This IP address has been reported a total of
35
times from
28 distinct
sources.
13.201.66.246 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 10
reports;
United States of America
with 8
reports;
France
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
28
times;
Bad Web Bot
12
times;
Hacking
12
times;
Brute-Force
8
times;
Port Scan
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Web vulnerability scanning (1 probes), looking for WordPress components, PHP scripts and web shells
...
show moreWeb vulnerability scanning (1 probes), looking for WordPress components, PHP scripts and web shells
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36
2 HTTP requests at 2026-10-24 02:39 UTC
show less
Bad Web Bot
Web App Attack
Anonymous
Automated report (2026-10-24T10:25:46+08:00). Caught probing for webshells/backdoors. Host might be ...
show moreAutomated report (2026-10-24T10:25:46+08:00). Caught probing for webshells/backdoors. Host might be compromised.
show less
Automated scanning of our web servers. 2 HTTP request(s), 2026-10-24 00:01:22 to 00:01:23 UTC (1s).
...
show moreAutomated scanning of our web servers. 2 HTTP request(s), 2026-10-24 00:01:22 to 00:01:23 UTC (1s).
Requests (method path -> status xcount):
GET /wp-content/... -> 301
GET /wp-content/... -> 404
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36
Blocked at firewall. Blamdom auto-blocker.
show less
ketovoila.pl web app/PHP backdoor scan: hits=1; unique_paths=1; sample_paths=//wp-content/plugins/fi ...
show moreketovoila.pl web app/PHP backdoor scan: hits=1; unique_paths=1; sample_paths=//wp-content/plugins/fix/up.php; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"; window=2026-10-23T23:22:25Z..2026-10-23T23:22:25Z HTTP methods: GET (1).
show less
Triggered Cloudflare WAF (botFight) from IN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET ...
show moreTriggered Cloudflare WAF (botFight) from IN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: //wp-content/plugins/fix/up.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Web exploit attempt | method: GET | path: /wp-content/plugins/fix/up.php | ua: Mozilla/5.0 (Windows ...
show moreWeb exploit attempt | method: GET | path: /wp-content/plugins/fix/up.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36
show less
