Re: Intrustion attempts from Amazon EC2 IPs

[ops.lists () gmail com (Suresh Ramasubramanian)]

Well, there's spam originating from there, and some cracked scripts generating
part of it.  So ok, someone's found that it makes a handy platform for ssh port
probes and such as well.

        srs

"Paul Kelly :: Blacknight" <paul () blacknight com> wrote:

> Hi there,
>
> Have any of you recently noticed a lot of ssh scanning coming from amazons EC
> "cloud" IP blocks?
>
> Today alone I've seen approx 4m attempts from EC2 IPs on just 20 nodes on our
> network.
>
> Has anyone any experience with Amazons abuse people?
>
> Thanks,
>
> Paul