Attacks from AWS servers

Once in a while I get a bunch of visits at at the same time and it bogs down my server. They are all coming from amazon aws servers which probably means they are bots. What is the best way to block these.

Thanks,

3 Replies

What's the point? The traffic would still be spent. You can look up the allocations on this AS and block it with e.g. iptables.

@emestee:

What's the point? The traffic would still be spent. You can look up the allocations on this AS and block it with e.g. iptables.

So how and where do I do this?

Are these unsuccessful connection attempts to some services you run? If so install configure fail2ban as an easy way of dynamically blocking those.

By the way If you don't even know how to block an ip using iptables, I suspect your server setup may be insecure in many ways. Get some professional help. Don't get me wrong, this is just a friendly advice.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct