abuseip.org
- Reason
- scanning 86 domains
- Hits (last hour)
- 12,598
- Unique targets hit
- 88
- Unique paths probed
- 558
- Detection count
- 23
- First seen
- 2026-11-07 19:20:33 UTC
- Last seen
- 2026-11-07 20:19:30 UTC
- Block expires
- 2026-11-08 20:20:57 UTC
Sample paths probed
- /wp-includes/PHPMailer/about.php
- /wp-admin/includes/dropdown.php
- /wp-includes/fonts/wp-sigunq.php
- /wp-includes/images/media/shellwso.php
- /wp-includes/images/media/local1.php
- /wp-includes/sitemaps/wp-login.php
- /wp-admin/images/403.php
- /wp-admin/js/widgets/iR7SzrsOUEP.php
- /wp-admin/images/pagek.php
- /wp-admin/images/headerp.php
- /wp-includes/images/media/xwsoooo.php
- /wp-includes/widgets/about.php
- /images/65629_1.php
- /wp-includes/IXR/cong.php
- /wp-includes/images/media/xl0000.php
- /wp-includes/ID3/about.php
- /wp-includes/images/media/wp-conflg.php
- /wp-includes/ID3/x.php
- /wp-includes/class-IXR-meta.php
- /wp-admin/maint/searchformh.php
Sample User-Agents
No User-Agent recorded (likely scripted, no UA header).
What does this mean?
This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).
If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.