Re: Intrustion attempts from Amazon EC2 IPs

[Marshall Eubanks <tme () multicasttech com>]

On Jun 22, 2008, at 5:52 AM, Paul Kelly :: Blacknight wrote:

> Hi there,
>
> Have any of you recently noticed a lot of ssh scanning coming from  
> amazons EC "cloud" IP blocks?
>
> Today alone I've seen approx 4m attempts from EC2 IPs on just 20  
> nodes on our network.
>
> Has anyone any experience with Amazons abuse people?

You are aware of the NANOG thread (68 messages) on spam coming from  
the Amazon cloud - thread title is
"amazonaws.com?" and it started May 23rd ? I would scan it as it deals  
with responses
(or lack thereof) from Amazon.

Regards
Marshall

> Thanks,
>
> Paul
>
> Paul Kelly
> Technical Director
> Blacknight Internet Solutions ltd
> Hosting, Colocation, Dedicated servers
> IP Transit Services
> Tel: +353 (0) 59 9183072
> Lo-call: 1850 929 929
> DDI: +353 (0) 59 9183091
>
> e-mail: paul () blacknight ie
> web: http://www.blacknight.ie
>
> Blacknight Internet Solutions Ltd,
> Unit 12A,Barrowside Business Park,
> Sleaty Road,
> Graiguecullen,
> Carlow,
> Ireland
>
> Company No.: 370845