North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: amazonaws.com?

  • From: Steve Atkins
  • Date: Fri May 23 20:42:39 2008

On May 23, 2008, at 4:59 PM, Barry Shein wrote:


Is it just us or does someone pWn *.amazonaws.com?

Every one of our mail servers is being slammed by I'm not sure what
but many thousands of user unknowns per hour (fortunately we handle
those pretty quickly but this is a deluge.)

All I know is "amazonaws.com" is "Amazon Web Services", not sure if
these particular systems should be sending email at all, the hostnames
look like:


It's a compute farm. Anyone can rent time on it. The processes
they run will be assigned to random machines in the farm, AIUI,
and will have full network access.

If you're seeing something more egregious than just deluges of spam
then [email protected] would likely be the right people
to talk to.

They've been contacted about it and, AIUI, state that the spam being sent
from there is not something they're going to take action on.

I suspect that taking the obvious preemptive action w.r.t. 67.202.0.0/18
is likely to be more effective than relying on their abuse staff.

Cheers,
  Steve