abuseip.org

home · sitemap

Public registry of IP addresses currently blocked by the redirs.com anycast edge for automated abuse — credential scanning, WordPress/PHP exploit probing, and mass-domain enumeration.

Blocked IPs: 823
Total recent hits: 413,086
Last refresh: 2026-09-29 20:22:04 UTC
Block duration: 24 hours from last detection

How to look up an IP

Visit https://abuseip.org/ip/<address>. For example: https://abuseip.org/ip/34.121.47.127.

The full list of blocked IPs is in the sitemap.

Bulk export

Machine-readable feeds, regenerated hourly:

/blocklist.txt — one IP per line, suitable for firewalls / fail2ban / ipset
/blocklist.json — full structured records (reason, hits, timestamps, sample paths)
/blocklist.xml — same data as XML

Customer hostnames are intentionally omitted from all exports.

Recent detections

20.214.191.94 — scanning 71 domains (5,360 hits)
52.231.69.245 — scanning 66 domains (4,507 hits)
52.231.30.175 — scanning 75 domains (7,454 hits)
20.211.90.37 — scanning 76 domains (6,940 hits)
20.58.177.98 — scanning 44 domains (2,860 hits)
20.194.30.107 — scanning 29 domains (2,361 hits)
20.194.96.176 — scanning 23 domains (1,273 hits)
20.196.195.74 — scanning 56 domains (5,581 hits)
20.28.180.172 — scanning 48 domains (3,435 hits)
20.214.145.90 — scanning 54 domains (5,312 hits)
20.5.79.49 — scanning 60 domains (6,504 hits)
34.85.224.138 — scanning 19 domains (4,310 hits)
34.47.52.45 — scanning 29 domains (2,257 hits)
34.19.241.94 — scanning 37 domains (7,863 hits)
20.70.173.30 — scanning 37 domains (2,898 hits)
20.214.151.17 — scanning 35 domains (3,037 hits)
20.194.97.74 — scanning 33 domains (1,778 hits)
4.196.65.241 — scanning 25 domains (1,135 hits)
103.59.160.18 — scanning 413 domains (12,963 hits)
35.194.121.99 — suspicious paths across 14 domains (417 hits)
136.69.217.62 — scanning 18 domains (2,496 hits)
77.67.9.201 — scanning 31 domains (334 hits)
34.141.112.225 — suspicious paths across 13 domains (712 hits)
40.119.24.65 — scanning 36 domains (210 hits)
35.187.36.114 — scanning 265 domains (265 hits)

Removal & contact

Blocks expire automatically 24 hours after the last detected hit. For false-positive reports email [email protected] with the IP and the relevant timestamps.