JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.236.149

173.239.236.149 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 27%: ?

27%

ISP	F.N.S. HOLDINGS LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	fns-holdings.com
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.236.149

Whois 173.239.236.149

IP Abuse Reports for 173.239.236.149:

This IP address has been reported a total of 102 times from 48 distinct sources. 173.239.236.149 was first reported on October 19th 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 joharikop	2026-07-07 08:52:34 (23 hours ago)	Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes ... show more Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes jail. show less	Web App Attack
🇨🇿 ddw	2026-07-06 23:43:39 (1 day ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-03 14:21:20 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Nevermind	2026-05-14 07:57:45 (1 month ago)	173.239.236.149 - - [14/May/2026:09:57:40 +0200] "GET /wp-includes/theme-compat/ HTTP/2.0" 404 456 " ... show more 173.239.236.149 - - [14/May/2026:09:57:40 +0200] "GET /wp-includes/theme-compat/ HTTP/2.0" 404 456 "http://divimap.de/wp-includes/theme-compat/" "Go-http-client/2.0" 173.239.236.149 - - [14/May/2026:09:57:42 +0200] "GET /wp-content/themes/ HTTP/2.0" 404 456 "http://divimap.de/wp-content/themes/" "Go-http-client/2.0" 173.239.236.149 - - [14/May/2026:09:57:43 +0200] "GET /edit.php HTTP/2.0" 404 456 "http://divimap.de/edit.php" "Go-http-client/2.0" 173.239.236.149 - - [14/May/2026:09:57:45 +0200] "GET /wp-admin.php HTTP/2.0" 404 456 "http://divimap.de/wp-admin.php" "Go-http-client/2.0" ... show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-13 22:03:48 (1 month ago)	Auto-ban: >3000 req/min op 2026-05-13	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-05-08 21:48:44 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 173.239.236.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 173.239.236.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 17:48:37.703131 2026] [security2:error] [pid 7180:tid 7180] [client 173.239.236.149:25751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sandpointidaho.com"] [uri "/wp-config.php"] [unique_id "af5aNSv-qDXoqs7GGzST3wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 Genhost	2026-05-08 13:26:26 (1 month ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH
🇫🇷 IRISIO	2026-05-06 14:30:21 (2 months ago)	scans/SQL injection/spam posts : 18 queries	Web App Attack SQL Injection
🇫🇷 Octopuce	2026-05-02 18:31:36 (2 months ago)	Aggressive web search of vulnerable pages: /file.php /wp-includes/js/index.php /wp-content/upgrade/i ... show more Aggressive web search of vulnerable pages: /file.php /wp-includes/js/index.php /wp-content/upgrade/item.php /buy.php /wp-content/languages/wp-c ... show less	Web App Attack
🇱🇹 NotACaptcha	2026-04-29 17:24:52 (2 months ago)	webserver:80 [29/Apr/2026] "GET /wp-content/plugins/forminator/library/field-autofill-providers/con ... show more webserver:80 [29/Apr/2026] "GET /wp-content/plugins/forminator/library/field-autofill-providers/contracts/wp-login.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [29/Apr/2026] "GET /wp-content/plugins/elementor-pro/modules/loop-filter/data/endpoints/about.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [29/Apr/2026] "GET /wp-content/plugins/cielhpn/ HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [29/Apr/2026] "GET /wp-content/plugins/wp-config-backup.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [29/Apr/2026] "GET /wp-content/wp-content/plugins/wp-config-backup.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [29/Apr/2026] "GET /wp-content/plugins/wpforms-lite/assets/css/frontend/modern/system_core.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [29/Apr/2026] "GET /wp-content/plugins/system_core.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [29/Apr/2026] "GET /wp-content/plugins/elementor/asset... show less	Web App Attack
🇬🇧 Smish	2026-04-29 15:06:59 (2 months ago)	HONEYPOT HIT --> Fail2ban time=1777475217 log=2026-04-29T16:06:57+01:00 ip=173.239.236.149 host=as21 ... show more HONEYPOT HIT --> Fail2ban time=1777475217 log=2026-04-29T16:06:57+01:00 ip=173.239.236.149 host=as210667.net method=GET uri="/wp-admin/config.php" status=404 ua="Go-http-client/1.1" ref="http://as210667.net/wp-admin/config.php" rid=bcefad8361d5031148075b740b0eb96d show less	Web App Attack
Anonymous	2026-04-29 06:36:58 (2 months ago)	173.239.236.149 - - [29/Apr/2026:06:36:57 +0000] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_j ... show more 173.239.236.149 - - [29/Apr/2026:06:36:57 +0000] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 302 521 "-" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-04-28 20:17:27 (2 months ago)	173.239.236.149 - - [28/Apr/2026:22:17:25 +0200] "GET /wp-includes/blocks/footnotes/ HTTP/1.1" 404 2 ... show more 173.239.236.149 - - [28/Apr/2026:22:17:25 +0200] "GET /wp-includes/blocks/footnotes/ HTTP/1.1" 404 241 "http://ase1980.com/wp-includes/blocks/footnotes/" "Go-http-client/1.1" 173.239.236.149 - - [28/Apr/2026:22:17:25 +0200] "GET /wp-includes/blocks/footnotes/ HTTP/1.0" 404 453 "http://ase1980.com/wp-includes/blocks/footnotes/" "Go-http-client/1.1" 173.239.236.149 - - [28/Apr/2026:22:17:26 +0200] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 404 241 "http://ase1980.com/wp-content/themes/theme-check/main.php" "Go-http-client/1.1" 173.239.236.149 - - [28/Apr/2026:22:17:26 +0200] "GET /wp-content/themes/theme-check/main.php HTTP/1.0" 404 453 "http://ase1980.com/wp-content/themes/theme-check/main.php" "Go-http-client/1.1" 173.239.236.149 - - [28/Apr/2026:22:17:27 +0200] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 404 241 "http://ase1980.com/wp-includes/sodium_compat/lib/" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-04-28 14:46:53 (2 months ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 factor1	2026-04-28 10:17:15 (2 months ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.227

🇺🇸 162.216.149.135

🇸🇬 143.198.208.150

🇸🇦 37.126.206.182

🇨🇳 36.151.68.6

🇪🇸 2.143.101.72

🇺🇸 2604:a940:301:225:0:16::

🇰🇷 222.110.147.58

🇩🇪 213.209.159.226

🇬🇧 193.32.209.247

🇨🇳 180.140.118.105

🇧🇷 177.152.27.237

🇺🇸 162.216.150.90

🇵🇰 162.4.33.64

🇮🇩 157.10.252.119

🇮🇩 103.17.143.18

🇲🇦 102.97.55.94

🇨🇴 181.79.86.173

🇵🇱 166.88.69.229

🇺🇸 140.99.190.187