abuseip.org

IP 3.94.137.21 is currently blocked by the redirs.com anycast edge.

Reason: scanning 21 domains
Hits (last hour): 110
Unique targets hit: 34
Unique paths probed: 25
Detection count: 12
First seen: 2026-10-29 13:37:22 UTC
Last seen: 2026-10-29 15:21:52 UTC
Block expires: 2026-10-30 15:24:44 UTC

Sample paths probed

/19a3db64-1c08-4039-9605-e55eba798932
/163296df-65bc-4e77-9e32-f6aaae0f1f4f
/66ceba0a-4a43-4757-af8a-56b31d1cd48e
/cc4833b8-bcfc-47ff-ad0a-67f045f1a262
/1b073d09-e566-46ad-94c7-6aa22d9491fd
/e66a285f-7a30-41d1-a55c-adc6e5bf7c6f
/96f9aacf-b6d0-4673-89dd-efe2911a7df4
/644b3a8f-fc42-4c87-aff6-130b8f8877b7
/89ad99ca-f063-42ea-b4f0-35b7c2b101ba
/
/0b9edc7d-cd88-486e-b229-5aa6f5fac70a
/31f83a40-31ba-4002-9882-afd7183b26f1
/9a901e40-c5d7-43e3-83e2-f70299ea0a43
/1794ab41-ffda-4ad0-a591-7d6079443b61
/51b1a5a4-17bf-45a1-9604-c85767b41ec5
/da6cf92b-12e6-4d0a-b90a-913d34c689df
/d746567c-4092-432b-92f5-544d7eac0c0d
/81f1cb98-183e-49d4-8db9-2e652266a0a9
/1fea6b81-529b-414f-a089-14556c58fcec
/0f0eab68-f746-432d-bec1-3f81be4f1da8

Sample User-Agents

Mozilla/6.0 (Linux; Android 5.0; Mac OS X; de; rev:3.2) SeaMonkey/20.6.5 SeaMonkey/75.3.6 Iron/46.8.1
Mozilla/5.0 (Windows; U; Ubuntu; se-SE; rv:9.9) Gecko/59.2.8 AppleWebKit/25.3.5 SeaMonkey/73.7.0
Mozilla/6.0 (Windows NT 6.1; U; Windows 6.1; ru; rev:6.4) Chrome/50.4.2 Chromium/88.9.5 Chromium/83.6.3
APIs-Google (+https://developers.google.com/webmasters/APIs-Google.html)
Mozilla/7.0 (compatible; MSIE 9.0; Windows NT; pl; ver:6.6) Chrome/28.5.2 SeaMonkey/5.1.3 Safari/54.2.6
Mozilla/5.0 (Windows NT; U; Windows 5.1; de; rv:8.0) AppleWebKit/79.8.4 SeaMonkey/77.3.9 Iron/65.4.1
Mediapartners-Google
Mozilla/7.0 (Windows NT 6.1; U; CentOS; it; ver:0.3) Iron/61.0.0 Gecko/14.9.2 SeaMonkey/10.3.5
Mozilla/5.0 (Linux x86; U; Windows 6.1; se; rv:9.4) Chrome/7.5.0 Safari/31.5.7 AppleWebKit/36.9.4
Go-http-client/1.1
Mozilla/6.0 (Windows; U; Mac OS X; ru; rv:4.4) Safari/90.5.2 Safari/34.2.1 Iron/43.0.2
Mozilla/7.0 (Windows NT 5.1; U; x86_64 Linux; fr; rev:7.1) Firefox/87.7.1 Chromium/47.5.4 Chrome/83.4.6
Mozilla/6.0 (X11; U; Ubuntu; es-ES; rev:9.1) Chromium/11.7.7 Chrome/68.5.0 AppleWebKit/40.7.2
Mozilla/7.0 (Windows; U; Windows 6.1; en-US; ver:2.6) Firefox/7.6.4 Firefox/3.3.9 AppleWebKit/3.5.5
Mozilla/6.0 (Linux; U; Windows 5.1; pl-PL; rv:4.9) Safari/62.6.7 Firefox/89.5.8 Firefox/64.3.0
Mozilla/5.0 (iPhone; Linux i686; fr; ver:10.0) SeaMonkey/78.8.6 Iron/52.8.4 Chrome/51.6.0
AdsBot-Google-Mobile-Apps
Mozilla/5.0 (Linux; Android 4.0; Windows 5.1; es-ES; rev:1.4) Chrome/46.0.0 SeaMonkey/67.9.2 Chrome/92.2.4
Mozilla/6.0 (compatible; MSIE 9.0; Windows 5.1; no; rev:3.5) Firefox/39.9.0 Chromium/73.6.3 Iron/49.3.3
Mozilla/5.0 (Linux; Android 6.0; WOW64; it-IT; rv:2.2) Gecko/30.8.3 Chromium/97.5.3 Safari/91.9.9

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.