abuseip.org

IP 203.25.124.89 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 1 domains
Hits (last hour): 169
Unique targets hit: 1
Unique paths probed: 264
Detection count: 12
First seen: 2026-06-14 21:10:31 UTC
Last seen: 2026-06-14 21:12:17 UTC
Block expires: 2026-06-15 22:06:39 UTC

Sample paths probed

/wp-content/chand.php
/wp-includes/js/jcrop/wp-cron.php
/wp-admin/wp-conflg.php
/66.php
/wp-content/languages/classwithtostring.php
/wp-content/wp-cron.php
/wp-admin/admin-post-interpreter.php
/wp-includes/interactivity-api/block-bindings/
/wp-content/updraft/
/wp-content/fonts/
/licenses/images/widgets/
/wp-content/w3tc-config/
/wp-includes/api.php
/wp-content/upgrade-temp-backup/config.php
/wp-admin/images/as.php
/wp-includes/html-api/chosen.php
/wp-content/maintenance/
/wp-includes/assets/certificates/
/cgi-bin/wp-conflg.php
/wp-admin/panel.php

Sample User-Agents

Go-http-client/1.1

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.