abuseip.org
Public registry of IP addresses currently blocked by the redirs.com anycast edge for automated abuse — credential scanning, WordPress/PHP exploit probing, and mass-domain enumeration.
- Blocked IPs
- 1,538
- Total recent hits
- 489,887
- Last refresh
- 2026-07-18 17:21:43 UTC
- Block duration
- 24 hours from last detection
How to look up an IP
Visit https://abuseip.org/ip/<address>. For example: https://abuseip.org/ip/45.133.7.99.
The full list of blocked IPs is in the sitemap.
Bulk export
Machine-readable feeds, regenerated hourly:
/blocklist.txt— one IP per line, suitable for firewalls / fail2ban / ipset/blocklist.json— full structured records (reason, hits, timestamps, sample paths)/blocklist.xml— same data as XML
Customer hostnames are intentionally omitted from all exports.
Recent detections
127.0.0.1— scanning 92 domains (104,309 hits)185.93.89.147— scanning 317 domains (318 hits)213.35.113.47— scanning 216 domains (216 hits)74.249.245.134— scanning 35 domains (3,068 hits)45.133.7.95— suspicious paths across 1 domains (321 hits)185.132.186.100— suspicious paths across 1 domains (171 hits)20.206.107.78— scanning 81 domains (8,468 hits)139.28.219.68— scanning 26 domains (26 hits)169.58.39.189— scanning 37 domains (136 hits)77.90.185.129— scanning 39 domains (90 hits)182.77.62.24— suspicious paths across 27 domains (37 hits)169.58.39.192— suspicious paths across 3 domains (57 hits)20.127.125.129— scanning 225 domains (20,951 hits)45.148.10.40— suspicious paths across 2 domains (119 hits)20.226.60.151— scanning 60 domains (4,777 hits)20.230.87.222— scanning 227 domains (17,619 hits)20.63.63.128— scanning 235 domains (24,093 hits)20.206.89.130— scanning 39 domains (4,257 hits)191.237.250.106— scanning 18 domains (1,732 hits)20.104.96.117— scanning 78 domains (7,809 hits)20.151.10.161— scanning 130 domains (13,731 hits)138.246.253.24— scanning 82 domains (82 hits)20.220.225.223— scanning 55 domains (3,649 hits)20.226.26.5— scanning 183 domains (15,126 hits)173.239.196.175— suspicious paths across 1 domains (349 hits)
Removal & contact
Blocks expire automatically 24 hours after the last detected hit. For false-positive reports email [email protected] with the IP and the relevant timestamps.