[105394] in North American Network Operators' Group
Re: Intrustion attempts from Amazon EC2 IPs
daemon@ATHENA.MIT.EDU (Marshall Eubanks)
Sun Jun 22 11:38:48 2008
From: Marshall Eubanks <tme@multicasttech.com>
To: "Paul Kelly :: Blacknight" <paul@blacknight.com>
In-Reply-To: <D175CB0A04FE634587DA0987F3C423101ECFC1E1D7@iddawg.blacknight.local>
Date: Sun, 22 Jun 2008 11:38:27 -0400
Cc: "'nanog@merit.edu'" <nanog@merit.edu>
Errors-To: nanog-bounces@nanog.org
On Jun 22, 2008, at 5:52 AM, Paul Kelly :: Blacknight wrote:
> Hi there,
>
> Have any of you recently noticed a lot of ssh scanning coming from
> amazons EC "cloud" IP blocks?
>
> Today alone I've seen approx 4m attempts from EC2 IPs on just 20
> nodes on our network.
>
> Has anyone any experience with Amazons abuse people?
You are aware of the NANOG thread (68 messages) on spam coming from
the Amazon cloud - thread title is
"amazonaws.com?" and it started May 23rd ? I would scan it as it deals
with responses
(or lack thereof) from Amazon.
Regards
Marshall
>
>
> Thanks,
>
> Paul
>
> Paul Kelly
> Technical Director
> Blacknight Internet Solutions ltd
> Hosting, Colocation, Dedicated servers
> IP Transit Services
> Tel: +353 (0) 59 9183072
> Lo-call: 1850 929 929
> DDI: +353 (0) 59 9183091
>
> e-mail: paul@blacknight.ie
> web: http://www.blacknight.ie
>
> Blacknight Internet Solutions Ltd,
> Unit 12A,Barrowside Business Park,
> Sleaty Road,
> Graiguecullen,
> Carlow,
> Ireland
>
> Company No.: 370845
>
