abuseip.org
Public registry of IP addresses currently blocked by the redirs.com anycast edge for automated abuse — credential scanning, WordPress/PHP exploit probing, and mass-domain enumeration.
- Blocked IPs
- 1,021
- Total recent hits
- 1,249,804
- Last refresh
- 2026-11-13 23:39:22 UTC
- Block duration
- 24 hours from last detection
How to look up an IP
Visit https://abuseip.org/ip/<address>. For example: https://abuseip.org/ip/185.194.178.95.
The full list of blocked IPs is in the sitemap.
Bulk export
Machine-readable feeds, regenerated hourly:
/blocklist.txt— one IP per line, suitable for firewalls / fail2ban / ipset/blocklist.json— full structured records (reason, hits, timestamps, sample paths)/blocklist.xml— same data as XML
Customer hostnames are intentionally omitted from all exports.
Recent detections
9.141.30.218— suspicious paths across 59 domains (7,603 hits)45.148.10.21— scanning 36 domains (6,729 hits)51.116.186.197— suspicious paths across 50 domains (6,676 hits)45.138.12.48— scanning 887 domains (1,150 hits)74.243.250.30— scanning 39 domains (746 hits)34.22.173.23— scanning 46 domains (8,591 hits)195.177.94.61— scanning 1597 domains (2,973 hits)34.76.228.132— suspicious paths across 23 domains (2,336 hits)167.148.195.148— scanning 669 domains (671 hits)94.26.41.193— scanning 707 domains (711 hits)45.138.12.45— scanning 1444 domains (1,463 hits)34.78.85.62— scanning 80 domains (14,949 hits)45.138.12.47— scanning 2343 domains (2,360 hits)20.203.184.59— suspicious paths across 85 domains (2,005 hits)34.62.9.55— scanning 101 domains (18,798 hits)20.87.218.237— scanning 33 domains (8,557 hits)207.175.202.245— suspicious paths across 15 domains (1,304 hits)20.48.89.150— scanning 59 domains (1,899 hits)34.62.31.226— scanning 99 domains (18,499 hits)34.53.147.106— scanning 37 domains (6,911 hits)45.138.12.215— scanning 121 domains (123 hits)20.106.103.160— suspicious paths across 105 domains (15,348 hits)20.106.75.210— suspicious paths across 109 domains (16,186 hits)172.213.26.234— suspicious paths across 143 domains (3,421 hits)34.78.148.69— scanning 41 domains (7,665 hits)
Removal & contact
Blocks expire automatically 24 hours after the last detected hit. For false-positive reports email [email protected] with the IP and the relevant timestamps.