abuseip.org
- Reason
- suspicious paths across 1 domains
- Hits (last hour)
- 59
- Unique targets hit
- 1
- Unique paths probed
- 575
- Detection count
- 58
- First seen
- 2026-07-10 09:47:21 UTC
- Last seen
- 2026-07-10 09:55:46 UTC
- Block expires
- 2026-07-11 10:47:35 UTC
Sample paths probed
- /public/plugins/welcome/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd
- /admin/log/error.log
- /aws.sh
- /.dockercfg
- /.aws/config
- /PDC/ajaxreq.php?PARAM=127.0.0.1+
- /IdentityGuardSelfService/images/favicon.ico
- /.env.www
- /lib../.git/config
- /actuators/
- /v2/keys
- /assets
- /images/json
- /servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https
- /api/v2.0/configuration
- /wiki
- /config/environment.rb
- /admin/pprof
- /jolokia/version
- /debug/default/view
Sample User-Agents
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
- curl/8.7.1
What does this mean?
This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).
If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.