JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.210.252.137

72.210.252.137 was found in our database!

This IP was reported 353 times. Confidence of Abuse is 0%: ?

ISP	Cox Communications Inc.
Usage Type	Fixed Line ISP
ASN	AS22773
Hostname(s)	ipmapt-72-210-252-137.ph.ph.cox.net
Domain Name	cox.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.210.252.137

Whois 72.210.252.137

IP Abuse Reports for 72.210.252.137:

This IP address has been reported a total of 353 times from 126 distinct sources. 72.210.252.137 was first reported on February 5th 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 GunsawianHosting	2026-03-12 17:08:57 (5 months ago)	Open Proxy	Open Proxy
🇵🇱 cheatmaster.store	2026-02-26 06:30:17 (6 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: United States Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇺🇸 noah	2025-07-31 00:00:00 (1 year ago)	"Botnet, Web scraping and Account brute forcing"	DDoS Attack Open Proxy Brute-Force
🇵🇹 tiagozip	2025-03-17 13:58:58 (1 year ago)	open proxy	Open Proxy
🇲🇹 Malta	2024-08-27 13:27:59 (2 years ago)	72.210.252.137 - - [27/Aug/2024:15:27:58 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 72.210.252.137 - - [27/Aug/2024:15:27:58 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇦🇺 MAGIC	2024-08-24 09:02:48 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 nowyouknow	2024-08-22 20:00:45 (2 years ago)	(From [email protected]) Greetings, Want to connect with key business contacts? ADAMftd ... show more (From [email protected]) Greetings, Want to connect with key business contacts? ADAMftd at www.adamfortrade.com is your solution. Pre-subscribe to connect with the right people and get ahead of your competitors. Looking forward to your response show less	Phishing Web Spam
🇲🇹 Malta	2024-08-15 07:07:36 (2 years ago)	72.210.252.137 - - [15/Aug/2024:09:07:35 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 72.210.252.137 - - [15/Aug/2024:09:07:35 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇲🇹 Malta	2024-08-13 01:11:36 (2 years ago)	72.210.252.137 - - [13/Aug/2024:03:11:35 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 72.210.252.137 - - [13/Aug/2024:03:11:35 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇲🇹 Malta	2024-08-05 11:08:42 (2 years ago)	72.210.252.137 - - [05/Aug/2024:13:08:42 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 72.210.252.137 - - [05/Aug/2024:13:08:42 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇦🇺 MAGIC	2024-08-04 13:04:52 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 nowyouknow	2024-08-01 21:38:43 (2 years ago)	(From [email protected]) Hello, Shape the future of by completing the 2024 ... show more (From [email protected]) Hello, Shape the future of by completing the 2024 Business Confidence Survey In return you will receive tailored insights relevant to your industry. Your input will help create better policies and opportunities. It takes 5 minutes. Visit: www.businessconfidence.org or https://itc.formaloo.me/bce321. All responses are confidential. Opt-out https://itc.formaloo.me/p00hbb Regards, ITC. show less	Phishing Web Spam
🇺🇸 oncord	2024-07-30 04:14:33 (2 years ago)	Form spam	Web Spam
🇨🇭 backslash	2024-07-25 04:40:02 (2 years ago)		Web Spam
🇲🇹 Malta	2024-07-19 07:33:59 (2 years ago)	72.210.252.137 - - [19/Jul/2024:09:33:59 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 72.210.252.137 - - [19/Jul/2024:09:33:59 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 353 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 196.198.29.35

🇩🇪 169.150.201.134

🇫🇷 91.231.89.58

🇸🇬 34.143.205.124

🇮🇩 182.9.36.173

🇺🇸 172.239.62.109

🇺🇸 150.107.36.214

🇸🇬 139.99.9.21

🇱🇹 62.60.130.253

🇳🇱 45.142.193.164

🇬🇧 35.203.210.250

🇫🇷 195.154.31.143

🇬🇪 193.24.126.228

🇭🇰 139.198.113.29

🇺🇸 136.64.95.204

🇱🇻 62.60.130.242

🇺🇸 43.153.96.204

🇺🇸 35.193.127.196

🇺🇸 216.25.89.82

🇦🇺 202.130.220.210