Intrustion attempts from Amazon EC2 IPs

Sun Jun 22 13:28:16 UTC 2008

Well, there's spam originating from there, and some cracked scripts generating
part of it.  So ok, someone's found that it makes a handy platform for ssh port
probes and such as well.

	srs

"Paul Kelly :: Blacknight" <paul at blacknight.com> wrote:

> Hi there,
>
> Have any of you recently noticed a lot of ssh scanning coming from amazons EC
> "cloud" IP blocks?
>
> Today alone I've seen approx 4m attempts from EC2 IPs on just 20 nodes on our
> network.
>
> Has anyone any experience with Amazons abuse people?
>
> Thanks,
>
> Paul