JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.60.160.239

41.60.160.239 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 89%: ?

89%

ISP	Liquid Telecommunications Operations Limited
Usage Type	Fixed Line ISP
ASN	AS30844
Domain Name	liquid.tech
Country	🇿🇲 Zambia
City	Lusaka, Lusaka Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.60.160.239

Whois 41.60.160.239

IP Abuse Reports for 41.60.160.239:

This IP address has been reported a total of 22 times from 15 distinct sources. 41.60.160.239 was first reported on July 24th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-25 21:33:08 (2 hours ago)	(mod_security) mod_security (id:240335) triggered by 41.60.160.239 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.60.160.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 17:33:00.410639 2026] [security2:error] [pid 1817281:tid 1817281] [client 41.60.160.239:60162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.60.160.239 (+1 hits since last alert)\|motherlyhomecare.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "motherlyhomecare.com"] [uri "/xmlrpc.php"] [unique_id "amUrjOPoWv-1xebvtwh7WgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 20:50:27 (2 hours ago)	(mod_security) mod_security (id:240335) triggered by 41.60.160.239 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.60.160.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 16:50:22.239139 2026] [security2:error] [pid 2064287:tid 2064287] [client 41.60.160.239:54776] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.60.160.239 (+1 hits since last alert)\|bigholegolf.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bigholegolf.com"] [uri "/xmlrpc.php"] [unique_id "amUhjm0d9BmGYKk64HOCgQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-25 17:13:20 (6 hours ago)	(xmlrpc) Apache: Failed xmlrpc access from 41.60.160.239 (MU/Mauritius/-): 10 in the last 3600 secs ... show more (xmlrpc) Apache: Failed xmlrpc access from 41.60.160.239 (MU/Mauritius/-): 10 in the last 3600 secs (0-201) show less	Hacking
🇩🇪 ghostwarriors	2026-07-25 12:50:32 (10 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-25 12:45:22 (11 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-25 12:43:48 (11 hours ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
Anonymous	2026-07-25 08:57:20 (14 hours ago)	[redacted] 41.60.160.239 - - [25/Jul/2026:10:56:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 41.60.160.239 - - [25/Jul/2026:10:56:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 41.60.160.239 - - [25/Jul/2026:10:56:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 41.60.160.239 - - [25/Jul/2026:10:56:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 41.60.160.239 - - [25/Jul/2026:10:57:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" [redacted] 41.60.160.239 - - [25/Jul/2026:10:57:19 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site27232215.com" ... show less	Hacking Web App Attack
🇺🇸 IndigoRidge	2026-07-25 06:27:23 (17 hours ago)	41.60.160.239 - - [25/Jul/2026:02:26:09 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.c ... show more 41.60.160.239 - - [25/Jul/2026:02:26:09 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" 41.60.160.239 - - [25/Jul/2026:02:26:30 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" 41.60.160.239 - - [25/Jul/2026:02:26:51 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" 41.60.160.239 - - [25/Jul/2026:02:27:02 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" 41.60.160.239 - - [25/Jul/2026:02:27:23 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇩🇪 pscriptos	2026-07-25 03:18:07 (20 hours ago)	{"ClientAddr":"41.60.160.239:28419","ClientHost":"41.60.160.239","ClientPort":"28419","ClientUsernam ... show more {"ClientAddr":"41.60.160.239:28419","ClientHost":"41.60.160.239","ClientPort":"28419","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":418484239,"OriginContentSize":418,"OriginDuration":414721587,"OriginStatus":403,"Overhead":3762652,"RequestAddr":"www.cleveradmin.de","RequestContentSize":724,"RequestCount":1948343,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-07-25T05:17:45.078818019+02:00","StartUTC":"2026-07-25T03:17:45.078818019Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-25T05:17:45+02:00"} {"ClientAddr":"41.60.160.239:28419","ClientHost":"41.60.160.239"," ... show less	Brute-Force Web App Attack
Anonymous	2026-07-25 01:36:43 (22 hours ago)	[redacted] 41.60.160.239 - - [25/Jul/2026:03:35:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "J ... show more [redacted] 41.60.160.239 - - [25/Jul/2026:03:35:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 41.60.160.239 - - [25/Jul/2026:03:36:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.5; WordPress/6.4; http://site61932336.com" [redacted] 41.60.160.239 - - [25/Jul/2026:03:36:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.1; WordPress/6.1; http://site61883198.com" [redacted] 41.60.160.239 - - [25/Jul/2026:03:36:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.5; WordPress/6.3; http://site20794037.com" [redacted] 41.60.160.239 - - [25/Jul/2026:03:36:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.5; WordPress/6.4; http://site55979859.com" [redacted] 41.60.160.239 - - [25/Jul/2026:03:36:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" [redacted] 41.60.160.239 - - [25/Jul/2026:03:36:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12 ... show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-07-25 01:29:14 (22 hours ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇫🇮 YF	2026-07-25 01:00:40 (22 hours ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇫🇷 applemooz	2026-07-24 23:52:14 (23 hours ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-07-24 18:34:48 (1 day ago)	41.60.160.239 - - [24/Jul/2026:14:33:03 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5547 "-" "WordPress.c ... show more 41.60.160.239 - - [24/Jul/2026:14:33:03 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5547 "-" "WordPress.com; https://wordpress.com" 41.60.160.239 - - [24/Jul/2026:14:33:35 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5547 "-" "WordPress.com; https://wordpress.com" 41.60.160.239 - - [24/Jul/2026:14:33:45 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5547 "-" "WordPress.com; https://wordpress.com" 41.60.160.239 - - [24/Jul/2026:14:34:06 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5547 "-" "WordPress.com; https://wordpress.com" 41.60.160.239 - - [24/Jul/2026:14:34:48 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5547 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 16:31:55 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 41.60.160.239 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.60.160.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 12:31:51.464790 2026] [security2:error] [pid 1106399:tid 1106423] [client 41.60.160.239:51196] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.60.160.239 (+1 hits since last alert)\|luxury.management\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "luxury.management"] [uri "/xmlrpc.php"] [unique_id "amOTd1961_30O-foJdHPyAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.178.222.59

🇺🇸 74.235.96.117

🇯🇵 205.234.228.196

🇧🇳 119.160.166.237

🇮🇩 103.66.62.87

🇩🇪 193.27.14.243

🇻🇳 165.154.105.128

🇰🇷 119.196.213.196

🇨🇳 115.191.32.68

🇪🇬 82.201.143.184

🇸🇬 45.8.25.72

🇺🇸 40.121.200.75

🇧🇬 79.124.49.226

🇺🇸 157.55.39.6

🇮🇳 152.32.158.219

🇭🇰 118.193.39.103

🇷🇴 92.118.39.209

🇷🇺 5.139.77.6

🇸🇬 4.194.24.143

🇨🇦 2400:cb00:786:1000:3b79:a4aa:2152:f80e