abuseip.org

home · sitemap

Public registry of IP addresses currently blocked by the redirs.com anycast edge for automated abuse — credential scanning, WordPress/PHP exploit probing, and mass-domain enumeration.

Blocked IPs: 810
Total recent hits: 1,044,978
Last refresh: 2026-10-16 23:22:08 UTC
Block duration: 24 hours from last detection

How to look up an IP

Visit https://abuseip.org/ip/<address>. For example: https://abuseip.org/ip/34.178.232.189.

The full list of blocked IPs is in the sitemap.

Bulk export

Machine-readable feeds, regenerated hourly:

/blocklist.txt — one IP per line, suitable for firewalls / fail2ban / ipset
/blocklist.json — full structured records (reason, hits, timestamps, sample paths)
/blocklist.xml — same data as XML

Customer hostnames are intentionally omitted from all exports.

Recent detections

34.141.191.231 — scanning 235 domains (26,471 hits)
173.239.240.106 — suspicious paths across 2 domains (1,005 hits)
136.92.19.174 — suspicious paths across 12 domains (744 hits)
34.124.163.2 — suspicious paths across 26 domains (1,477 hits)
34.10.10.57 — suspicious paths across 19 domains (1,159 hits)
13.70.110.189 — suspicious paths across 16 domains (2,071 hits)
20.194.17.163 — scanning 80 domains (8,259 hits)
20.211.97.120 — scanning 73 domains (7,644 hits)
34.21.222.75 — scanning 32 domains (12,256 hits)
185.177.72.49 — scanning 71 domains (1,211 hits)
185.218.86.14 — scanning 46 domains (46 hits)
130.12.180.167 — scanning 65 domains (69 hits)
34.6.175.102 — scanning 125 domains (14,585 hits)
20.214.147.109 — scanning 116 domains (4,924 hits)
34.152.0.183 — scanning 67 domains (25,661 hits)
34.168.218.1 — suspicious paths across 21 domains (1,281 hits)
34.77.137.207 — scanning 33 domains (3,681 hits)
130.12.180.166 — scanning 54 domains (55 hits)
34.76.9.181 — scanning 88 domains (10,144 hits)
136.90.97.103 — scanning 75 domains (28,725 hits)
34.19.206.202 — scanning 67 domains (25,661 hits)
35.204.143.84 — scanning 49 domains (5,673 hits)
34.156.22.151 — scanning 39 domains (4,554 hits)
4.196.200.15 — scanning 105 domains (10,095 hits)
136.90.86.94 — scanning 53 domains (20,247 hits)

Removal & contact

Blocks expire automatically 24 hours after the last detected hit. For false-positive reports email [email protected] with the IP and the relevant timestamps.