abuseip.org
- Reason
- suspicious paths across 1 domains
- Hits (last hour)
- 46
- Unique targets hit
- 1
- Unique paths probed
- 3,006
- Detection count
- 17
- First seen
- 2026-07-22 21:08:18 UTC
- Last seen
- 2026-07-22 21:42:39 UTC
- Block expires
- 2026-07-23 22:35:43 UTC
Sample paths probed
- /api/data/secret%2eenv
- /checkout/paypal%2eenv
- /config/tmp/db%2eenv
- /deploy/config%2eyaml
- /food-app/frontend/%2eenv
- /%2edocker/config%2ejson
- /app/phpinfo%2ephp
- /admin/backup/users%2eenv
- /config/php/settings%2eyaml
- /kafka/%2eenv
- /%2evscode/settings%2ejson
- /var/backups/
- /default/%2eenv%2edist
- /gateway/%2eenv%2estaging%2elocal
- /etc/info%2ephp
- /remote/info%2ephp
- /devops/server%2epem
- /linkedin/%2eenv
- /sms-service/%2eenv%2eprod
- /api/tmp/settings%2eenv
Sample User-Agents
- curl/8.7.1
What does this mean?
This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).
If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.