abuseip.org
Public registry of IP addresses currently blocked by the redirs.com anycast edge for automated abuse — credential scanning, WordPress/PHP exploit probing, and mass-domain enumeration.
- Blocked IPs
- 1,386
- Total recent hits
- 145,340
- Last refresh
- 2026-07-14 21:21:42 UTC
- Block duration
- 24 hours from last detection
How to look up an IP
Visit https://abuseip.org/ip/<address>. For example: https://abuseip.org/ip/172.70.142.132.
The full list of blocked IPs is in the sitemap.
Bulk export
Machine-readable feeds, regenerated hourly:
/blocklist.txt— one IP per line, suitable for firewalls / fail2ban / ipset/blocklist.json— full structured records (reason, hits, timestamps, sample paths)/blocklist.xml— same data as XML
Customer hostnames are intentionally omitted from all exports.
Recent detections
20.226.66.230— scanning 36 domains (2,563 hits)20.48.236.161— scanning 55 domains (10,158 hits)143.198.208.153— suspicious paths across 4 domains (124 hits)172.69.176.140— suspicious paths across 1 domains (59 hits)20.62.255.17— suspicious paths across 22 domains (22 hits)136.113.9.105— scanning 16 domains (35 hits)35.192.232.168— scanning 24 domains (33 hits)172.69.176.141— suspicious paths across 1 domains (46 hits)20.226.26.5— scanning 42 domains (6,738 hits)207.90.244.23— scanning 1085 domains (3,625 hits)3.249.25.177— suspicious paths across 6 domains (612 hits)135.232.208.178— scanning 15 domains (15 hits)52.242.242.144— suspicious paths across 21 domains (21 hits)165.245.189.2— suspicious paths across 116 domains (116 hits)52.179.93.129— scanning 13 domains (13 hits)207.90.244.15— scanning 787 domains (2,773 hits)20.219.14.31— scanning 29 domains (299 hits)94.154.43.187— scanning 19 domains (20 hits)20.63.63.128— scanning 27 domains (4,472 hits)143.244.57.90— scanning 32 domains (72 hits)134.199.149.1— scanning 43 domains (172 hits)2a09:bac1:76e0:460::5e:82— suspicious paths across 2 domains (24 hits)57.154.6.2— scanning 17 domains (17 hits)165.232.87.87— scanning 158 domains (644 hits)23.137.105.99— scanning 11 domains (33 hits)
Removal & contact
Blocks expire automatically 24 hours after the last detected hit. For false-positive reports email [email protected] with the IP and the relevant timestamps.