[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Intrustion attempts from Amazon EC2 IPs
- Subject: Intrustion attempts from Amazon EC2 IPs
- From: ops.lists at gmail.com (Suresh Ramasubramanian)
- Date: Sun, 22 Jun 2008 06:28:16 -0700
- In-reply-to: <D175CB0A04FE634587DA0987F3C423101ECFC1E1D7@iddawg.blacknight.local>
- References: <D175CB0A04FE634587DA0987F3C423101ECFC1E1D7@iddawg.blacknight.local>
Well, there's spam originating from there, and some cracked scripts generating
part of it. So ok, someone's found that it makes a handy platform for ssh port
probes and such as well.
srs
"Paul Kelly :: Blacknight" <paul at blacknight.com> wrote:
> Hi there,
>
> Have any of you recently noticed a lot of ssh scanning coming from amazons EC
> "cloud" IP blocks?
>
> Today alone I've seen approx 4m attempts from EC2 IPs on just 20 nodes on our
> network.
>
> Has anyone any experience with Amazons abuse people?
>
> Thanks,
>
> Paul