abuseip.org

IP 18.208.128.149 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 1 domains
Hits (last hour): 156
Unique targets hit: 1
Unique paths probed: 56
Detection count: 9
First seen: 2026-09-06 08:39:31 UTC
Last seen: 2026-09-06 08:41:26 UTC
Block expires: 2026-09-07 09:36:31 UTC

Sample paths probed

/wp-content/uploads/GEO_logo.svg
/wp-content/uploads/verdi_logo.svg
/wp-content/uploads/rotary_logo.svg
/wp-content/uploads/gew_logo.svg
/wp-content/uploads/egmont_logo.svg
/wp-content/uploads/aftenposten_logo.svg
/wp-content/uploads/malteser_logo.svg
/wp-content/uploads/yesrocher_logo.svg
/wp-content/uploads/BCN_logo.svg
/wp-content/uploads/berlingske_logo.svg
/wp-content/uploads/immediate_logo.svg
/wp-content/uploads/vartland_logo.svg
/wp-content/uploads/weltbild_logo.svg
/wp-content/uploads/hamburgerAbendblatt_logo.svg
/wp-content/uploads/mediaventures_logo.svg
/wp-content/uploads/otava_logo.svg
/wp-content/uploads/oeamtc_logo.svg
/wp-content/uploads/alma-media_logo.svg
/wp-content/uploads/redactive_logo.svg
/wp-content/uploads/diepresse_logo.svg

Sample User-Agents

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.