abuseip.org
- Reason
- scanning 10 domains
- Hits (last hour)
- 12
- Unique targets hit
- 10
- Unique paths probed
- 13
- Detection count
- 1
- First seen
- 2026-06-05 12:28:42 UTC
- Last seen
- 2026-06-05 13:24:41 UTC
- Block expires
- 2026-06-06 13:28:44 UTC
Sample paths probed
- /dev/wp-content/uploads/bonnie-cohen.jpg
- /www/wp-content/themes/arthemia-premium/arthemia-premium/scripts/timthumb.php?src=/wp-content/M%C3%A4rke-stor-300x300.png&w=80&h=80&zc=1&q=100
- /wordpress/wp-content/uploads/2019/01/Froschzauber-105x150.jpg
- /wp-content/uploads/2020/04/img_5091.jpg
- /wordpress/wp-content/uploads/2011/11/fitindeutsch_sandra_schieder.jpg
- /wp-content/uploads/2021/03/eloop-1.png
- /wp-content/uploads/2017/06/cropped-logo-mediterranea.png
- /wp-content/uploads/2017/11/IMG-20171116-WA0004-360x193.jpg
- /wp-content/uploads/2020/03/Logo_QualiPV.jpg
- /wp-content/uploads/2016/10/photo_10075_20090418-400x250.jpg
- /wp-content/uploads/2020/06/CDU-Divi-Beitragsbild-Update-1080x675-1.jpg
- /wp-content/uploads/2016/07/prebenjamines_soccer_academy_cotif2016.jpg
- /wp-content/uploads/2021/08/black_logo_white_background.png
Sample User-Agents
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
What does this mean?
This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).
If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.