abuseip.org
- Reason
- scanning 20 domains
- Hits (last hour)
- 370
- Unique targets hit
- 20
- Unique paths probed
- 42
- Detection count
- 11
- First seen
- 2026-10-29 04:18:42 UTC
- Last seen
- 2026-10-29 04:38:04 UTC
- Block expires
- 2026-10-30 05:18:31 UTC
Sample paths probed
- /media/com_sppagebuilder/
- /wp-content/plugins/everest-forms/readme.txt
- /modules/mod_icagenda_calendar/
- /index.php?option=com_sppagebuilder&task=ajax&method=get&format=json&addon=..%2F..%2F..%2Fw2ac6e7
- /component/users/?view=login&srpmark=MARK4E64EF
- /components/com_jctables/
- /index.php?option=com_users&view=login&srpmark=MARK4E64EF
- /index.php?option=com_finder&view=search&srpmark=MARK4E64EF
- /components/com_sppagebuilder/
- /wp-content/plugins/elementor-pro/readme.txt
- /index.php?option=com_search&view=search&searchword=MARK4E64EF
- /wp-content/plugins/divi-form-builder/changelog.txt
- /wp-content/plugins/ultimate-member/readme.txt
- /wp-content/plugins/profile-builder/readme.txt
- /wp-content/plugins/translatepress-multilingual/readme.txt
- /wp-content/plugins/the-grid/langs/tg-text-domain.pot
- /wp-content/plugins/give/readme.txt
- /wp-content/plugins/broken-link-checker/readme.txt
- /
- /index.php?option=com_finder&view=search&q=MARK4E64EF
Sample User-Agents
- Mozilla/5.0 (X11; Linux x86_64) Joomla-CVE-2026-73373-PoC/1.0.0
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
What does this mean?
This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).
If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.