abuseip.org

IP 91.90.126.113 is currently blocked by the redirs.com anycast edge.

Reason: suspicious paths across 1 domains
Hits (last hour): 86
Unique targets hit: 1
Unique paths probed: 3,196
Detection count: 13
First seen: 2026-06-12 18:33:38 UTC
Last seen: 2026-06-12 18:48:20 UTC
Block expires: 2026-06-13 19:34:01 UTC

Sample paths probed

/AnimaGallery/index.php
/snowfox/index.php
/index.pl/homels?func=add;class=WebGUI::Asset::Wobject::Article%3bprint%20%60id%60;
/anima/index.php
/beerxml.php?r=null%20union%20select%201,2,3,4,5,0x53514c2d496e6a656374696f6e2d54657374,7,8,9,10,11
/asaancart/libs/smarty_ajax/index.php?_=&f=update_intro&page=../../../../../../../../../../../../../../../../../../etc/passwd%00
/phpscript/index.php
/admin/admin.php
/social/
/brewthology/beerxml.php?r=null%20union%20select%201,2,3,4,5,0x53514c2d496e6a656374696f6e2d54657374,7,8,9,10,11
/snowfoxcms/index.php
/webcookbook/index.php
/recipedb/beerxml.php?r=null%20union%20select%201,2,3,4,5,0x53514c2d496e6a656374696f6e2d54657374,7,8,9,10,11
/cms/usr/extensions/get_tree.inc.php?GLOBALS[root_path]=/etc/passwd%00
/sapid/usr/extensions/get_tree.inc.php?GLOBALS[root_path]=/etc/passwd%00
/moosocial/
/usr/extensions/get_tree.inc.php?GLOBALS[root_path]=/etc/passwd%00
/cookbook/index.php
/db/index.php
/recipes/beerxml.php?r=null%20union%20select%201,2,3,4,5,0x53514c2d496e6a656374696f6e2d54657374,7,8,9,10,11

Sample User-Agents

Mozilla/5.0 [en] (X11, U; OpenVAS-VT 9.0.3)

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.