abuseip.org

IP 20.240.254.167 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 7 domains
Hits (last hour): 588
Unique targets hit: 9
Unique paths probed: 1,419
Detection count: 28
First seen: 2026-07-29 13:59:00 UTC
Last seen: 2026-07-29 15:16:46 UTC
Block expires: 2026-07-30 15:20:00 UTC

Sample paths probed

/idx.php
/ids.php
/id.php
/degeselih.php
/gank.php
/file.php
/loader/ff.php
/dosya.php
/FoxWSO-full.php
/docindex.php
/gh.php
/init.php
/evil.php
/FoxWSO.php
/kepo.php
/error.php
/foxwso.php
/dbx.php
/gank.php.PhP
/doc.php

Sample User-Agents

No User-Agent recorded (likely scripted, no UA header).

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.