abuseip.org

IP 20.196.209.159 is currently blocked by the redirs.com anycast edge.

Reason: scanning 52 domains
Hits (last hour): 4,304
Unique targets hit: 55
Unique paths probed: 142
Detection count: 20
First seen: 2026-07-15 16:17:31 UTC
Last seen: 2026-07-15 17:20:09 UTC
Block expires: 2026-07-16 17:20:30 UTC

Sample paths probed

/pass4.php
/333.php
/this_is_a_new_hello_world.php
/wp-the.php
/file.php
/wp5.php
/class-t.api.php
/wuasr.php
/8.php
/wp-signup.php
/amax.php
/wp-admin/zoko.php
/yas.php
/wp-png.php
/wp-good.php
/ccc.php
/ff.php
/wp-ws68.php
/06.php
/file88.php

Sample User-Agents

No User-Agent recorded (likely scripted, no UA header).

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.