JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.236.121

173.239.236.121 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 25%: ?

25%

ISP	F.N.S. HOLDINGS LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	fns-holdings.com
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.236.121

Whois 173.239.236.121

IP Abuse Reports for 173.239.236.121:

This IP address has been reported a total of 109 times from 49 distinct sources. 173.239.236.121 was first reported on October 19th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 RasyiidWho	2026-07-07 01:08:43 (16 hours ago)	ip112.20 . 173.239.236.121 - - [07/Jul/2026:08:08:42 +0700] "GET /wp-login.php HTTP/1.1" 404 146 "-" ... show more ip112.20 . 173.239.236.121 - - [07/Jul/2026:08:08:42 +0700] "GET /wp-login.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0" ... show less	DDoS Attack Brute-Force Port Scan Bad Web Bot Web App Attack SSH
🇩🇪 MusicLibrary	2026-07-05 13:41:12 (2 days ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇩🇪 Nevermind	2026-05-14 08:30:00 (1 month ago)	173.239.236.121 - - [14/May/2026:10:29:55 +0200] "GET /wp-includes/Requests/src/Response/ HTTP/2.0" ... show more 173.239.236.121 - - [14/May/2026:10:29:55 +0200] "GET /wp-includes/Requests/src/Response/ HTTP/2.0" 404 456 "http://divimap.de/wp-includes/Requests/src/Response/" "Go-http-client/2.0" 173.239.236.121 - - [14/May/2026:10:29:57 +0200] "GET /wp-includes/block-supports/wp-sing.php HTTP/2.0" 404 456 "http://divimap.de/wp-includes/block-supports/wp-sing.php" "Go-http-client/2.0" 173.239.236.121 - - [14/May/2026:10:29:58 +0200] "GET /wp-includes/blocks/button/ HTTP/2.0" 404 456 "http://divimap.de/wp-includes/blocks/button/" "Go-http-client/2.0" 173.239.236.121 - - [14/May/2026:10:29:59 +0200] "GET /wp-includes/blocks/media-text/ HTTP/2.0" 404 456 "http://divimap.de/wp-includes/blocks/media-text/" "Go-http-client/2.0" ... show less	Web App Attack
🇳🇱 Site.eu	2026-05-10 10:19:30 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇮🇳 Genhost	2026-05-09 09:49:39 (1 month ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-08 17:15:52 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 173.239.236.121 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 173.239.236.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 13:15:48.042412 2026] [security2:error] [pid 30531:tid 30553] [client 173.239.236.121:45121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.saemed.com"] [uri "/wp-config.php"] [unique_id "af4aRDQupfc3YornkzjXIQAAANI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 07:22:32 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 173.239.236.121 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 173.239.236.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 03:22:21.209163 2026] [security2:error] [pid 14628:tid 14628] [client 173.239.236.121:23513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.robertmcatee.com"] [uri "/wp-content/wp-config.php"] [unique_id "af2PLSLBxYlOWhjlxQFkEgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 Genhost	2026-05-07 12:19:11 (2 months ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH
🇧🇾 lns.bz	2026-05-07 09:29:06 (2 months ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 Octopuce	2026-05-02 18:31:32 (2 months ago)	Aggressive web search of vulnerable pages: /function/function.php /wp-includes/SimplePie/index.php / ... show more Aggressive web search of vulnerable pages: /function/function.php /wp-includes/SimplePie/index.php /wp-admin/images/admin.php /wp-includes/them ... show less	Web App Attack
🇬🇧 Smish	2026-04-29 15:03:37 (2 months ago)	HONEYPOT HIT --> Fail2ban time=1777475016 log=2026-04-29T16:03:36+01:00 ip=173.239.236.121 host=as21 ... show more HONEYPOT HIT --> Fail2ban time=1777475016 log=2026-04-29T16:03:36+01:00 ip=173.239.236.121 host=as210667.net method=GET uri="/wp-admin/css/" status=404 ua="Go-http-client/1.1" ref="http://as210667.net/wp-admin/css/" rid=221f74a45589b5bde65ecf0e648b54eb show less	Web App Attack
Anonymous	2026-04-29 06:35:52 (2 months ago)	173.239.236.121 - - [29/Apr/2026:06:35:51 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 34290 "htt ... show more 173.239.236.121 - - [29/Apr/2026:06:35:51 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 34290 "http://ashbee.buzz/wp-content/admin.php" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-04-28 20:19:55 (2 months ago)	173.239.236.121 - - [28/Apr/2026:22:19:52 +0200] "GET /wp-includes/pomo/ HTTP/1.1" 404 241 "http://a ... show more 173.239.236.121 - - [28/Apr/2026:22:19:52 +0200] "GET /wp-includes/pomo/ HTTP/1.1" 404 241 "http://ase1980.com/wp-includes/pomo/" "Go-http-client/1.1" 173.239.236.121 - - [28/Apr/2026:22:19:52 +0200] "GET /wp-includes/pomo/ HTTP/1.0" 404 453 "http://ase1980.com/wp-includes/pomo/" "Go-http-client/1.1" 173.239.236.121 - - [28/Apr/2026:22:19:53 +0200] "GET /wp-includes/PHPMailer/widgets/ HTTP/1.1" 404 241 "http://ase1980.com/wp-includes/PHPMailer/widgets/" "Go-http-client/1.1" 173.239.236.121 - - [28/Apr/2026:22:19:53 +0200] "GET /wp-includes/PHPMailer/widgets/ HTTP/1.0" 404 453 "http://ase1980.com/wp-includes/PHPMailer/widgets/" "Go-http-client/1.1" 173.239.236.121 - - [28/Apr/2026:22:19:54 +0200] "GET /wp-includes/IXR/ HTTP/1.1" 404 241 "http://ase1980.com/wp-includes/IXR/" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇩🇪 Nightreaver	2026-04-28 13:41:38 (2 months ago)	173.239.236.121 - - [28/Apr/2026:15:41:37 0200] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" ... show more 173.239.236.121 - - [28/Apr/2026:15:41:37 0200] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 404 436 "-" "Go-http-client/1.1" 173.239.236.121 - - [28/Apr/2026:15:41:37 0200] "GET /wp-includes/js/thickbox/logs1.php HTTP/1.1" 404 436 "-" "Go-http-client/1.1" 173.239.236.121 - - [28/Apr/2026:15:41:37 0200] "GET /wp-includes/css/admin.php HTTP/1.1" 404 436 "-" "Go-http-client/1.1" 173.239.236.121 - - [28/Apr/2026:15:41:38 0200] "GET /wp-admin/xy.php HTTP/1.1" 404 436 "-" "Go-http-client/1.1" 173.239.236.121 - - [28/Apr/2026:15:41:38 0200] "GET /wp-includes/xy.php HTTP/1.1" 404 436 "-" "Go-http-client/1.1"[...] show less	Bad Web Bot Web App Attack
🇺🇸 factor1	2026-04-28 10:25:52 (2 months ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.122

🇰🇷 210.90.155.178

🇳🇱 195.78.54.200

🇷🇺 194.85.235.99

🇧🇷 177.10.203.106

🇺🇸 172.217.107.27

🇺🇸 159.183.109.170

🇰🇷 121.173.173.48

🇳🇬 102.88.137.80

🇦🇪 91.75.131.57

🇫🇷 85.217.140.42

🇳🇱 81.19.216.72

🇳🇱 45.148.10.26

🇺🇸 142.147.168.98

🇭🇰 119.8.29.62

🇨🇦 85.217.149.66

🇷🇴 82.76.159.180

🇧🇷 20.226.121.208

🇺🇸 20.88.55.220

🇺🇸 2601:805:600:249:9893:5052:cd44:a93c