Block requests to the direct server IP?

[marcoacierno]

Getting lots of spam from bots trying to use [server ip]/some-path

Could we setup the new Cloudfront VPC origin? https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.html not sure how much it costs