-snip-
Wasnt amazon also among the ISPs that hosted a significantly large portion of the classic nodes? It might be an attempt to kick them off the network or make it look like someone was trying to do so.
Correct. However, almost all of those nodes have disappeared (a day or two before those connections appeared which is a
strange coincidence)[1]:

-snip-
[1] -
https://coin.dance/nodesMaybe its the same IPs, but the money ran out to run full nodes.