abuseip.org

IP 85.203.23.9 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 1 domains
Hits (last hour): 163
Unique targets hit: 1
Unique paths probed: 565
Detection count: 13
First seen: 2026-10-22 05:58:54 UTC
Last seen: 2026-10-22 06:26:27 UTC
Block expires: 2026-10-23 07:11:17 UTC

Sample paths probed

/wp-content/w3tc-config/index.php
/wp-includes/blocks/query-pagination-numbers/config.php
/wp-content/w3tc-config/config.php
/wp-includes/blocks/avatar/config.php
/wp-includes/blocks/comment-template/config.php
/wp-content/updraft/login.php
/wp-content/includes.php
/wp-content/core.php
/wp-content/languages/themes/wp-activate.php
/wp-content/wflogs/admin.php
/wp-content/languages/plugins/load.php
/wp-content/global.php
/wp-includes/blocks/shortcode/config.php
/wp-includes/blocks/config.php
/wp-includes/login.php
/wp-includes/wp-load.php
/wp-content/upgrade-temp-backup/admin.php
/wp-content/updraft/emptydir/config.php
/wp-includes/blocks/comments-pagination-previous/config.php
/wp-includes/config.php

Sample User-Agents

Go-http-client/1.1

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.