abuseip.org
- Reason
- suspicious paths across 1 domains
- Hits (last hour)
- 17
- Unique targets hit
- 3
- Unique paths probed
- 182
- Detection count
- 10
- First seen
- 2026-10-29 11:43:53 UTC
- Last seen
- 2026-10-29 11:56:28 UTC
- Block expires
- 2026-10-30 12:44:24 UTC
Sample paths probed
- /servlet/GetProductVersion
- /WEB_VMS/LEVEL15/
- /configs.json
- /wp-admin/admin-ajax.php?action=get_tag_fonts
- /index.php?owa_do=base.loginForm&owa_site_id
- /SAAS/API/1.0/REST/oauth2/generateActivationToken/Service__OAuth2Client
- /wp-admin/admin-ajax.php
- /admin/uploads.php?id=1
- /sap/admin/public/default.html
- /backend/backend/auth/signin
- /plus/download.php?open=1&link=aHR0cHM6Ly9pbnRlcmFjdC5zaA==
- /eonapi/getApiKey?username=%27%20union%20select%20sleep(6),0,0,0,0,0,0,0%20or%20%27
- /app.config.json
- /
- /sse
- /application.json
- /elfinder/php/connector.minimal.php?cmd=file&target=l1_<@base64>/var/www/html/elfinder/files//..//..//..//..//..//../etc/passwd<@/base64>&download=1
- /alerts/alertConfigField.php
- /api/jsonws/invoke
- /cgi/getGDPRParm
Sample User-Agents
- Mozilla/5.0 - research.hadrian.io
What does this mean?
This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).
If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.