abuseip.org

IP 131.108.220.79 is currently blocked by the redirs.com anycast edge.

Reason: scanning 53 domains
Hits (last hour): 55
Unique targets hit: 53
Unique paths probed: 53
Detection count: 12
First seen: 2026-11-05 00:23:33 UTC
Last seen: 2026-11-05 00:24:54 UTC
Block expires: 2026-11-06 01:21:58 UTC

Sample paths probed

/14345828sm.jpg
/media/.gallery/main16.jpg
/tumblr_lzp9w8arO61qj598so1_1280.png
/game/4747/images/navigate-left.jpg
/fotogalerie/thumb/id/186393/Tag 2 - 2 - Fahrt mit dem Skytrain durch Bangkok (2).jpg
/731771-wesc-conga-blanc,Zml0LTE1MHgxNTA=.jpg
/a/1272578449/images/default_profile_6_normal.png
/content/images/thumbs/0004207_red_and_yellow_laguna_agate_70.jpeg
/cds/de/
/2148-2317-home/disfraz-payasa-lolita-bebe.jpg
/images/e/280885232186_0.jpg
/contents/media/t_hohner_meisterklasse_ms_edur_mundharmonika_.jpg
/resizer/resize.php
/1309-818-home/kaminky-sw-214-zelene-ss6-100ks.jpg
/119005/1s-Vienna-Flemings_Wien_Westbahnhof.jpg
/wp-content/uploads/2012/02/Blue-Mountain-State-Season-2-POSTER9-150x150.jpg
/the_south_china_sea_poster-r47522e22129b42fbae54d39a9f0518b9_w2u_152.jpg
/mu/chatterboxlee/logo/
/images/travianvb4/reputation/reputation_pos.png
/upload/171/2423/resize/wm_freecell_240x320_1.gif

Sample User-Agents

Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.91 Safari/537.36 OPR/55.0.2994.61
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36 OPR/54.0.2952.71
Mozilla/5.0 (X11; Linux x86_64; rv:63.0.3) Gecko/20100101 Firefox/63.0.3
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729 Safari/537.36 OPR/57.0.3098.106
Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.62 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.2.1) Gecko/20100101 Firefox/60.2.1
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.167 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.137 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.7.4) Gecko/20100101 Firefox/52.7.4
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3; rv:52.7.0) Gecko/20100101 Firefox/52.7.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2; rv:51.0) Gecko/20100101 Firefox/51.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_6; rv:53.0.2) Gecko/20100101 Firefox/53.0.2
Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729 Safari/537.36
Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.137 Safari/537.36 OPR/50.0.2762.67
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_6; rv:52.0.2) Gecko/20100101 Firefox/52.0.2
Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 OPR/56.0.3051.52

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.