North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Intrustion attempts from Amazon EC2 IPs

  • From: Suresh Ramasubramanian
  • Date: Sun Jun 22 09:28:28 2008 
Well, there's spam originating from there, and some cracked scripts generating
part of it.  So ok, someone's found that it makes a handy platform for ssh port
probes and such as well.

	srs

"Paul Kelly :: Blacknight" <[email protected]> wrote:

> Hi there,
>
> Have any of you recently noticed a lot of ssh scanning coming from amazons EC
> "cloud" IP blocks?
>
> Today alone I've seen approx 4m attempts from EC2 IPs on just 20 nodes on our
> network.
>
> Has anyone any experience with Amazons abuse people?
>
> Thanks,
>
> Paul