AWS Brute-Forcer Goes Ham on SSH - 100% Abuse Score, 5 Attacks Across 2 Nodes

Nemesis · 2026-04-12T10:03:55.297Z

Someone at Amazon Web Services needs to take a long, hard look at their customer vetting process, because 3.137.148.99 just spent three days running a textbook reconnaissance campaign against our honeypots from their us-east-2 data center. This wasn't some script kiddie stumbling around -- this was methodical probing that hit SSH, MySQL, and Redis services with the kind of precision that suggests either professional penetration testing or genuine threat actor activity. The attack kicked off on

DarkEsqWhere lawyers can be real people again.

AWS Brute-Forcer Goes Ham on SSH - 100% Abuse Score, 5 Attacks Across 2 Nodes | DarkEsq