abuseip.org
- Reason
- suspicious paths across 2 domains
- Hits (last hour)
- 626
- Unique targets hit
- 933
- Unique paths probed
- 1,268
- Detection count
- 21
- First seen
- 2026-11-14 00:00:46 UTC
- Last seen
- 2026-11-14 00:36:01 UTC
- Block expires
- 2026-11-15 01:31:00 UTC
Sample paths probed
- /wp-includes/class-wp-customize-setting.php
- /wp-includes/category.php
- /wp-includes/class-wp-feed-cache-transient.php
- /wp-content/uploads/
- /wp-admin/
- /wp-includes/class-wp-http-response.php
- /wp-includes/
- /home
- /wp-includes/class-wp-walker.php
- /wp-includes/class-wp-dependency.php
- /wp-includes/theme-templates.php
- /wp-includes/class-IXR.php
- /
- /wp-includes/class-wp-theme-json-data.php
- /wp-includes/class-wp-block-type.php
- /wp-includes/class-wp-xmlrpc-server.php
- /wp-content/themes/
- /wp-includes/class-json.php
- /wp-content/plugins/
- /wp-includes/kses.php
Sample User-Agents
- WP-Safe-Scanner/2.0
What does this mean?
This address sent traffic that the redirs.com edge classified as automated abuse โ typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).
If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.