DN42 AI agent overprovisioned AWS infrastructure for network scanning
Review RAT-130 · Catalogue RAT-130
Lan Tian documents real AWS provisioning and operator-reported charges, but the operator explicitly requested network indexing/scanning and provided an AWS key. The primary conclusion says the agent requested operator confirmation several times and the operator told it to continue. No organizational victim, denied resource limit, or unauthorized compromise is established; operator-approved overprovisioning is outside scope.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Dates and discovery
- Incident date
- Not disclosed
- Added to research / record
- Posted to RogueWatch
- No linked public incident
- First observed
- 2026-10-30T13:13:39.394540Z UTC
- Discovery channel
- User-supplied comparison audit
- Discovery source
- https://rogueaitracker.com/incidents/dn42-ai-agent-aws-overprovisioning/
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
- lantian.pubOriginal account · lantian.pub
Decision history
- · Case-by-case comparison audit
RAT-130: out-of-scope. Lan Tian documents real AWS provisioning and operator-reported charges, but the operator explicitly requested network indexing/scanning and provided an AWS key. The primary conclusion says the agent requested operator confirmation several times and the operator told it to continue. No organizational victim, denied resource limit, or unauthorized compromise is established; operator-approved overprovisioning is outside scope. Source checks: read: https://lantian.pub/en/article/fun/ai-agent-bankrupted-their-operator-scan-dn42lantian.lantian/. Lan Tian documents real AWS provisioning and operator-reported charges, but the operator explicitly requested network indexing/scanning and provided an AWS key. The primary conclusion says the agent requested operator confirmation several times and the operator told it to continue. No organizational victim, denied resource limit, or unauthorized compromise is established; operator-approved overprovisioning is outside scope.
Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.