Support

Why are Amazons worldwide server IP addresses added to WAF exceptions? I certainly did not add them.

the only never block I have ever added was my own fixed IOP. Why would I want to never block Amazon servers? If they never do anything that would cause admin tools to block them there is no point in making the exceptions, surely. If they do try to behave badly isn't that the whole point of admin tools to block them? Or an I missing something? 

If they are not added by default I am at a loss as to how they got there, have I been hacked?

My very basic understanding means I am almost certainly misinterpreting: Thank you for your clarification.

the address are :

And all belong to Amazon according to IP Lookup, hence Securi I guess but not Cloudflare IP addresses

Sorry I should have been more explicit:

Admin tools > Web Application Firewall > Configure WAF > Exceptions  - see attached Image

I and pretty sure deleted all of these yesterday. I am the only superuser. 

I have watchful on the site but only as a regular user.

I have just deleted them all again and clicked on watchful's

"Do you use Admin Tools or RS Firewall?

Click the button below to whitelist Watchful in these firewalls."

And that did not add those IPS back in.

Admin tools > Web Application Firewall > WAF Exceptions  is empty

Logged out of Admin Backend ... logged in again  and the IP address have been added again to Admin tools > Web Application Firewall > Configure WAF > Exceptions

I guess it must be Watchful or something very strange 

Solved -- it is Watchful.. on their site they say:

Watchful uses a set of IP addresses to power our service, including addresses across the globe to accurately detect website uptime:

34.250.7.114/32
34.250.132.64/32
34.250.203.214/32
54.216.138.100/32
54.216.114.117/32
3.64.51.169/32
54.193.88.250/32
52.62.227.180/32
54.207.182.59/32
15.188.66.58/32
13.50.31.157/32
3.98.253.172/32
63.35.85.164/32

Sorry to have taken you time.