Intrustion attempts from Amazon EC2 IPs

["Paul Kelly :: Blacknight" <paul () blacknight com>]

Hi there,

Have any of you recently noticed a lot of ssh scanning coming from amazons EC "cloud" IP blocks?

Today alone I've seen approx 4m attempts from EC2 IPs on just 20 nodes on our network.

Has anyone any experience with Amazons abuse people?

Thanks,

Paul

Paul Kelly
Technical Director
Blacknight Internet Solutions ltd
Hosting, Colocation, Dedicated servers
IP Transit Services
Tel: +353 (0) 59 9183072
Lo-call: 1850 929 929
DDI: +353 (0) 59 9183091

e-mail: paul () blacknight ie
web: http://www.blacknight.ie

Blacknight Internet Solutions Ltd,
Unit 12A,Barrowside Business Park,
Sleaty Road,
Graiguecullen,
Carlow,
Ireland

Company No.: 370845