251-amazon-hosted-ips-used-in-exploit-scan-targeting-coldfusion,-struts,-and-elasticsearch

Cybersecurity investigators have revealed information about a synchronized cloud-oriented scanning operation that aimed at 75 unique “exposure points” earlier this month.
The operation, detected by GreyNoise on May 8, 2025, involved up to 251 nefarious IP addresses, all located in Japan and operated by Amazon.
“These IPs activated 75 unique actions, encompassing CVE exploits,


Leave a Reply

Your email address will not be published. Required fields are marked *

Share This