: Suspicious Web Traffic from Amazon.com ISP Just a few hours back I was checking my logs when I found a whole bunch of traffic from IP address 54.174.xx.xx and ISP Amazon.com (validated from

@Sue5673885

We had the same issue and it turned out to be Pingdom (website monitoring service).

Someone had configured it to ping our site every 5 minutes and login which resulted in thousands of hits per month from Ashburn, VA with a service Provider of Amazon. Time on site was just a fraction of a second each time.

Pingdom suggests enabling blocking known bot traffic via a setting in GA: help.pingdom.com/hc/en-us/articles/212979949-What-analytics-will-Pingdom-checks-and-products-trigger-

Vote Up Vote Down

@LarsenBagley505

The thing you need to be careful of here is that Amazon is not simply a website provider but is also a cloud services provider and also has a service whereby users can access a virtualized desktop interface on the Amazon network as a remote desktop session. This particular service uses a Windows Server gateway and so the desktop resolution and OS fingerprint will generally be the same. Simply having these entries show up in your logs is not an inherently bad thing unless you are seeing traffic that indicates they are trying to breach your site security or they are using the services to perform malicious actions or spamming on your site.

Vote Up Vote Down