Seeing something called BitSightBot/1.0

Amazon IP but looks to be internet-census

[SumGuy]

Recent I've seen

a request for robots.txt with UA = python-requests/2.31.0
a request for /index.html (my landing page) with UA = Mozilla/5.0 (compatible; BitSightBot/1.0)

These happening one right after the other from the same IP 185.117.225.128. This is an Amazon IP (Portugal ?). Whois info indicates that it's being used by internet-census . org. I hate that outfit, and I nuke all their IP's in my router's IP blocking list as I discover them.

I try to block Amazon in general from hitting my web server - this might be a new CIDR for them (it's only a /24) and seems to be linked to NSEC - Sistemas Informaticos, S.A.

[blend27]

I've seen them on June 30th from 185.117.225.56(PT indeed according to records)

So it is within /24.

Amazon has been leasing and gobbling-up /24 &-|| /23 left and right in EU, new/old ranges.

185.117.224/24 is HostRoyal(allocated to hosting: [bgp.he.net...] - look at DNS TAB),

So block on /23 is faster I guess.

[Pfui]

Saw the exact same pattern overnight from 185.117.225.54. One python, then one BitSightBot two seconds later. (Thank goodness for router-based killfiling.)