JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.236.70

173.239.236.70 was found in our database!

This IP was reported 157 times. Confidence of Abuse is 20%: ?

20%

ISP	F.N.S. HOLDINGS LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	fns-holdings.com
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.236.70

Whois 173.239.236.70

IP Abuse Reports for 173.239.236.70:

This IP address has been reported a total of 157 times from 76 distinct sources. 173.239.236.70 was first reported on August 11th 2023, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-07-01 03:11:00 (17 hours ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 173.239.236.70 162.158.88.101 - - [26/Jun/2026:10:15:5 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 173.239.236.70 162.158.88.101 - - [26/Jun/2026:10:15:57 -0300] "GET /wp-login.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-29 03:10:18 (2 days ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 173.239.236.70 162.158.88.101 - - [26/Jun/2026:10:15:5 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 173.239.236.70 162.158.88.101 - - [26/Jun/2026:10:15:57 -0300] "GET /wp-login.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-28 03:10:05 (3 days ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 173.239.236.70 162.158.88.101 - - [26/Jun/2026:10:15:5 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 173.239.236.70 162.158.88.101 - - [26/Jun/2026:10:15:57 -0300] "GET /wp-login.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-26 13:16:09 (5 days ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 173.239.236.70 162.158.88.101 - - [26/Jun/2026:10:15:5 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 173.239.236.70 162.158.88.101 - - [26/Jun/2026:10:15:57 -0300] "GET /wp-login.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇩🇪 Nevermind	2026-05-14 08:06:04 (1 month ago)	173.239.236.70 - - [14/May/2026:10:05:58 +0200] "GET /wp-admin/js/widgets/admin.php HTTP/2.0" 404 45 ... show more 173.239.236.70 - - [14/May/2026:10:05:58 +0200] "GET /wp-admin/js/widgets/admin.php HTTP/2.0" 404 456 "http://divimap.de/wp-admin/js/widgets/admin.php" "Go-http-client/2.0" 173.239.236.70 - - [14/May/2026:10:06:00 +0200] "GET /wp-includes/theme-compat/images/ HTTP/2.0" 404 456 "http://divimap.de/wp-includes/theme-compat/images/" "Go-http-client/2.0" 173.239.236.70 - - [14/May/2026:10:06:02 +0200] "GET /wp-includes/js/dist/vendor/about.php HTTP/2.0" 404 456 "http://divimap.de/wp-includes/js/dist/vendor/about.php" "Go-http-client/2.0" 173.239.236.70 - - [14/May/2026:10:06:03 +0200] "GET /wp-content/themes/twentytwentyfour/ HTTP/2.0" 404 456 "http://divimap.de/wp-content/themes/twentytwentyfour/" "Go-http-client/2.0" ... show less	Web App Attack
🇮🇳 Genhost	2026-05-08 13:25:43 (1 month ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH
🇮🇳 Genhost	2026-05-07 11:49:54 (1 month ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH
🇧🇾 lns.bz	2026-05-07 09:24:42 (1 month ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 Octopuce	2026-05-02 18:32:02 (1 month ago)	Aggressive web search of vulnerable pages: /wp-includes/ /wp-includes/customize/ /wp-includes/Simple ... show more Aggressive web search of vulnerable pages: /wp-includes/ /wp-includes/customize/ /wp-includes/SimplePie/ /wp-includes/theme-compat/ /wp-include ... show less	Web App Attack
🇪🇸 Gem	2026-05-01 22:16:30 (1 month ago)	Unauthorized web scan.	Web App Attack
🇬🇧 consul.to	2026-04-30 05:47:09 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 Smish	2026-04-29 15:09:13 (2 months ago)	HONEYPOT HIT --> Fail2ban time=1777475352 log=2026-04-29T16:09:12+01:00 ip=173.239.236.70 host=as210 ... show more HONEYPOT HIT --> Fail2ban time=1777475352 log=2026-04-29T16:09:12+01:00 ip=173.239.236.70 host=as210667.net method=GET uri="/wp-admin/includes/class-theme-installer-skin-client.php" status=404 ua="Go-http-client/1.1" ref="http://as210667.net/wp-admin/includes/class-theme-installer-skin-client.php" rid=5a7735b29fca2c1464835b7773921b0f show less	Web App Attack
Anonymous	2026-04-29 06:36:17 (2 months ago)	173.239.236.70 - - [29/Apr/2026:06:36:17 +0000] "GET /wp-admin/css/colors/PHPMailer/s HTTP/1.1" 302 ... show more 173.239.236.70 - - [29/Apr/2026:06:36:17 +0000] "GET /wp-admin/css/colors/PHPMailer/s HTTP/1.1" 302 479 "-" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-04-28 20:23:22 (2 months ago)	173.239.236.70 - - [28/Apr/2026:22:23:20 +0200] "GET /wp-includes/rest-api/config.php HTTP/1.1" 404 ... show more 173.239.236.70 - - [28/Apr/2026:22:23:20 +0200] "GET /wp-includes/rest-api/config.php HTTP/1.1" 404 241 "http://ase1980.com/wp-includes/rest-api/config.php" "Go-http-client/1.1" 173.239.236.70 - - [28/Apr/2026:22:23:20 +0200] "GET /wp-includes/rest-api/config.php HTTP/1.0" 404 453 "http://ase1980.com/wp-includes/rest-api/config.php" "Go-http-client/1.1" 173.239.236.70 - - [28/Apr/2026:22:23:21 +0200] "GET /wp-includes/pomo/config.php HTTP/1.1" 404 241 "http://ase1980.com/wp-includes/pomo/config.php" "Go-http-client/1.1" 173.239.236.70 - - [28/Apr/2026:22:23:21 +0200] "GET /wp-includes/pomo/config.php HTTP/1.0" 404 453 "http://ase1980.com/wp-includes/pomo/config.php" "Go-http-client/1.1" 173.239.236.70 - - [28/Apr/2026:22:23:21 +0200] "GET /wp-includes/sitemaps/providers/config.php HTTP/1.1" 404 241 "http://ase1980.com/wp-includes/sitemaps/providers/config.php" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-04-28 14:22:45 (2 months ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.41

🇨🇳 116.179.32.238

🇱🇹 81.30.98.142

🇺🇸 40.124.174.247

🇮🇶 93.180.217.16

🇺🇸 66.154.109.226

🇺🇸 52.167.144.198

🇨🇱 2400:cb00:1061:1024::ac40:ce3c

🇩🇪 216.26.243.61

🇲🇽 186.96.158.180

🇺🇸 104.28.158.123

🇦🇺 65.254.93.170

🇮🇶 65.20.131.63

🇮🇶 62.201.228.210

🇨🇳 42.51.41.252

🇯🇵 20.78.158.75

🇳🇱 2a0b:8bc0:2:2a50::1

🇧🇷 205.210.31.221

🇺🇸 103.143.238.100

🇺🇸 66.132.195.116