134.122.136[.]96IP address
Reported by 1 independent source · first reported by GreyNoise · last reported
Last reported 9 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
The Ransomware Ground Game: How A Christmas Scanning Campaign Will Fuel 2026 Attacks“134.122.136[.]96”
-
Threat Actors Actively Targeting LLMs“134.122.136.119, 134.122.136[.]96 (AS152194, Japan)”
Indicators reported together
named in the same reports- oast[.]livein 2 reports
- oast[.]mein 2 reports
- oast[.]onlinein 2 reports
- oast[.]proin 2 reports
- oast[.]funin 2 reports
- oast[.]sitein 2 reports
- 134.122.136[.]119in 2 reports
- 45.88.186[.]70in 1 report
- 204.76.203[.]125in 1 report
- oast[.]todayin 1 report
- 112.134.208[.]214in 1 report
- 146.70.124[.]188in 1 report
- 146.70.124[.]165in 1 report
Copy these 13 indicators · defanged
Also named with it: CVE-2025-55182, CVE-2023-1389
Thanks — we review every report.