This IP address has been reported a total of
29
times from
23 distinct
sources.
136.119.129.243 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH/web brute-force & exploit scanning against lumerux.com (automated report).
Brute-Force
SSH
Anonymous
Aug 27 22:33:43 mail2 Nextcloud[25903]: {"reqId":"apCfJw9_eUhFY5W2QEdSRwAAABY","level":1,"time":"202 ...
show moreAug 27 22:33:43 mail2 Nextcloud[25903]: {"reqId":"apCfJw9_eUhFY5W2QEdSRwAAABY","level":1,"time":"2026-08-27T20:33:43+00:00","remoteAddr":"136.119.129.243","user":"--","app":"core","method":"GET","url":"/.env.save","scriptName":"/index.php","message":"Trusted domain error. \"136.119.129.243\" tried to access using \"mail2.akcurate.de\" as host.","userAgent":"crusader-worker/1.0","version":"32.0.9.2","data":{"app":"core"}}
Aug 27 22:33:43 mail2 Nextcloud[22823]: {"reqId":"apCfJxOtBGJ1E4QMlHxehwAAAQ4","level":1,"time":"2026-08-27T20:33:43+00:00","remoteAddr":"136.119.129.243","user":"--","app":"core","method":"GET","url":"/.env.production","scriptName":"/index.php","message":"Trusted domain error. \"136.119.129.243\" tried to access using \"mail2.akcurate.de\" as host.","userAgent":"crusader-worker/1.0","version":"32.0.9.2","data":{"app":"core"}}
Aug 27 22:33:43 mail2 Nextcloud[22819]: {"reqId":"apCfJxOtBGJ1E4QMlHxehAAAAQ8","level":1,"time":"2026-08-27T20:33:43+00:00","remoteAddr":"136.11
...
show less
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ...
show moreWeb application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received).
show less
[ThuAug2721:21:25.0378642026][security2:error][pid2206672:tid2207222][client136.119.129.243:0]ModSec ...
show more[ThuAug2721:21:25.0378642026][security2:error][pid2206672:tid2207222][client136.119.129.243:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.ch-garantie.ch.81-17-25-250.cpanel.site\"][uri\"/.env.bak\"][unique_id\"apCONa26xAAWPgOk-6nqMgAAAMA\"]
show less
[ThuAug2717:42:17.8054902026][security2:error][pid1383919:tid1384029][client136.119.129.243:0]ModSec ...
show more[ThuAug2717:42:17.8054902026][security2:error][pid1383919:tid1384029][client136.119.129.243:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".backup\"][severity\"ERROR\"][hostname\"www.balso.autoeuro.lv\"][uri\"/.env.backup\"][unique_id\"apBa2dWPf92Y7qIG0HHTUQAAANA\"]
show less