JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.144.43.239

136.144.43.239 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 35%: ?

35%

ISP	VPN Consumer Dallas, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.144.43.239

Whois 136.144.43.239

IP Abuse Reports for 136.144.43.239:

This IP address has been reported a total of 107 times from 56 distinct sources. 136.144.43.239 was first reported on January 20th 2023, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-08-24 06:41:29 (19 hours ago)	Firewall: Within 2026-08-24 04:19:02 - 2026-08-24 07:21:19 CEST(+0200) identified: port scan from 13 ... show more Firewall: Within 2026-08-24 04:19:02 - 2026-08-24 07:21:19 CEST(+0200) identified: port scan from 136.144.43.239 on uncommon port/s: 6969(tcp:6969),8000(tcp:8000),7777(tcp:7777),5555(tcp:5555),9999(tcp:9999) (5 trials) Fail2ban: Within 2026-08-24 04:19:02 - 2026-08-24 07:21:20 CEST(+0200) banned: 11 times by fail2ban[firewall]; 11 times by fail2ban[recidive] show less	Port Scan
🇩🇪 phil2k	2026-08-24 05:21:36 (20 hours ago)	fail2ban:recidive:2026-08-24 04:19:02,200 fail2ban.actions [219426]: NOTICE [firewall] Ban 1 ... show more fail2ban:recidive:2026-08-24 04:19:02,200 fail2ban.actions [219426]: NOTICE [firewall] Ban 136.144.43.239 2026-08-24 07:21:20,322 fail2ban.actions [219426]: NOTICE [firewall] Ban 136.144.43.239 show less	DDoS Attack Port Scan Brute-Force
🇩🇪 phil2k	2026-08-24 02:19:03 (23 hours ago)	fail2ban:firewall:2026-08-24T04:19:02.026655+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-08-24T04:19:02.026655+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=136.144.43.239 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=30156 PROTO=TCP SPT=59153 DPT=6969 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-24T04:19:02.043760+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=136.144.43.239 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=26167 PROTO=TCP SPT=3768 DPT=8000 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇨🇿 plzenskypruvodce.cz	2026-08-10 21:12:59 (2 weeks ago)	2026-08-10T23:12:53.702824+02:00 web wordpress(choteborky.cz)[123787]: Authentication attempt for un ... show more 2026-08-10T23:12:53.702824+02:00 web wordpress(choteborky.cz)[123787]: Authentication attempt for unknown user Marco from 136.144.43.239 2026-08-10T23:12:56.213818+02:00 web wordpress(choteborky.cz)[123745]: Authentication attempt for unknown user [email protected] from 136.144.43.239 2026-08-10T23:12:58.618244+02:00 web wordpress(choteborky.cz)[123787]: Authentication attempt for unknown user GuaUserWa3 from 136.144.43.239 ... show less	Brute-Force
🇺🇸 Jason Howell	2026-08-04 13:51:31 (2 weeks ago)	136.144.43.239 - - [04/Aug/2026:08:40:33 -0500] "POST /wp-login.php HTTP/1.1" 503 23516 "https://lhr ... show more 136.144.43.239 - - [04/Aug/2026:08:40:33 -0500] "POST /wp-login.php HTTP/1.1" 503 23516 "https://lhrareenacting.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1" 136.144.43.239 - - [04/Aug/2026:08:43:10 -0500] "GET /wp-admin/index.php HTTP/1.1" 503 23428 "https://lhrareenacting.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.0" 136.144.43.239 - - [04/Aug/2026:08:51:29 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 4478 "https://lhrareenacting.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 136.144.43.239 - - [04/Aug/2026:08:51:30 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Flhrareenacting.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 4642 "https://lhrareenacting.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 136.144.43.239 - - [04/Aug/2026: ... show less	Web App Attack
Anonymous	2026-07-26 20:55:29 (4 weeks ago)	[Sun Jul 26 22:55:05.768178 2026] [access_compat:error] [pid 14485] [client 136.144.43.239:32325] AH ... show more [Sun Jul 26 22:55:05.768178 2026] [access_compat:error] [pid 14485] [client 136.144.43.239:32325] AH01797: client denied by server configuration: /var/www/html/ [Sun Jul 26 22:55:23.922801 2026] [access_compat:error] [pid 14372] [client 136.144.43.239:59617] AH01797: client denied by server configuration: /var/www/html/index.php [Sun Jul 26 22:55:29.010095 2026] [authz_core:error] [pid 14443] [client 136.144.43.239:57513] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇮🇳 Starburst SysOp Team	2026-07-26 20:51:24 (4 weeks ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-bom2-2)	Hacking Bad Web Bot
🇦🇹 Starburst SysOp Team	2026-07-26 20:00:24 (4 weeks ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-vie6-1)	Hacking Bad Web Bot
🇳🇱 Starburst SysOp Team	2026-07-26 18:25:45 (4 weeks ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-ams6-1)	Hacking Bad Web Bot
🇫🇷 Baking333	2026-07-26 14:52:30 (4 weeks ago)	[redacted] 136.144.43.239 - - [26/Jul/2026:15:52:28 +0100] "GET /_profiler/phpinfo HTTP/1.1" 307 396 ... show more [redacted] 136.144.43.239 - - [26/Jul/2026:15:52:28 +0100] "GET /_profiler/phpinfo HTTP/1.1" 307 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" [redacted] 136.144.43.239 - - [26/Jul/2026:15:52:29 +0100] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 307 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" show less	Bad Web Bot Web App Attack
🇫🇷 HerrWolf	2026-07-26 14:00:05 (4 weeks ago)	CrowdSec Detection: crowdsecurity/http-probing	Web App Attack
Anonymous	2026-07-24 08:29:21 (1 month ago)		DNS Compromise DDoS Attack
🇲🇾 Rizzy	2026-06-28 20:51:53 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-06-16 01:08:52 (2 months ago)	136.144.43.239 - - [16/Jun/2026:04:08:51 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 404 711 "-" ... show more 136.144.43.239 - - [16/Jun/2026:04:08:51 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 404 711 "-" "Go-http-client/1.1" 136.144.43.239 - - [16/Jun/2026:04:08:52 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 404 711 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇨🇭 backslash	2026-06-16 00:33:03 (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 62.60.130.242

🇻🇪 38.51.206.144

🇺🇸 34.58.124.191

🇺🇸 2607:f8b0:4023:1006::12b

🇱🇹 213.176.26.22

🇵🇰 202.59.12.141

🇧🇪 198.235.24.174

🇺🇸 195.184.76.229

🇺🇸 195.184.76.222

🇬🇧 195.96.139.107

🇷🇺 185.169.101.186

🇧🇷 179.35.18.132

🇬🇧 139.59.181.117

🇨🇳 123.245.84.116

🇰🇷 118.37.214.187

🇺🇸 66.132.186.241

🇻🇳 14.162.11.43

🇬🇧 2a06:4884:5000::58

🇺🇸 205.210.31.47

🇨🇰 202.65.43.226