abuseip.org
Public registry of IP addresses currently blocked by the redirs.com anycast edge for automated abuse — credential scanning, WordPress/PHP exploit probing, and mass-domain enumeration.
- Blocked IPs
- 1,497
- Total recent hits
- 199,912
- Last refresh
- 2026-06-03 14:21:30 UTC
- Block duration
- 24 hours from last detection
How to look up an IP
Visit https://abuseip.org/ip/<address>. For example: https://abuseip.org/ip/13.233.172.52.
The full list of blocked IPs is in the sitemap.
Bulk export
Machine-readable feeds, regenerated hourly:
/blocklist.txt— one IP per line, suitable for firewalls / fail2ban / ipset/blocklist.json— full structured records (reason, hits, timestamps, sample paths)/blocklist.xml— same data as XML
Customer hostnames are intentionally omitted from all exports.
Recent detections
195.178.110.100— suspicious paths across 283 domains (283 hits)45.148.10.204— suspicious paths across 165 domains (165 hits)172.69.176.5— suspicious paths across 1 domains (452 hits)103.253.27.224— scanning 50 domains (23,269 hits)34.143.67.172— scanning 23 domains (95 hits)34.145.51.160— scanning 26 domains (109 hits)45.148.10.245— scanning 339 domains (339 hits)34.82.174.128— scanning 23 domains (91 hits)8.229.224.64— scanning 23 domains (94 hits)8.231.211.207— scanning 24 domains (108 hits)176.65.139.229— scanning 26 domains (26 hits)34.19.11.2— scanning 25 domains (111 hits)8.231.229.67— scanning 26 domains (112 hits)35.197.85.130— scanning 23 domains (79 hits)35.252.255.115— scanning 24 domains (81 hits)35.252.95.42— scanning 24 domains (99 hits)5.255.98.242— suspicious paths across 5 domains (185 hits)8.229.35.132— scanning 23 domains (95 hits)160.211.67.34— suspicious paths across 1 domains (51 hits)35.252.164.171— scanning 26 domains (111 hits)136.109.198.118— scanning 23 domains (89 hits)5.255.122.176— suspicious paths across 5 domains (185 hits)34.168.188.110— scanning 24 domains (107 hits)207.241.173.205— suspicious paths across 9 domains (333 hits)136.109.86.167— scanning 23 domains (77 hits)
Removal & contact
Blocks expire automatically 24 hours after the last detected hit. For false-positive reports email [email protected] with the IP and the relevant timestamps.