abuseip.org

IP 152.32.189.134 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 3 domains
Hits (last hour): 66
Unique targets hit: 9
Unique paths probed: 355
Detection count: 11
First seen: 2026-08-31 15:49:16 UTC
Last seen: 2026-08-31 15:52:58 UTC
Block expires: 2026-09-01 16:46:41 UTC

Sample paths probed

/360.html
/land.html
/site/info
/platform
/js/app.js
/ay-1.html
/css/skin/ymPrompt.css
/join_room
/home.json
/op999.js
/js/xz.js
/index/aurl
/getLocale
/mobile/
/index.html
/api/init
/api.php/
/style.css
/config.js
/js/home.js

Sample User-Agents

Mozilla/5.0 (Linux; Android 12; SM-G900F; Build/SD1A.250606.184) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.28 Mobile Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/109.0 Mobile/15E148 Safari/605.1.15
Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_3 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/116.0.5845.206 Mobile/15E148 Safari/537.36
Mozilla/5.0 (Linux; Android 9; CC11; Build/PQ3B.220303.228) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.240 Mobile Safari/537.36
curl/7.4.0
Mozilla/5.0 (iPhone; CPU iPhone OS 18_2 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/103.0.5060.78 Mobile/15E148 Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/101.0.4951.85 Mobile/15E148 Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 15_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/115.1 Mobile/15E148 Safari/605.1.15
Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/123.0.6312.66 Mobile/15E148 Safari/537.36
Mozilla/5.0 (Linux; Android 15; Pixel 4; Build/AP4A.230406.127) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.9 Mobile Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
Dart/3.5
Mozilla/5.0 (Linux; Android 13; Pixel 7; Build/TQ1A.240505.30) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.5563.118 Mobile Safari/537.36
Mozilla/5.0 (Linux; Android 11; SM-G920AZ; Build/RQ3A.250517.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.223 Mobile Safari/537.36
Mozilla/5.0 (Linux; Android 11; SM-G9250; Build/RQ3A.250517.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.85 Mobile Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/125.0 Mobile/15E148 Safari/605.1.15
Mozilla/5.0 (Linux; Android 11; CPH2211GDPR; Build/RQ1C.230428.198) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.215 Mobile Safari/537.36
okhttp/3.14.9
Mozilla/5.0 (Linux; Android 11; SM-G975XN; Build/RQ1D.211028.249) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.5481.122 Mobile Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 14_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/605.1.15

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.