What do I do if my infrastructure is being attacked from Yandex Cloud addresses?

If you notice suspicious activity coming from Yandex Cloud IP addresses, notify us immediately.

Write to Yandex Cloud security: cloud-abuse@yandex-team.ru.

Describe the nature of the problem and provide the addresses of the sources of this suspicious activity. If possible, attach logs, traffic samples, and other technical data relevant to the problem.

Examples of suspicious activity:

• An anomalous number of connections from Yandex Cloud addresses.
• Attempts to traverse the directory structure.
• Attempts to cycle through combinations to guess passwords.
• Evidence of other malicious activity coming from Yandex Cloud addresses.