BigEd wrote: ↑Mon Mar 20, 2023 10:17 am
Someone with a bit of cash and a grudge...
Or just a lot of compromised machines (it's not uncommon to see AWS machines unprotected by WAFs/firewalls/etc; or AWS API credentials exposed in github; or...). Bot armies are cheap.
is there any reason why it would be counterproductive to block great swathes of AWS address space? I can't quite think why legitimate access would come from a cloud service.
A number of commercial proxy services (e.g. those used by corporations) may use AWS (and GCP and Azure) as egress points to optimise traffic flow. I'm not talking about those dodgy VPN/proxy systems meant to let you stream video from other locales, but legit proxies used by corporates as part of their data loss prevention stance. Larger providers (like the one my employer uses) have their own registered IP range, but smaller ones may use AWS native IP addresses.
