abuseip.org

Sample paths probed

• /eng/uploads/photos/76.jpg
• /images/data/Nike Dunk/Nike Dunk SB High Shoes 100/Nike Dunk SB High Spiderman Shoes Red Grey For Mens.jpg
• /664/8870/12-thumb.jpg
• /img/6/8074865326.jpg
• /velazquez_las_meninas_tee_shirts-r78048bc466794a6580b9b031752c83b7_f0ybj_210.jpg
• /1/2716048/Eu-com-minhas-avYone-e-Alda.jpg
• /images/stories/noticias/apama.jpg
• /fotos/klein/70035.jpg
• /assets/users8/pattynadora/p-photos/eu-fashion--feat-prf-1118240253.jpg
• /product_thumb.php
• /
• /media/05/3705-ninakraviz_cover_300dpi_rgb.jpg
• /images/e/290469994390_0.jpg
• /Media/Image/13549809/2493442.JPG
• /img/rating2.gif
• /en/scrn/54000/54140/pocket-stream-server-16.jpg
• /files/oferta/F1000022.JPG
• /fire/send.php
• /content/images/thumbs/0002987_125.tif
• /member/gen_avatar/969ffba1-c886-4ce5-98b9-f2f8354953d4/60x60/315dc19d16793cddf210d12a255b55d6

Sample User-Agents

• Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36
• Mozilla/5.0 (X11; Linux i686; rv:64.0) Gecko/20100101 Firefox/64.0
• Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.158 Safari/537.36 OPR/52.0.2871.99
• Mozilla/5.0 (Windows NT 6.1; rv:60.2.2) Gecko/20100101 Firefox/60.2.2
• Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36
• Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 OPR/52.0.2871.40
• Mozilla/5.0 (X11; Linux x86_64; rv:58.0.2) Gecko/20100101 Firefox/58.0.2
• Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36
• Mozilla/5.0 (Windows NT 6.1; rv:59.0.3) Gecko/20100101 Firefox/59.0.3
• Mozilla/5.0 (Windows NT 6.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
• Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36
• Mozilla/5.0 (X11; Linux i686; rv:53.0) Gecko/20100101 Firefox/53.0
• Mozilla/5.0 (Windows NT 10.0; WOW64; rv:57.0.2) Gecko/20100101 Firefox/57.0.2
• Mozilla/5.0 (X11; Linux i686 on x86_64; rv:52.0.2) Gecko/20100101 Firefox/52.0.2
• Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.1.1) Gecko/20100101 Firefox/52.1.1
• Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
• Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36 OPR/56.0.3051.52
• Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_3; rv:60.5.0) Gecko/20100101 Firefox/60.5.0
• Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/56.0.3051.116
• Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5; rv:53.0) Gecko/20100101 Firefox/53.0

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.