View Single Post
Old 08-31-2018, 06:12 PM  
HairyChick
Slowly dying
 
Industry Role:
Join Date: Sep 2012
Location: Padanaram
Posts: 3,091
Anyone Familiar With AWS?

I get spam from the IP of amazonaws.com. I email to report it and get back an unclear response. Well, clear but questionable.

Someone logs into their server and sends out spam. I’m sure server logs show the originating IP and username. I’m wondering if their server is publicly accessible. They seem to indicate that but I find it hard to believe that they allow the public access to their server. And, allowed people to send out thousands of spam emails without noticing it.

——————-——————-——————-——————-——————-——————-——————-

“ ...... Due to the frequency with which AWS public IP addresses can change ownership, we will need additional information in order to identify the responsible customer(s).

For security reasons, we do not open or accept attachments. When replying, please provide plain-text logs of the abusive activity, including the following information, in the body of your email:

* Log extracts showing the intensity and duration of the activity

For a faster response, please resubmit your report using the form at https://aws.amazon.com/forms/report-abuse

We look forward to hearing from you shortly.

Regards,
AWS Abuse

——————-——————-

On Thursday, August 23, 2018, WordPress

Event: Failed Login
Website: Blahblahblah.com
IP Address: 54.164.51.13
Reverse IP: ec2-54-164-51-13.compute-1.amazonaws.com
Date/Time: August 24, 2018 1:41 am


Message: User authentication failed: pam (I post as pam with user access only, not as the admin)

——————-——————-——————-——————-——————-——————-

Does Amazon have a public IP where anyone can get access and spam undetected?? I’d think word would get out and all lowlife spammers would use it. Logs would show the IP online there, logged in, at the tine shown.

They want “ * Log extracts showing the intensity and duration of the activity”. Uhhh, isn’t that on their logs?!? The spammer didn’t access my account; it’s their server that was utilized.

Then again, I haven’t dealt with hackers and spammers on my server in ten years. Things may have changed or my amnesia extends beyond my illness

I told Amazon most of the above and said their abuse team was lame if they thought I’d have logs or any information on this besides spam. It went to an email address that doesn’t give me full stats, I.e. which servers it went through, originating IP thorough information, etc. I had that in Eudora, my first email program.
__________________
*****************************************
Anti-Semites have Small Penis Syndrome. The only known treatment is electroshock therapy combined with cerebellum removal. Fortunately, it’s a tiny procedure.
*****************************************

Last edited by HairyChick; 08-31-2018 at 06:15 PM.. Reason: Needed editing
HairyChick is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote