abuseip.org

IP 54.74.248.241 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 12 domains
Hits (last hour): 588
Unique targets hit: 12
Unique paths probed: 616
Detection count: 3
First seen: 2026-07-06 06:03:46 UTC
Last seen: 2026-07-06 06:18:24 UTC
Block expires: 2026-07-07 06:18:36 UTC

Sample paths probed

/?wcal_action=checkout_link&user_email=test&validate=EwCrFl9FS2oPxPQc8nfkSLgbkLOuPxp+tQFI21YTJclJvSVF8iW+6VCayogf6Le99mEJ+TCytXc=
/?wcal_action=checkout_link&user_email=test&validate=1gJ0qFhFS2phK0laP+eBtZd1lodD8aAOjlXXMZVbU0zWZBJJ/1NTZXgPJmsmeRlxUntC
/?wcal_action=checkout_link&user_email=test&validate=SQNrT1hFS2rZ+BNzWLt9Tscpriehr0lsS0No1MSloL2RZejAGXh2rf4KuXa8x9pWzpHmpaFZhrnYDcE=
/remote.php/dav/files/admin?OC-Expires=991200&OC-Verb=PROPFIND&OC-Credential=admin&OC-Date=2026-07-06T06%3A04%3A14Z&OC-Signature=4ffd914eebce82a9d9c117d3c2a9eb3864d014b7ed57b9e36cfc15c29f79be59
/?wcal_action=checkout_link&user_email=test&validate=xwACQ15FS2oVtfPrR0qoNdqVQwme5kU6213RWyog55dABIMLfa4m7qo/GqvEFY3hxmzhGncQ5x45rA==
/?wcal_action=checkout_link&user_email=test&validate=SgOAdFhFS2oAxJnFnQroAFQQAquLI+RVhNLdVjiLR0eOZfWZVIV/AFtr8JCe65gDZ9ol+WUIyS6dyWw=
/
/?wcal_action=checkout_link&user_email=test&validate=1AAXgF5FS2opuk0TnqVIwWaBmhILx7EQX41QH8OyNKg03YmFjLoxxL4iw0DLpnu5ldcM/s+zaOsTKg==
/?wcal_action=checkout_link&user_email=test&validate=5wP4h1dFS2p41FCNDNbcTZbBUcQFlaEnQmILmrIRGXO1NaPxB8yJ4HXwRVfWLNihwNJ0/Bi6xZPVQ5M=
/remote.php/dav/files/admin?OC-Expires=991200&OC-Verb=PROPFIND&OC-Credential=admin&OC-Date=2026-07-06T06%3A04%3A11Z&OC-Signature=88e7f7b0a542988a2f84048cbed8446d7085b077f1fd4ffc91fd1dd8f6f4e62c
/remote.php/dav/files/admin?OC-Expires=991200&OC-Verb=PROPFIND&OC-Credential=admin&OC-Date=2026-07-06T06%3A04%3A17Z&OC-Signature=b0e28f0824858be102be29218ad8e9c6e8ff72112341458cf23aec047bfa1a0d
/?wcal_action=checkout_link&user_email=test&validate=YwGxiV9FS2qf3+rbjhuVps3yup9Tac7JjyuIOG4RPm65h1M2ekHrEDoYRstYwFv46G2E7mOtDhuW
/?wcal_action=checkout_link&user_email=test&validate=2wOzK1dFS2q9fQaN1ElzjIt/B+ewp3HtvM/p/Vw8r8sbFaoVwYqNp+U32hW/VHCu29tsSxRBb1Zdoxo=
/remote.php/dav/files/admin?OC-Expires=991200&OC-Verb=PROPFIND&OC-Credential=admin&OC-Date=2026-07-06T06%3A04%3A11Z&OC-Signature=0404d69147b1f4a309bf6798f435682ad819cf859803f5cab485b4458b8b93fb
/?wcal_action=checkout_link&user_email=test&validate=LwFoAF9FS2r/f8HvC6xIujxk/zoleQ/BwMELf2DJ0feN6yMrXbP1AzoSHtaGWXK84POJMA9kLaRf
/remote.php/dav/files/admin?OC-Expires=991200&OC-Verb=PROPFIND&OC-Credential=admin&OC-Date=2026-07-06T06%3A04%3A11Z&OC-Signature=9953d420afb94638e9a5f0570a91901af4f2fed872053aa06b2bc856cdfaa10d
/?wcal_action=checkout_link&user_email=test&validate=1QIsOVhFS2pqQxkOPdWXrOS4/N5aQFdwh66pIm0qtLJWSkrBibngBRZ7gpPun+k53hAc
/remote.php/dav/files/admin?OC-Expires=991200&OC-Verb=PROPFIND&OC-Credential=admin&OC-Date=2026-07-06T06%3A04%3A13Z&OC-Signature=5583b0cff330d3be8f87274a8f0a2435dfa55c360193f34a02d9ddbc47a44266
/remote.php/dav/files/admin?OC-Expires=991200&OC-Verb=PROPFIND&OC-Credential=admin&OC-Date=2026-07-06T06%3A04%3A13Z&OC-Signature=cd6fb545ad71eb1ac628f0ccb6ac03fec24bda26faf3f482430583a41404bce4
/?wcal_action=checkout_link&user_email=test&validate=EgD41F9FS2pDgI++Np13f5+OM80zIApnV6Izy1tf6bwoGnoezWapby0MHJBwewOu1yY3ahJ41OE=

Sample User-Agents

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 OPR/118.0.0.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0
Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.8.3 Chrome/130.0.6723.191 Electron/33.3.2 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.