abuseip.org

IP 45.133.5.168 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 2 domains
Hits (last hour): 43
Unique targets hit: 2
Unique paths probed: 72
Detection count: 14
First seen: 2026-05-04 01:05:25 UTC
Last seen: 2026-05-04 01:32:55 UTC
Block expires: 2026-05-05 02:05:31 UTC

Sample paths probed

/wp-content/good.php
/wp-includes/xy.php
/wp-admin/user/lock.php
/wp-content/wp-content/admin.php
/wp-content/mu-plugins/chosen.php
/wp-content/plugins.bk/js_composer/include/classes/vendors/plugins/system.php
/wp-content/wp-content/languages/config.php
/wp-admin/profile/admin.php
/wp-content/languages/autoload_classmap.php
/wp-admin/editor/
/summia/
/wp-content/plugins.bk/wordpress-seo/admin/import/plugins/maintenance.php
/wp-includes/js/tinymce/plugins/wp-mail.php
/wp-config.php
/wp-includes/theme-compat/footer-class.php
/wp-content/h2.php
/wp-content/upgrade-temp-backup/autoload_classmap.php
/wp-content/plugins.bk/contact-form-7/includes/js/jquery-ui/themes/admin.php
/wp-admin/images/Base.php
/wp-admin/maint/wp-conflg.php

Sample User-Agents

Mozilla/5.0 (iPhone; CPU iPhone OS 26_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/147.0.7727.99 Mobile/15E148 Safari/604.1
Go-http-client/1.1

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.