abuseip.org

IP 20.89.230.101 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 2 domains
Hits (last hour): 28
Unique targets hit: 3
Unique paths probed: 152
Detection count: 5
First seen: 2026-07-16 11:39:24 UTC
Last seen: 2026-07-16 12:37:10 UTC
Block expires: 2026-07-17 12:38:10 UTC

Sample paths probed

/min.php
/domvf.php
/class.php
/als.php
/simple.php
/lib.php
/3PJcpMFsD8B.php
/biufile.php
/header.php
/init.php
/coffexium.php
/dvjul.php
//wp.php
/core.php
/gettest.php
//login.php
//av.php
/fpwch.php
/echkm.php?p=
/app.php

Sample User-Agents

No User-Agent recorded (likely scripted, no UA header).

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.