JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.167.50.248

72.167.50.248

Neutral Activity

64 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

GoDaddy.com, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS398101

Hostname(s)

248.50.167.72.host.secureserver.net

Domain Name

godaddy.com

Country

🇺🇸 United States of America

City

Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

72.167.50.248 has been reported 64 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 72.167.50.248:

This IP address has been reported a total of 64 times from 38 distinct sources. 72.167.50.248 was first reported on November 20th 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 psauxit	2024-01-05 11:19:52 (2 years ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Hacking Web App Attack
Anonymous	2024-01-05 06:28:11 (2 years ago)	www.goldgier.de 72.167.50.248 [05/Jan/2024:07:28:08 +0100] "POST /xmlrpc.php HTTP/1.1" 200 6119 "-" ... show more www.goldgier.de 72.167.50.248 [05/Jan/2024:07:28:08 +0100] "POST /xmlrpc.php HTTP/1.1" 200 6119 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" www.goldgier.de 72.167.50.248 [05/Jan/2024:07:28:10 +0100] "POST /xmlrpc.php HTTP/1.1" 200 6119 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" show less	Web App Attack
🇩🇪 psauxit	2024-01-04 06:12:09 (2 years ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Hacking Web App Attack
🇨🇿 plzenskypruvodce.cz	2024-01-03 15:39:00 (2 years ago)	[Wed Jan 03 16:38:55.913393 2024] [access_compat:error] [pid 1108158:tid 140045553968896] [client 72 ... show more [Wed Jan 03 16:38:55.913393 2024] [access_compat:error] [pid 1108158:tid 140045553968896] [client 72.167.50.248:57138] AH01797: client denied by server configuration: /var/www/buchtic.net/blog/xmlrpc.php [Wed Jan 03 16:38:58.512100 2024] [access_compat:error] [pid 1108435:tid 140045746771712] [client 72.167.50.248:57174] AH01797: client denied by server configuration: /var/www/buchtic.net/blog/xmlrpc.php ... show less	Web App Attack
🇩🇪 ger-stg-sifi1	2024-01-02 20:35:07 (2 years ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇰 wnbhosting.dk	2023-12-31 19:54:05 (2 years ago)	WP xmlrpc [2023-12-31T20:54:05+01:00]	Hacking Web App Attack
🇨🇿 plzenskypruvodce.cz	2023-12-31 16:09:27 (2 years ago)	[Sun Dec 31 17:09:24.687262 2023] [access_compat:error] [pid 125793:tid 140045771949824] [client 72. ... show more [Sun Dec 31 17:09:24.687262 2023] [access_compat:error] [pid 125793:tid 140045771949824] [client 72.167.50.248:55584] AH01797: client denied by server configuration: /var/www/buchtic.net/blog/xmlrpc.php [Sun Dec 31 17:09:25.750370 2023] [access_compat:error] [pid 125793:tid 140045604325120] [client 72.167.50.248:55596] AH01797: client denied by server configuration: /var/www/buchtic.net/blog/xmlrpc.php ... show less	Web App Attack
🇩🇰 wnbhosting.dk	2023-12-29 14:30:16 (2 years ago)	WP xmlrpc [2023-12-29T15:30:16+01:00]	Hacking Web App Attack
🇺🇸 rsiddall	2023-12-28 22:14:25 (2 years ago)	72.167.50.248 - - [28/Dec/2023:17:14:24 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 ... show more 72.167.50.248 - - [28/Dec/2023:17:14:24 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 72.167.50.248 - - [28/Dec/2023:17:14:24 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Brute-Force
🇩🇰 wnbhosting.dk	2023-12-28 19:42:46 (2 years ago)	WP xmlrpc [2023-12-28T20:42:46+01:00]	Hacking Web App Attack
Anonymous	2023-12-27 23:05:05 (2 years ago)	hoingk.de 72.167.50.248 [28/Dec/2023:00:05:03 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5821 "-" "Mozil ... show more hoingk.de 72.167.50.248 [28/Dec/2023:00:05:03 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5821 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" hoingk.de 72.167.50.248 [28/Dec/2023:00:05:04 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5821 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" show less	Web App Attack
🇩🇪 Ba-Yu	2023-12-26 23:50:56 (2 years ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇬🇧 Swiptly	2023-12-21 16:48:06 (2 years ago)	WordPress xmlrpc spam or enumeration ...	Web Spam Bad Web Bot Web App Attack
🇩🇪 corthorn	2023-12-20 15:40:04 (2 years ago)	72.167.50.248 - - [20/Dec/2023:16:40:03 +0100] "POST /xmlrpc.php HTTP/1.1" 403 5557 "-" "Mozilla/5.0 ... show more 72.167.50.248 - - [20/Dec/2023:16:40:03 +0100] "POST /xmlrpc.php HTTP/1.1" 403 5557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36" ... show less	Brute-Force
Anonymous	2023-12-20 10:30:22 (2 years ago)	(wordpress) Failed wordpress login from 72.167.50.248 (US/United States/248.50.167.72.host.secureser ... show more (wordpress) Failed wordpress login from 72.167.50.248 (US/United States/248.50.167.72.host.secureserver.net) show less	Brute-Force

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.185

🇨🇦 184.147.158.234

🇷🇺 178.218.19.14

🇷🇺 178.218.16.14

🇮🇳 165.22.216.23

🇺🇸 147.185.132.62

🇺🇸 104.236.53.141

🇳🇱 89.21.67.177

🇳🇱 81.19.216.110

🇺🇸 47.88.78.6

🇬🇭 41.211.16.115

🇮🇳 34.100.184.133

🇨🇦 15.235.112.125

🇵🇱 176.115.248.66

🇫🇷 94.23.66.112

🇺🇸 47.88.93.234

🇮🇩 36.66.209.66

🇺🇸 23.94.37.69

🇺🇸 20.150.211.61

🇧🇷 200.233.201.54