Results 1 to 8 of 8

Thread: Amazon EC2

  1. #1
    Join Date
    Mar 2009
    Location
    Houston, TX
    Posts
    666

    Amazon EC2

    Anyone ever use this service? I had an issue with tons of spam being sent to my mail servers from amazon, so I placed an IP ban on the entire Amazon network until the issue was fixed. They replied and said that it was coming from an Amazon EC2 client and that it was handled...made me kind of curious about it.

  2. #2
    Join Date
    Feb 2008
    Location
    Houston, Texas, USA
    Posts
    2,875
    How did the rogue EC2 node know what domains you have hosted and therefore what domains to spam? Can you post one of the spam headers? I'm just curious.
    UNIXy - Fully Managed Servers and Clusters - Established in 2006
    [ cPanel Varnish Nginx Plugin ] - Enhance LiteSpeed and Apache Performance
    www.unixy.net - Los Angeles | Houston | Atlanta | Rotterdam
    Love to help pro bono (time permitting). joe > unixy.net

  3. #3
    On their web site should be email for the abuses. Also that is good to check their whois and contact their datacenter.

  4. #4
    Join Date
    Jun 2003
    Location
    London, UK
    Posts
    1,730
    EC2 is notorious for sending spam. The spammer's VM gets shut down and they basically just start up another one on a new IP in Amazon's range immediately afterwards.
    Darren Lingham - UK Webhosting Ltd. - (0800) 024 2931
    Tsohost.co.uk - Quality UK Windows and Linux hosting since 2003
    UK WordPress Hosting - Fast, easy, cloud based WordPress Hosting

  5. #5
    Join Date
    Mar 2009
    Location
    Houston, TX
    Posts
    666
    Quote Originally Posted by UNIXy View Post
    How did the rogue EC2 node know what domains you have hosted and therefore what domains to spam? Can you post one of the spam headers? I'm just curious.
    I didn't check the mail logs so I don't know if it was going to all of the domains or not, but I got like 20 emails 5 minutes apart all from different IP's inside of the EC2 network with the same email (just one word different). By the time I got that 20th or so email I was banning the entire Amazon IP range.
    PHP Code:
    From Mon Apr 20 08:03:43 2009
    X
    -Account-Keyaccount2
    X
    -UIDLUID382-1238713474
    X
    -Mozilla-Status0001
    X
    -Mozilla-Status200000000
    X
    -Mozilla-Keys:                                                                                 
    Return-
    path: <site3@introduction.com>
    Envelope-to: {MYEMAILADDY}
    Delivery-dateMon20 Apr 2009 08:04:08 -0500
    Received
    from ec2-79-125-54-216.eu-west-1.compute.amazonaws.com ([79.125.54.216])
        
    by shelby.deliciahosting.com with smtp (Exim 4.69)
        (
    envelope-from <site3@introduction.com>)
        
    id 1LvtAN-0001uu-KA
        
    for {MYEMAILADDY}; Mon20 Apr 2009 08:04:08 -0500
    From
    "%CUSTOM_EGREETLOL.com" <site3@introduction.com>
    To: {MYEMAILADDY}
    SubjectKim sent you an %CUSTOM_EGREETLOL
    Date
    Mon20 Apr 2009 19:01:26 +0500
    Message
    -Id: <%CUSTOM_AAMSGID>
    MIME-Version1.0
    Content
    -Typetext/htmlcharset=ISO-8859-1
    Content
    -Transfer-Encoding7bit

    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
    <
    html>
    <
    head>
    </
    head>
    <
    body bgcolor="#ffffff" text="#000008">
    <
    font face="Tahoma, sans-serif, Verdana">Dear {MYEMAILADDY},%CUSTOM_ZZBR
    You were sent a 
    %CUSTOM_EGREETLOL!%CUSTOM_ZZBR
    <a href="%CUSTOM_GREETDOMAIN">Click here and press %CUSTOM_RUNZ to view it.</a></font>%CUSTOM_ZZBR
    %CUSTOM_LOLRNDTIMES
    </body>
    </
    html
    Quote Originally Posted by SiberForum View Post
    On their web site should be email for the abuses. Also that is good to check their whois and contact their datacenter.
    I've already contacted the abuse department and had the situation rectified.

    Quote Originally Posted by dazmanultra View Post
    EC2 is notorious for sending spam. The spammer's VM gets shut down and they basically just start up another one on a new IP in Amazon's range immediately afterwards.
    This is what I was more so enquiring about. I've never heard of Amazon's EC2...From what it sounds like it's just free VM's they give away to developers or something?

  6. #6
    Join Date
    Jun 2003
    Location
    London, UK
    Posts
    1,730
    Quote Originally Posted by txitcs View Post
    This is what I was more so enquiring about. I've never heard of Amazon's EC2...From what it sounds like it's just free VM's they give away to developers or something?
    It's not free, but pricing is per hour. This makes it attractive because you can setup a VM, spam for a few hours at the cost of a few cents, get shut down and not lose very much. Before starting it all again.
    Darren Lingham - UK Webhosting Ltd. - (0800) 024 2931
    Tsohost.co.uk - Quality UK Windows and Linux hosting since 2003
    UK WordPress Hosting - Fast, easy, cloud based WordPress Hosting

  7. #7
    Join Date
    Mar 2009
    Location
    Houston, TX
    Posts
    666
    Quote Originally Posted by dazmanultra View Post
    It's not free, but pricing is per hour. This makes it attractive because you can setup a VM, spam for a few hours at the cost of a few cents, get shut down and not lose very much. Before starting it all again.
    Aaahhh okay. Thanks for the input.

  8. #8
    Join Date
    Jul 2008
    Posts
    972

  9. Newsletters

    Subscribe Now & Get The WHT Quick Start Guide!

Related Posts from theWHIR.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •