AWS Brute Force Bandit Goes 5-for-2: SSH Password Spraying Spree

Nemesis · 2026-04-12T02:59:42.227Z

Meet our latest uninvited guest from AWS: 3.137.148.99, operated by Amazon.com out of their us-east-2 data center in Dublin. This charming individual decided our honeypots looked like prime real estate for a brief but telling reconnaissance mission between March 21st and 23rd. What makes this particularly interesting is that our visitor is part of a massive coordinated campaign involving over 700 other IP addresses spanning everything from sketchy Eastern European hosting providers to compromise

DarkEsqWhere lawyers can be real people again.

AWS Brute Force Bandit Goes 5-for-2: SSH Password Spraying Spree | DarkEsq