This IP address has been reported a total of
17
times from
16 distinct
sources.
134.199.175.139 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Unwanted traffic detected by honeypot on March 09, 2026: port scans (3 port 22 scans), and brute for ...
show moreUnwanted traffic detected by honeypot on March 09, 2026: port scans (3 port 22 scans), and brute force and hacking attacks (4 over ssh).
show less
Compromised SSH service with Go-based client executing multi-credential brute force across 6 session ...
show moreCompromised SSH service with Go-based client executing multi-credential brute force across 6 sessions in 5min. Tested 4 cred pairs (root/root123, test1/test1, test2/test2, test3/test3) via automated scanning. Two attack sequences: (1) Persistence mechanism - chattr -i flag removal on .bashrc/.zshrc files to disable immutability protections, enabling subsequent shell config modifications. (2) System recon - hostname, kernel version, architecture, uptime via uname and /proc/uptime parsing. PATH variable manipulation post-exec detected. Attack pattern consistent with automated botnet recon and hardening removal prior to payload deployment or cred harvesting. No malware dl, lateral movement, or explicit persistence installs observed, but preliminary steps suggest staged attack. Go SSH client (SSH-2.0-Go) indicates botnet or scripted framework. Low-complexity brute force with weak creds suggests indiscriminate targeting.
show less
Mar 10 11:20:12 mx1 sshd[1898642]: Invalid user test1 from 134.199.175.139 port 43796
Mar 10 11:21:4 ...
show moreMar 10 11:20:12 mx1 sshd[1898642]: Invalid user test1 from 134.199.175.139 port 43796
Mar 10 11:21:45 mx1 sshd[1899423]: Invalid user test2 from 134.199.175.139 port 32946
Mar 10 11:22:54 mx1 sshd[1900100]: Invalid user test3 from 134.199.175.139 port 41864
...
show less
2026-03-09T22:21:17.624616-05:00 narcissus.teiken.net sshd-session[3198641]: Invalid user test2 from ...
show more2026-03-09T22:21:17.624616-05:00 narcissus.teiken.net sshd-session[3198641]: Invalid user test2 from 134.199.175.139 port 57300
2026-03-09T22:21:17.859570-05:00 narcissus.teiken.net sshd-session[3198641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.175.139
2026-03-09T22:21:19.324823-05:00 narcissus.teiken.net sshd-session[3198641]: Failed password for invalid user test2 from 134.199.175.139 port 57300 ssh2
2026-03-09T22:22:31.097600-05:00 narcissus.teiken.net sshd-session[3199403]: Invalid user test3 from 134.199.175.139 port 46468
2026-03-09T22:22:31.355082-05:00 narcissus.teiken.net sshd-session[3199403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.175.139
2026-03-09T22:22:33.832742-05:00 narcissus.teiken.net sshd-session[3199403]: Failed password for invalid user test3 from 134.199.175.139 port 46468 ssh2
...
show less
2026-03-10T03:20:45.512010+00:00 noha-b456b sshd[409190]: pam_unix(sshd:auth): authentication failur ...
show more2026-03-10T03:20:45.512010+00:00 noha-b456b sshd[409190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.175.139
2026-03-10T03:20:47.739868+00:00 noha-b456b sshd[409190]: Failed password for invalid user test1 from 134.199.175.139 port 36624 ssh2
2026-03-10T03:22:04.097625+00:00 noha-b456b sshd[409358]: Invalid user test2 from 134.199.175.139 port 37762
...
show less
2026-03-10T03:19:34.481184shield sshd\[30064\]: Invalid user test1 from 134.199.175.139 port 35812
2 ...
show more2026-03-10T03:19:34.481184shield sshd\[30064\]: Invalid user test1 from 134.199.175.139 port 35812
2026-03-10T03:19:34.713622shield sshd\[30064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.175.139
2026-03-10T03:19:36.524428shield sshd\[30064\]: Failed password for invalid user test1 from 134.199.175.139 port 35812 ssh2
2026-03-10T03:21:18.692559shield sshd\[30290\]: Invalid user test2 from 134.199.175.139 port 39368
2026-03-10T03:21:18.939622shield sshd\[30290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.175.139
show less