Re: Intrustion attempts from Amazon EC2 IPs

Well, there's spam originating from there, and some cracked scripts generating part of it. So ok, someone's found that it makes a handy platform for ssh port probes and such as well. srs "Paul Kelly :: Blacknight" <paul@blacknight.com> wrote:

Hi there,

Have any of you recently noticed a lot of ssh scanning coming from amazons EC "cloud" IP blocks?

Today alone I've seen approx 4m attempts from EC2 IPs on just 20 nodes on our network.

Has anyone any experience with Amazons abuse people?

Thanks,

Paul