there that can actually reach elastic servers. So If possible, please unblock the whole /30 subnet, it is properly geolocated and belongs to a single ASN entity.

---

<div class="post-metadata">

**Author:** ![ryddan](https://avatars.discourse-cdn.com/v4/letter/r/c57346/32.png) [@ryddan](https://discuss.elastic.co/u/ryddan)\
**Post date:** [November 22, 2022, 3:18pm UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/68 "2022-11-22T15:18:58Z")

</div>

Hi!

Please unblock  
194.68.212.149  
194.68.212.150  
Location Sweden

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 22, 2022, 9:21pm UTC](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340/69 "2022-11-22T21:21:03Z")

</div>

Am chasing it up.

[Previous page](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340.md?page=2)

[Next page](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340.md?page=4)
