abuseip.org

IP 20.206.89.89 is currently blocked by the redirs.com anycast edge.

Reason: scanning 29 domains
Hits (last hour): 1,001
Unique targets hit: 29
Unique paths probed: 48
Detection count: 205
First seen: 2026-05-25 13:20:05 UTC
Last seen: 2026-05-25 14:09:28 UTC
Block expires: 2026-05-26 14:18:08 UTC

Sample paths probed

/phpinfo.php
/eval.php
/input.php
/ups.php
/tempfuns.php
/demo/cache.php?p=
/wp-config.php?p=
/hplfuns.php
/phpinfo
/php-health.php
/166.php
/wp-content/plugins/hellopress/wp_filemanager.php
/hello.php
/index.php?p=
/wpm.php
/wp-config.php
/inf.php
/test.php1
/25.php
/autoload.php

Sample User-Agents

No User-Agent recorded (likely scripted, no UA header).

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.