search

aws-solutions / aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
https://aws.amazon.com/solutions/aws-waf-security-automations
Apache License 2.0
843 stars 361 forks source link

Issue #147 Unblock BadBot IP after a while #148

Closed cgol closed 1 year ago

cgol commented 4 years ago

Issue #147 and #136

Description of changes: Automatically remove IPs from the Bad Bot List after a specified period using a Step Function and delay. If the same bad bot hits again from the same IP, the timer is reset, so the IP is not removed from the bad bot list until the full period has elapsed since the hit. Also fixed the issue with CloudFront IPs being blocked by obtaining source ip from the X-Forwarded-For header.

For some reason whitespace changed in nearly all lines in the template, but you can ignore whitespace and compare the actual changes by suffixing ?w=1 in the github url - see

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

aijunpeng commented 4 years ago

Thanks for your contribution. We have added your request to our solution backlog items and it will be considered in future solution releases.

rakshb commented 1 year ago

Thanks for your request. After carefully evaluating the request, we decided that automatically removing blocked IPs could be a risky proposition. We want customers to evaluate and manually remove any IPs as needed.