abuseip.org

IP 104.28.214.116 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 4 domains
Hits (last hour): 28
Unique targets hit: 4
Unique paths probed: 42
Detection count: 111
First seen: 2026-05-01 10:46:30 UTC
Last seen: 2026-05-01 11:05:09 UTC
Block expires: 2026-05-02 11:45:25 UTC

Sample paths probed

/style.php
/chosen.php
/file.php
/class-t.api.php
/gifclass.php
//zwso.php
/abcd.php
/wp-admin/admin-ajax.php
/wp-content/themes/style.php
/wp-includes/style.php
/wp-content/style.php
/shelp.php
/wp-admin/style.php
/bless.php
/cord.php
/file2.php
/blurbs.php
/akcc.php
/flower.php
/dex.php

Sample User-Agents

Go-http-client/1.1

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.