AWS EC2 Tomcat Java Webapp - How can I manage bot http sessions

Question

I have a Tomcat 8 Java webapp deployed in an AWS EC2 Ubuntu instance.

It seems that there is a lot of bots trying to access my app because in my Javamelody monitoring I can see one-request bot's sessions cached by spring security like:

DefaultSavedRequest[http://52.27.73.101/phpmy-admin/]
DefaultSavedRequest[http://52.27.73.101/wp-login.php]
DefaultSavedRequest[http://52.27.73.101/admin/phpmyadmin/]

Is there a way to prevent from that bot's request? I don't know, maybe a spring security config that does not save them on caché, oa tomcat config that do something similar?

Lots of them doesn't have even IP, or Country, or User Agent.

Apart from security warning, my Javamelody Http Sessions Info it's not trustable because there are a lot of these.

The EC2 Instances is behind an AWS Load Balancer, so maybe can help in this thread too.

Answer 1

If you have an EC2 instance you have full control of your SO. You could use any tool, for example iptables, to control the network traffic. Maybe with something like this:

iptables -I INPUT -s <bot IP source> -j DROP