I get spam from the IP of amazonaws.com. I email to report it and get back an unclear response. Well, clear but questionable.
Someone logs into their server and sends out spam. I’m sure server logs show the originating IP and username. I’m wondering if their server is publicly accessible. They seem to indicate that but I find it hard to believe that they allow the public access to their server. And, allowed people to send out thousands of spam emails without noticing it.
——————-——————-——————-——————-——————-——————-——————-
“ ...... Due to the frequency with which AWS public IP addresses can change ownership, we will need additional information in order to identify the responsible customer(s).
For security reasons, we do not open or accept attachments. When replying, please provide plain-text logs of the abusive activity, including the following information, in the body of your email:
* Log extracts showing the intensity and duration of the activity
For a faster response, please resubmit your report using the form at
https://aws.amazon.com/forms/report-abuse
We look forward to hearing from you shortly.
Regards,
AWS Abuse
——————-——————-
On Thursday, August 23, 2018, WordPress
Event: Failed Login
Website:
Blahblahblah.com
IP Address: 54.164.51.13
Reverse IP: ec2-54-164-51-13.compute-1.amazonaws.com
Date/Time: August 24, 2018 1:41 am
Message: User authentication failed: pam (I post as pam with user access only, not as the admin)
——————-——————-——————-——————-——————-——————-
Does Amazon have a public IP where anyone can get access and spam undetected?? I’d think word would get out and all lowlife spammers would use it. Logs would show the IP online there, logged in, at the tine shown.
They want “ * Log extracts showing the intensity and duration of the activity”. Uhhh, isn’t that on their logs?!? The spammer didn’t access my account; it’s their server that was utilized.
Then again, I haven’t dealt with hackers and spammers on my server in ten years. Things may have changed or my amnesia extends beyond my illness
I told Amazon most of the above and said their abuse team was lame if they thought I’d have logs or any information on this besides spam. It went to an email address that doesn’t give me full stats, I.e. which servers it went through, originating IP thorough information, etc. I had that in Eudora, my first email program.