JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.144.33.243

136.144.33.243 was found in our database!

This IP was reported 268 times. Confidence of Abuse is 78%: ?

78%

ISP	VPN Consumer Los Angeles, United States
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.144.33.243

Whois 136.144.33.243

IP Abuse Reports for 136.144.33.243:

This IP address has been reported a total of 268 times from 117 distinct sources. 136.144.33.243 was first reported on April 6th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-15 20:40:29 (1 day ago)	[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 136 ... show more [ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 136.144.33.243 - - [15/Sep/2026:22:40:27 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2.0" 403 451 "http://whiskysailing.eu/wp-content/plugins/buddypress/alfa.php" "Go-http-client/2.0" ... show less	Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2026-09-15 06:18:28 (2 days ago)	GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1	Web App Attack
🇵🇱 Budyn	2026-09-13 06:36:22 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.space \| URI: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-09-12 08:49:36 (5 days ago)	Scanning for web/db/file exploits on www.tuinmani.nl	SQL Injection Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-09-04 18:58:03 (1 week ago)	Wordfence waf block on secure ncrsol	Web App Attack
🇳🇱 Site.eu	2026-09-04 18:04:08 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 Kenshin869	2026-09-04 14:18:52 (1 week ago)	Wordpress unauthorized access attempt	Brute-Force
🇫🇷 dynamix	2026-09-04 12:43:50 (1 week ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇫🇷 dynamix	2026-09-03 10:02:41 (2 weeks ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-09-03 07:56:54 (2 weeks ago)	Failed Wordpress Logins	Web App Attack
🇬🇧 adnscom.net	2026-09-02 16:26:04 (2 weeks ago)	IPS trigger: Brute force WebApp/CMS scanning/attack	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-08-28 05:41:12 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇧🇪 taivas.nl	2026-08-27 09:32:09 (3 weeks ago)	Bad_requests	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-27 09:18:00 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 136.144.33.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 136.144.33.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 05:17:56.927484 2026] [security2:error] [pid 27367:tid 27367] [client 136.144.33.243:41345] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|arsenalfordemocracy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apAAxLty05xyJxHUbtKD8wAAAAo"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 05:04:05 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 136.144.33.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 136.144.33.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 01:04:00.148558 2026] [security2:error] [pid 13630:tid 13630] [client 136.144.33.243:27911] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|andiamocomputers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "andiamocomputers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao_FQLLm904bgt572t9-xgAAAA0"], referer: https://www.google.com/search?q=wordpress show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.170

🇺🇸 162.216.149.172

🇨🇳 123.53.113.203

🇯🇵 52.103.66.50

🇩🇪 47.245.138.78

🇨🇷 179.48.251.182

🇺🇸 162.216.150.23

🇺🇸 162.216.149.132

🇮🇩 103.139.126.5

🇯🇵 52.103.66.49

🇯🇵 52.103.66.48

🇻🇳 42.1.65.79

🇳🇱 20.73.199.251

🇩🇪 2a00:1450:4001:c17::66

🇺🇸 207.45.26.29

🇧🇷 190.115.84.25

🇺🇸 154.17.138.48

🇻🇳 112.197.2.116

🇧🇬 109.160.32.16

🇸🇮 102.220.161.86