How to block specific Amazon accounts?

toplisek

• September 21, 2021 10:57

We have seen many attacks using AWS. Is it possible to block specific AWS accounts. An example: XXX.us-west-2.compute.amazonaws.com using WHM and Firewall? It is used another region and attacks can be from another region without possibility to block. As I understand it is not possible to set an option within AWS security layers for Amazon Elastic Container Service (Amazon ECS).

• 

  cPRex Jurassic Moderator

  • September 21, 2021 18:54

  Hey there! Your best bet would be to block the IP address associated with the hostname at the firewall level. There isn't going to be a way to block based on the domain name or hostname, at least that I am aware of.

  0
• 

  toplisek

  • October 01, 2021 13:06

  I'm also not aware how to do it inside Amazon AWS. IP is modified all the time but AWS is a track.

  0
• 

  cPRex Jurassic Moderator

  • October 01, 2021 15:54

  Unfortunately I wouldn't have any information on how to do that on the Amazon side of things. It would be best to reach out to them directly to see if that type of work is possible with their firewall tools and the type of hosting plan you have.

  0

Please sign in to leave a comment.