AbuseIPDB » 103.219.169.166
103.219.169.166
This IP was reported 8 times. Confidence of
Abuse
is 4% : ?
ISP
Latitude.sh
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396356
Domain Name
latitude.sh
Country
🇨🇴
Colombia
City
Barrio San Luis, Bogota D.C.
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 103.219.169.166 :
This IP address has been reported a total of
8
times from
4 distinct
sources.
103.219.169.166 was first reported on
October 21st 2025 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-19 13:03:58
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 103.219.169.166 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.219.169.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 09:03:50.425332 2026] [security2:error] [pid 25834:tid 25834] [client 103.219.169.166:50719] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.219.169.166 (+1 hits since last alert)|thesalonx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "ajU-NrQudtlZ-_qNnQ2HwAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 23:38:10
(3 weeks ago)
(mod_security) mod_security (id:240335) triggered by 103.219.169.166 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.219.169.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 19:38:00.753207 2026] [security2:error] [pid 32049:tid 32049] [client 103.219.169.166:50471] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.219.169.166 (+1 hits since last alert)|odysseydogasporlari.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odysseydogasporlari.com"] [uri "/xmlrpc.php"] [unique_id "aheAWKRmHB_bKeQVdkSNlgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 23:19:50
(3 weeks ago)
(mod_security) mod_security (id:240335) triggered by 103.219.169.166 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.219.169.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 19:19:45.405084 2026] [security2:error] [pid 11237:tid 11237] [client 103.219.169.166:57717] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.219.169.166 (+1 hits since last alert)|thesalonx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "ahd8EeJNrUpSqAK6f2j07QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
[email protected]
2026-04-12 13:47:48
(2 months ago)
103.219.169.166 - - [12/Apr/2026:13:15:51 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5 ...
show more
103.219.169.166 - - [12/Apr/2026:13:15:51 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
103.219.169.166 - - [12/Apr/2026:13:15:53 +0200] "POST /xmlrpc.php HTTP/1.1" 403 841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
103.219.169.166 - - [12/Apr/2026:14:17:23 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇩🇪
abdubhai
2026-04-12 11:34:32
(2 months ago)
103.219.169.166 - - [12/Apr/2026
...
Brute-Force
🇩🇪
abdubhai
2026-04-09 04:35:16
(2 months ago)
103.219.169.166 - - [09/Apr/2026
...
Brute-Force
🇺🇸
TPI-Abuse
2026-02-19 18:39:52
(4 months ago)
(mod_security) mod_security (id:240335) triggered by 103.219.169.166 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.219.169.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 13:39:44.961110 2026] [security2:error] [pid 6017:tid 6017] [client 103.219.169.166:59699] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.219.169.166 (+1 hits since last alert)|www.goddesskink.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.goddesskink.com"] [uri "/new/xmlrpc.php"] [unique_id "aZdY8HZwsDBRBGfeoZYndAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-21 22:41:36
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: