abuseip.org

IP 158.158.43.25 is currently blocked by the redirs.com anycast edge.

Reason: scanning 25 domains
Hits (last hour): 864
Unique targets hit: 31
Unique paths probed: 162
Detection count: 26
First seen: 2026-06-26 08:00:50 UTC
Last seen: 2026-06-26 09:18:23 UTC
Block expires: 2026-06-27 09:18:49 UTC

Sample paths probed

/tires.php
/class-wp-pagebuilders-BDsjLk.php
/wpputty.php
/fone1.php
/w-1.php
/gool.php
/xminie.php
/sx_pms.php
/iiiihjwn.php
/wp-content/plugins/hellopress/wp_filemanager.php
/x402.php
/public/css.php
/date-object.php
/wp-test.php
/wp-link-spm.php
/dodo.php
/wp-post-data.php
/cu.php
/wp-link-snpm.php
/ws81.php

Sample User-Agents

No User-Agent recorded (likely scripted, no UA header).

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.