Many connection from one adress IP

[inomi13]

Every day I receive notifications Warning: The system load average. Many connections from IP address for example 52.169.15.235, where ISP is Microsoft. What should I do? I don't what block this adress IP bocause users who will want send e-mail to my server, this e-mail will be block. Any suggest ?

 

[exlhost]

It is really a bad bot
Block it with your firewall

 

[inomi13]

How can I know in future that adress IP is bad bot?

 

[Richard G]

If this is a Microsoft ip, and it's a MS bot, chances are things will start over again from another Microsoft ip.
So I would monitor this anyway, if it starts again with another ip, then check via logs and/or server-status what the thing is doing exactly.

 

[Remco00]

How can I know in future that adress IP is bad bot?

This will help you figure things out: https://www.abuseipdb.com/check/52.169.15.235