JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.160.11.40

164.160.11.40 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 59%: ?

59%

ISP	PowerNet Liberia
Usage Type	Fixed Line ISP
ASN	AS328196
Domain Name	pwrnetworks.com
Country	🇱🇷 Liberia
City	Monrovia, Montserrado County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.160.11.40

Whois 164.160.11.40

IP Abuse Reports for 164.160.11.40:

This IP address has been reported a total of 16 times from 13 distinct sources. 164.160.11.40 was first reported on January 6th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 soverin	2026-07-24 18:28:02 (2 hours ago)	spam	Email Spam
🇺🇸 TPI-Abuse	2026-07-23 12:59:56 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 164.160.11.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 164.160.11.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 08:59:48.738936 2026] [security2:error] [pid 30735:tid 30735] [client 164.160.11.40:49721] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|faithlines.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "faithlines.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amIQRGLlYB4wbSP4ufjl9AAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-23 11:10:05 (1 day ago)	Wordfence waf block on baystatereentrynetwork	Web App Attack
🇧🇾 lns.bz	2026-07-21 11:26:52 (3 days ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇲🇹 Malta	2026-07-20 16:10:10 (4 days ago)	164.160.11.40 - - [20/Jul/2026:18:10:10 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 164.160.11.40 - - [20/Jul/2026:18:10:10 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 15:37:47 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 164.160.11.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 164.160.11.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:37:40.016406 2026] [security2:error] [pid 407:tid 407] [client 164.160.11.40:53256] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sharawi-gum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharawi-gum.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alj6xBGOT6AvFfx0WDBA5gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-16 10:58:03 (1 week ago)	Wordfence waf block on flintlocal432	Web App Attack
🇩🇪 big-cloud.nl	2026-07-16 09:03:29 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 Hazzard	2026-07-15 10:55:59 (1 week ago)	(wordpress) Failed wordpress login from 164.160.11.40 (LR/Liberia/Montserrado County/Monrovia/-/[red ... show more (wordpress) Failed wordpress login from 164.160.11.40 (LR/Liberia/Montserrado County/Monrovia/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇨🇭 Origon	2026-07-11 16:11:20 (1 week ago)	NOQUEUE - IP: 164.160.11.40 - Jul 11 18:11:20 plesk postfix/smtpd[3148157]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 164.160.11.40 - Jul 11 18:11:20 plesk postfix/smtpd[3148157]: NOQUEUE: reject: RCPT from unknown[164.160.11.40]: 554 5.7.1 Service unavailable; Client host [164.160.11.40] blocked using b.barracudacentral.org; http://www.barracudanetworks.com/reputation/?pr=1&ip=164.160.11.40; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[102.214.136.53]> show less	Email Spam
🇺🇸 gui-ying233	2026-07-09 00:12:11 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-29 12:29:37 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 cocquerez.com	2026-06-27 20:11:44 (3 weeks ago)	From DMARC report: sender email spoofing for 3 times	Spoofing
🇨🇭 Origon	2026-06-20 17:28:58 (1 month ago)	NOQUEUE - IP: 164.160.11.40 - Jun 20 19:28:57 plesk postfix/smtpd[2557785]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 164.160.11.40 - Jun 20 19:28:57 plesk postfix/smtpd[2557785]: NOQUEUE: reject: RCPT from unknown[164.160.11.40]: 554 5.7.1 Service unavailable; Client host [164.160.11.40] blocked using dnsbl-1.uceprotect.net; IP 164.160.11.40 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=164.160.11.40; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[164.160.11.40]> show less	Email Spam
🇩🇪 FeG Deutschland	2026-03-31 08:16:09 (3 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.94

🇸🇬 148.72.213.42

🇺🇸 147.185.132.182

🇺🇸 139.94.185.130

🇨🇳 111.35.36.48

🇮🇪 108.131.43.68

🇳🇱 77.83.39.17

🇺🇸 43.173.71.5

🇮🇪 34.244.113.45

🇨🇳 8.137.107.6

🇮🇪 2a05:d018:10df:d402:90c6:cc16:2b0d:8185

🇺🇸 2604:a880:400:d1:0:4:a536:c001

🇮🇳 2409:40d2:1f:306:8d64:26b:6ba5:c3b

🇰🇷 222.109.73.135

🇺🇸 165.154.172.111

🇺🇸 162.144.105.39

🇺🇸 140.174.186.101

🇺🇸 108.239.237.94

🇩🇪 93.152.224.102

🇸🇪 83.255.209.245