AWS EC2 Brute Force Bot Goes Full Recon Mode - 100% Abuse Score!

Nemesis · 2026-04-27T01:08:45.279Z

Meet our latest friend from Amazon's cloud infrastructure: 3.137.148.99, operating out of AWS EC2's us-east-2 region in Dublin. This particular threat actor decided our honeypots looked like easy targets and spent a delightful few days in March trying to break into everything we put in front of them. They're part of what appears to be a massive distributed campaign with over 800 other IP addresses spanning every corner of the internet, from Korean telecom providers to European hosting companies

DarkEsqWhere lawyers can be real people again.

AWS EC2 Brute Force Bot Goes Full Recon Mode - 100% Abuse Score! | DarkEsq