<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	
	>
<channel>
	<title>Comments on: Amazon AWS Used for DDOS Attacks Against My Web Sites, Amazon Takes 14 Hours to Reply But Not Take Action (Updatedx5)</title>
	<atom:link href="https://schestowitz.com/Weblog/archives/2015/06/28/aws-ddos/feed/" rel="self" type="application/rss+xml" />
	<link>https://schestowitz.com/Weblog/archives/2015/06/28/aws-ddos/</link>
	<description>Reflections on Technology</description>
	<lastBuildDate>Wed, 11 Feb 2026 11:00:17 +0000</lastBuildDate>
		<sy:updatePeriod>hourly</sy:updatePeriod>
		<sy:updateFrequency>1</sy:updateFrequency>
	<generator>https://wordpress.org/?v=3.9.40</generator>
	<item>
		<title>By: Doug</title>
		<link>https://schestowitz.com/Weblog/archives/2015/06/28/aws-ddos/comment-page-1/#comment-584240</link>
		<dc:creator><![CDATA[Doug]]></dc:creator>
		<pubDate>Tue, 11 Feb 2020 01:52:30 +0000</pubDate>
		<guid isPermaLink="false">http://schestowitz.com/Weblog/?p=4672#comment-584240</guid>
		<description><![CDATA[Roy, could please share how this case ended? Very intersting]]></description>
		<content:encoded><![CDATA[<p>Roy, could please share how this case ended? Very intersting</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Onur</title>
		<link>https://schestowitz.com/Weblog/archives/2015/06/28/aws-ddos/comment-page-1/#comment-499940</link>
		<dc:creator><![CDATA[Onur]]></dc:creator>
		<pubDate>Sun, 21 Oct 2018 08:49:03 +0000</pubDate>
		<guid isPermaLink="false">http://schestowitz.com/Weblog/?p=4672#comment-499940</guid>
		<description><![CDATA[Hi man,
I (and probably  many people) am a victim of malicious attacks of Amazon AWS customers performed under Amazon IP ranges. Still no solution.

What did you ended up with doing?

There are enormous amount of IP address by Amazon with malicious requests made to our sites even hosted overseas.

Shame!

Best regards,

Onur]]></description>
		<content:encoded><![CDATA[<p>Hi man,<br />
I (and probably  many people) am a victim of malicious attacks of Amazon AWS customers performed under Amazon IP ranges. Still no solution.</p>
<p>What did you ended up with doing?</p>
<p>There are enormous amount of IP address by Amazon with malicious requests made to our sites even hosted overseas.</p>
<p>Shame!</p>
<p>Best regards,</p>
<p>Onur</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nick</title>
		<link>https://schestowitz.com/Weblog/archives/2015/06/28/aws-ddos/comment-page-1/#comment-278031</link>
		<dc:creator><![CDATA[Nick]]></dc:creator>
		<pubDate>Wed, 20 Jan 2016 16:29:53 +0000</pubDate>
		<guid isPermaLink="false">http://schestowitz.com/Weblog/?p=4672#comment-278031</guid>
		<description><![CDATA[I haven&#039;t endured a DDOS attack, however, I have recently dealt with what I believe to be a criminal using AWS for nefarious purposes.  In three days I&#039;ve had 20 attempts of logging in to my website as &quot;admin.&quot;  The only reason I believe it wasn&#039;t as much is due to banning entire IP blocks.

The first 5 notifications I received was when I decided to start looking up the IP blocks and banning them on my server&#039;s firewall.  I reported the first 5 attempts but felt it was pointless.  Every attempted login was from a different IP address, all belonging to Amazon Technologies.

A few of the reports don&#039;t look like they&#039;re going to be received as I&#039;m getting mail delayed errors for abuse@amazon.com.  What&#039;s even more annoying is all of the info Amazon wants one to send in order for a report to be accepted.  That was another factor in me ceasing to report any more abuse and just banning the IP blocks.]]></description>
		<content:encoded><![CDATA[<p>I haven&#8217;t endured a DDOS attack, however, I have recently dealt with what I believe to be a criminal using AWS for nefarious purposes.  In three days I&#8217;ve had 20 attempts of logging in to my website as &#8220;admin.&#8221;  The only reason I believe it wasn&#8217;t as much is due to banning entire IP blocks.</p>
<p>The first 5 notifications I received was when I decided to start looking up the IP blocks and banning them on my server&#8217;s firewall.  I reported the first 5 attempts but felt it was pointless.  Every attempted login was from a different IP address, all belonging to Amazon Technologies.</p>
<p>A few of the reports don&#8217;t look like they&#8217;re going to be received as I&#8217;m getting mail delayed errors for <a href="mailto:abuse@amazon.com">abuse@amazon.com</a>.  What&#8217;s even more annoying is all of the info Amazon wants one to send in order for a report to be accepted.  That was another factor in me ceasing to report any more abuse and just banning the IP blocks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: NR</title>
		<link>https://schestowitz.com/Weblog/archives/2015/06/28/aws-ddos/comment-page-1/#comment-253078</link>
		<dc:creator><![CDATA[NR]]></dc:creator>
		<pubDate>Tue, 11 Aug 2015 18:44:06 +0000</pubDate>
		<guid isPermaLink="false">http://schestowitz.com/Weblog/?p=4672#comment-253078</guid>
		<description><![CDATA[Sad, this is becoming standard support practice. The more market and money they seem to get, the worse we seem to get it. Reminds me a lot of some recent dealings with EMC.]]></description>
		<content:encoded><![CDATA[<p>Sad, this is becoming standard support practice. The more market and money they seem to get, the worse we seem to get it. Reminds me a lot of some recent dealings with EMC.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
