nanog mailing list archives

amazonaws.com?


From: Barry Shein <bzs () world std com>
Date: Fri, 23 May 2008 19:59:30 -0400 (EDT)


Is it just us or does someone pWn *.amazonaws.com?

Every one of our mail servers is being slammed by I'm not sure what
but many thousands of user unknowns per hour (fortunately we handle
those pretty quickly but this is a deluge.)

All I know is "amazonaws.com" is "Amazon Web Services", not sure if
these particular systems should be sending email at all, the hostnames
look like:

ec2-67-202-36-134.compute-1.amazonaws.com
ec2-67-202-37-35.compute-1.amazonaws.com
ec2-67-202-37-38.compute-1.amazonaws.com
ec2-67-202-38-112.compute-1.amazonaws.com
ec2-67-202-39-87.compute-1.amazonaws.com
ec2-67-202-8-122.compute-1.amazonaws.com
ec2-72-44-37-77.compute-1.amazonaws.com
ec2-75-101-192-20.compute-1.amazonaws.com
ec2-75-101-202-130.compute-1.amazonaws.com
ec2-75-101-207-190.compute-1.amazonaws.com
ec2-75-101-210-120.compute-1.amazonaws.com
ec2-75-101-224-146.compute-1.amazonaws.com
ec2-75-101-227-187.compute-1.amazonaws.com
ec2-75-101-228-221.compute-1.amazonaws.com
ec2-75-101-229-15.compute-1.amazonaws.com
ec2-75-101-230-147.compute-1.amazonaws.com
ec2-75-101-234-192.compute-1.amazonaws.com
ec2-75-101-236-135.compute-1.amazonaws.com
ec2-75-101-238-69.compute-1.amazonaws.com
ec2-75-101-241-105.compute-1.amazonaws.com

Those don't look like mail servers but what do I know?

Anyhow, if there's anyone awake at Amazonaws.com, your hair is on
fire.

        -b



Current thread: