abuseip.org

home · sitemap

Public registry of IP addresses currently blocked by the redirs.com anycast edge for automated abuse — credential scanning, WordPress/PHP exploit probing, and mass-domain enumeration.

Blocked IPs: 2,047
Total recent hits: 548,166
Last refresh: 2026-09-01 20:21:56 UTC
Block duration: 24 hours from last detection

How to look up an IP

Visit https://abuseip.org/ip/<address>. For example: https://abuseip.org/ip/34.158.233.78.

The full list of blocked IPs is in the sitemap.

Bulk export

Machine-readable feeds, regenerated hourly:

/blocklist.txt — one IP per line, suitable for firewalls / fail2ban / ipset
/blocklist.json — full structured records (reason, hits, timestamps, sample paths)
/blocklist.xml — same data as XML

Customer hostnames are intentionally omitted from all exports.

Recent detections

4.205.62.107 — scanning 327 domains (18,897 hits)
20.48.250.41 — scanning 281 domains (7,641 hits)
20.220.211.172 — scanning 198 domains (9,711 hits)
20.48.160.90 — scanning 54 domains (2,888 hits)
20.151.10.161 — scanning 218 domains (11,104 hits)
20.104.18.15 — scanning 180 domains (8,887 hits)
20.63.81.20 — scanning 170 domains (5,486 hits)
144.172.104.38 — scanning 80 domains (80 hits)
52.139.44.162 — scanning 73 domains (14,755 hits)
213.209.159.223 — suspicious paths across 13 domains (336 hits)
157.230.250.188 — suspicious paths across 1 domains (263 hits)
94.154.43.158 — scanning 30 domains (30 hits)
20.104.49.130 — scanning 121 domains (15,332 hits)
212.193.3.134 — suspicious paths across 3 domains (1,902 hits)
158.23.18.78 — scanning 49 domains (9,071 hits)
172.96.185.134 — scanning 41 domains (236 hits)
20.220.227.7 — scanning 51 domains (3,863 hits)
20.48.251.3 — scanning 80 domains (27,356 hits)
103.168.66.242 — scanning 49 domains (49 hits)
18.143.202.164 — suspicious paths across 1 domains (64 hits)
169.58.234.134 — suspicious paths across 2 domains (56 hits)
158.23.184.117 — scanning 101 domains (101 hits)
91.92.241.196 — suspicious paths across 301 domains (606 hits)
209.97.167.162 — suspicious paths across 1 domains (137 hits)
20.48.179.39 — scanning 99 domains (9,316 hits)

Removal & contact

Blocks expire automatically 24 hours after the last detected hit. For false-positive reports email [email protected] with the IP and the relevant timestamps.