Intrustion attempts from Amazon EC2 IPs

Suresh Ramasubramanian ops.lists at
Sun Jun 22 13:28:16 UTC 2008

Well, there's spam originating from there, and some cracked scripts generating
part of it.  So ok, someone's found that it makes a handy platform for ssh port
probes and such as well.


"Paul Kelly :: Blacknight" <paul at> wrote:

> Hi there,
> Have any of you recently noticed a lot of ssh scanning coming from amazons EC
> "cloud" IP blocks?
> Today alone I've seen approx 4m attempts from EC2 IPs on just 20 nodes on our
> network.
> Has anyone any experience with Amazons abuse people?
> Thanks,
> Paul

More information about the NANOG mailing list