JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.110.69.13

5.110.69.13 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Etihad Etisalat, a joint stock company
Usage Type	Mobile ISP
ASN	AS35819
Domain Name	mobily.com.sa
Country	🇸🇦 Saudi Arabia
City	Jeddah, Mecca Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.110.69.13

Whois 5.110.69.13

IP Abuse Reports for 5.110.69.13:

This IP address has been reported a total of 53 times from 48 distinct sources. 5.110.69.13 was first reported on October 20th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 holos.pt	2026-10-22 15:00:04 (9 hours ago)	Blocked for Readme.txt and debug.log scans in query string: /wp-content/plugins/pods/readme.txt	Web App Attack
🇺🇸 robotstxt	2026-10-22 14:56:29 (9 hours ago)	5.110.69.13 - - [22/Oct/2026:14:55:51 +0000] "GET /wp-content/plugins/translatepress-multilingual/re ... show more 5.110.69.13 - - [22/Oct/2026:14:55:51 +0000] "GET /wp-content/plugins/translatepress-multilingual/readme.txt HTTP/2.0" 403 36888 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "5.110.69.13" edge="172.70.108.137" 5.110.69.13 - - [22/Oct/2026:14:55:51 +0000] "GET /wp-content/plugins/give/readme.txt HTTP/2.0" 403 36888 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "5.110.69.13" edge="172.70.108.136" 5.110.69.13 - - [22/Oct/2026:14:55:51 +0000] "GET /wp-content/plugins/user-registration/readme.txt HTTP/2.0" 403 36917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "5.110.69.13" edge="172.70.108.137" 5.110.69.13 - - [22/Oct/2026:14:55:51 +0000] "GET /wp-content/plugins/pods/readme.txt HTTP/2.0" 403 36888 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Web App Attack
🇩🇪 ardexter	2026-10-22 13:21:47 (11 hours ago)	Wordpress attack and DDOS	DDoS Attack Web App Attack
Anonymous	2026-10-22 12:34:21 (12 hours ago)	5.110.69.13 - - [22/Oct/2026:14:34:08 +0200] "GET /wp-content/plugins/profile-builder/readme.txt HTT ... show more 5.110.69.13 - - [22/Oct/2026:14:34:08 +0200] "GET /wp-content/plugins/profile-builder/readme.txt HTTP/1.1" 404 36535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 5.110.69.13 - - [22/Oct/2026:14:34:08 +0200] "GET /wp-content/plugins/broken-link-checker/readme.txt HTTP/1.1" 404 36534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 5.110.69.13 - - [22/Oct/2026:14:34:08 +0200] "GET /wp-content/plugins/give/readme.txt HTTP/1.1" 404 36534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 5.110.69.13 - - [22/Oct/2026:14:34:08 +0200] "GET /wp-content/plugins/translatepress-multilingual/readme.txt HTTP/1.1" 404 36531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 5.110.69.13 - - [22/Oct/2026:14:34:09 +0200] "GET /wp-c ... show less	Web Spam Web App Attack
🇺🇸 Agaman	2026-10-22 12:28:49 (12 hours ago)	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-22 12:28 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-22 12:28 UTC. Samples: GET /wp-content/plugins/broken-link-checker/readme.txt 444; GET /wp-content/plugins/give/readme.txt 444; GET /wp-content/plugins/profile-builder/readme.txt 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban. show less	Web App Attack
🇵🇱 nfsec.pl	2026-10-22 12:27:53 (12 hours ago)	5.110.69.13 - - [22/Oct/2026:12:27:42 +0000] "GET /wp-includes/css/modules.php HTTP/1.1" 404 30654 " ... show more 5.110.69.13 - - [22/Oct/2026:12:27:42 +0000] "GET /wp-includes/css/modules.php HTTP/1.1" 404 30654 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:12:27:44 +0000] "GET /wso.php HTTP/1.1" 404 30883 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:12:27:47 +0000] "GET /wp-content/plugins/upspy/ HTTP/1.1" 404 26540 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:12:27:50 +0000] "GET /wp-content/plugins/ubh/ HTTP/1.1" 404 26405 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:12:27:53 +0000] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 404 30477 "-" "python-requests/2.27.1" ... show less	Web App Attack Exploited Host
🇹🇭 thaizone.com	2026-10-22 08:09:16 (16 hours ago)	Brute Force Attack on a Web Resources #1	DDoS Attack Web Spam Brute-Force Web App Attack
🇮🇹 VHosting	2026-10-22 08:00:05 (16 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
Anonymous	2026-10-22 07:51:12 (16 hours ago)	Bot / seems abusive / Apache connections: 27	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2026-10-22 04:48:50 (19 hours ago)	Honeypot: http-public probing for vulnerable paths /	Web App Attack
🇬🇧 consul.to	2026-10-22 03:51:12 (20 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇵🇱 lns.bz	2026-10-22 02:07:41 (22 hours ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇬🇧 www.elivecd.org	2026-10-22 00:57:38 (23 hours ago)	5.110.69.13 - - [22/Oct/2026:01:56:19 +0100] "GET /wp-includes/css/modules.php HTTP/1.1" 301 162 "-" ... show more 5.110.69.13 - - [22/Oct/2026:01:56:19 +0100] "GET /wp-includes/css/modules.php HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:01:56:37 +0100] "GET /wso.php HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:01:56:43 +0100] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:01:56:51 +0100] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:01:56:56 +0100] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:01:57:05 +0100] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:01:57:33 +0100] "GET /wp-admin/shapes.php HTTP/1.1" 301 162 "-" "python-requests/2.27.1" 5.110.69.13 - - [22/Oct/2026:01:57:38 +0100] "GET /olux.php HTTP/1.1" 301 162 "-" "python-requests/2.27. ... show less	DDoS Attack
🇩🇰 donkzquixote	2026-10-22 00:07:06 (1 day ago)	Scan for exploitable WordPress files/information, or other brute force attempts.	Web App Attack
🇺🇸 mnsf	2026-10-22 00:06:08 (1 day ago)	Scanning/Probing (36)	Brute-Force Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 193.183.0.166

🇺🇸 192.129.243.19

🇸🇬 178.128.115.50

🇹🇼 45.43.37.254

🇱🇰 220.247.224.226

🇭🇹 200.113.214.18

🇺🇸 195.184.76.244

🇳🇱 191.217.250.16

🇺🇸 185.180.141.37

🇳🇴 185.12.59.118

🇰🇷 169.211.232.182

🇺🇸 162.215.223.91

🇨🇳 120.233.109.122

🇨🇳 120.46.24.167

🇮🇩 103.46.186.148

🇳🇱 91.195.201.52

🇫🇷 85.217.140.34

🇺🇸 84.32.222.244

🇧🇬 79.124.60.218

🇬🇧 77.67.26.92