Forum Moderators: open

Message Too Old, No Replies

Amazon AWS Abuse

Amazon Excessive Web Crawl

         

investedOnes1

2:50 am on Jan 17, 2016 (gmt 0)

10+ Year Member



Some years ago someone started a thread about excessive trolling by Amazon bots. I'm experiencing a similar problem. I've noted that my website is crawled repeatedly from someone using ec2-54-237-140-103.compute-1.amazonaws.com . They culprit is very clever, sometimes they troll with javascript enabled but most times they disable javascript. I've attempted to block the IP address ranges that are listed on Amazon AWS IP Address Ranges but the troll keeps coming back. I've filed reports with Amazon Abuse and they always reply with one of the following: "We've determined that an Amazon EC2 instance was running at the IP address you provided in your abuse report. We'll investigate the complaint to determine what additional actions, if any, need to be taken in this case." or when I send them an email about a javascript disabled instance of abuse the response is: "Thank you for contacting Amazon Web Services. We take reports of unauthorized network activity from our environment very seriously. It is specifically forbidden in our terms of use.

Because Amazon EC2 Public IP addresses may change ownership frequently, without additional information we will be unable to identify the correct owner of the IP address for the period of time in question."

I use TypePad and they have an IP address block tool, but it is not working. I know that others have experienced similar problems. What advice do you have for preventing Amazon Web Services abuse of your websites?

keyplyr

11:07 am on Mar 7, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Hi investedOnes1. There are more than a dozen AWS ranges worldwide. This thread is long, but should list many of these ranges: [webmasterworld.com...]

If you have access to your raw server logs, you need to cut'n paste the malicious activity and include it in your complaint, along with your domain name and server IP address. This is what AWS means by "additional information."

However, not everything coming from AWS (or any other server farm) is bad. Depending on your web site, you may want to allow some agents through while blocking others. For example: both Facebook for iPhone and Facebook for Android apps use AWS ranges, which if blocked, may stop quite a lot of humans from accessing your site.