148.72.11.52

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
64 reports
39 reporters · latest 9 months ago
ISP
GoDaddy.com, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS398101
Hostname(s)
52.11.72.148.host.secureserver.net
Domain Name
godaddy.com
Country
🇺🇸 United States of America
City
Phoenix, Arizona
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

148.72.11.52 has been reported 64 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
64 from 39 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Failed Wordpress Logins
Web App Attack
Anonymous
Failed Wordpress Logins
Web App Attack
Anonymous
Failed Wordpress Logins
Web App Attack
Anonymous
Failed Wordpress Logins
Web App Attack
Anonymous
Failed Wordpress Logins
Web App Attack
🇵🇱 bmino.pl
Autoban IP(2): 148.72.11.52 - Hostname: 52.11.72.148.host.secureserver.net - City: Phoenix - Region: Arizona - Country: US - Location: 33.4484,-112.0740 - Organization: AS26496 GoDaddy.com, LLC - failed attempts.
Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host Web App Attack
Anonymous
2026-01-04T07:02:35.868070+01:00 aion wordpress[575676]: XML-RPC authentication attempt for unknown user michael from 148.72.11.52 ...
Hacking Brute-Force
🇺🇸 octageeks.com
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇳🇱 Site.eu
Excessive multi-domain requests
Brute-Force
🇬🇧 spamverify.com
Honeypot Hit: xmlrpc.php
Web Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
🇬🇧 [email protected]
...
Brute-Force SSH
🇩🇪 R.G.
(XMLRPCorWHATEVER) Get lost please 148.72.11.52 (US/United States/52.11.72.148.host.secureserver.net): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸 myagent.site
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 219.77.169.219
🇺🇸 207.231.108.211
🇩🇪 164.92.186.206
🇨🇳 123.138.18.10
🇹🇼 122.121.161.72
🇨🇳 111.10.228.132
🇧🇩 103.172.28.62
🇮🇳 52.172.92.182
🇲🇾 49.124.151.18
🇳🇱 45.74.28.2
🇺🇸 35.194.92.241
🇸🇬 4.193.104.104
🇷🇺 195.122.253.45
🇺🇸 172.212.226.229
🇩🇪 167.235.154.167
🇺🇸 167.172.138.132
🇺🇸 159.203.187.63
🇨🇳 118.195.150.149
🇯🇵 103.203.59.11
🇸🇬 103.13.206.152
feedback