abuseip.org

IP 203.25.124.208 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 1 domains
Hits (last hour): 25
Unique targets hit: 1
Unique paths probed: 108
Detection count: 14
First seen: 2026-07-07 04:36:28 UTC
Last seen: 2026-07-07 04:38:21 UTC
Block expires: 2026-07-08 05:36:51 UTC

Sample paths probed

/wp-includes/css/dist/commands/wp-cron.php
/wp-includes/block-patterns/config.php
/wp-includes/sitemaps/providers/config.php
/wp-content/uploads/wp-sync-db/config.php
/wp-includes/sitemaps/admin.php
/wp-security.php
/wp-content/includes.php
/wp-includes/abilities-api/pomo/
/wp-includes/style-engine/config.php
/wp-content/ai1wm-backups/chosen.php
/wp-includes/blocks/code/jquery/
/wp-includes/SimplePie/wp-conflg.php
/wp-includes/assets/config.php
/wp-admin/images/upgrade-temp-backup/
/wp-includes/certificates/chosen.php
/wp-includes/IXR/customize/
/wp-content/functions.php
/includes.php
/wp-includes/customize/abilities-api/
/wp-admin/includes/user/

Sample User-Agents

Go-http-client/1.1

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.