[Security] Compute-1.amazonaws.com spam bot?

[kbilly]

Hello everyone!

Today i went to check the guests' ip address on my forum and i found that the following two are always connected to my forum.

52.87.217.37

52.91.178.40


 I checked the ip's on internet and they are related to compute-1.amazonaws.com

Should they must be blocked via .htaccess ?

What do you think about amazonaws.com?

Thanks a lot

[s3_gunzel]

Just IP Ban them in your ACP.

[kbilly]

Thanks for your reply but are they spam bots?

[hazy]

I get a few hits on my site with referrals from amazonaws/EC2 Amazon. When I do a bit more digging those ips are always snooping for stuff they shouldn't perhaps looking for ways in/testing etc, most times I ban the ip range and it catches a lot for me but some still get through. That's just my experience, whenever I see the referral from amazon I am already moving towards the ban button!

[s3_gunzel]

Thanks for your reply but are they spam bots?

Unsure, for certain. But you can assume most datacentre traffic is bad. Some people, like me, spend most of their web browsing time connected to their own VPN (which is traceable back to my name if you do a whois record search on a domain name pointing to the IP) - but that is more the exception than the rule.

[kbilly]

ok,gonna ban it right now.

Thanks a lot

---

I banned those ip's but they are still crawling my forum,so,how can i prevent them to crawl my site?

Via .htaccess?

[hazy]

You can ban the IPs in .htaccess using the following format for blacklisted IPs just keep adding below the last line when you get new ones.

Order Allow,Deny
Allow from all
Deny from 52.87.217.37
Deny from 52.91.178.40

[kbilly]

You can ban the IPs in .htaccess using the following format for blacklisted IPs just keep adding below the last line when you get new ones.

Order Allow,Deny
Allow from all
Deny from 52.87.217.37
Deny from 52.91.178.40

Thanks a lot.

[shinemo]

What do you think about amazonaws.com?

Thanks a lot

It's possibly a bot from any online tool which is using Amazon AWS. You can track more activity of the IP or block them if you are not sure what is that.

[s3_gunzel]

You can ban the IPs in .htaccess using the following format for blacklisted IPs just keep adding below the last line when you get new ones.

Order Allow,Deny
Allow from all
Deny from 52.87.217.37
Deny from 52.91.178.40

It should be stressed the issue with banning them in the .htaccess is that you lose modifications to it should you move your site and forget about them. Banning within the ACP places the bans into your database, and you don't lose them.