abuseip.org

IP 20.104.49.130 is currently blocked by the redirs.com anycast edge.

Reason: scanning 160 domains
Hits (last hour): 11,493
Unique targets hit: 161
Unique paths probed: 236
Detection count: 1,108
First seen: 2026-09-01 20:21:23 UTC
Last seen: 2026-09-01 21:21:23 UTC
Block expires: 2026-09-02 21:21:40 UTC

Sample paths probed

//a1.php
/666666.php
/congeree.php
/first.php
/docs.php
/privdayz.php
/file17.php
/bdroot.php
/asd67.php
/wp-content/plugins/hellopress/wp_filemanager.php
/about/goods.php
/php_load.php
//wp5.php
/small.php
/hehe.php
/category.php
/lala.php
/navbar.php
/av.php
/dox.php

Sample User-Agents

No User-Agent recorded (likely scripted, no UA header).

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.