JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.219.169.180

103.219.169.180

Neutral Activity

35 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Latitude.sh

Usage Type

Content Delivery Network

ASN

AS396356

Domain Name

latitude.sh

Country

🇨🇴 Colombia

City

Barrio San Luis, Bogota D.C.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.219.169.180 has been reported 35 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.219.169.180:

This IP address has been reported a total of 35 times from 26 distinct sources. 103.219.169.180 was first reported on December 2nd 2024, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-06-30 17:16:22 (2 months ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇩🇪 EGP Abuse Dept	2026-06-21 06:37:22 (2 months ago)	Scanning for port/service exploits on tpc-015.mach3builders.nl	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-17 09:09:04 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 103.219.169.180 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.219.169.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 05:08:58.229419 2026] [security2:error] [pid 16526:tid 16526] [client 103.219.169.180:50714] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.219.169.180 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "ajJkKnAp1Dp3KbhLBrF62wAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 23:34:53 (3 months ago)	(mod_security) mod_security (id:240335) triggered by 103.219.169.180 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.219.169.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 19:34:48.175618 2026] [security2:error] [pid 18983:tid 18983] [client 103.219.169.180:58310] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.219.169.180 (+1 hits since last alert)\|odysseydogasporlari.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odysseydogasporlari.com"] [uri "/xmlrpc.php"] [unique_id "ahzFmIbX27eSHQ4nfSQQ8gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 14:54:52 (3 months ago)	(mod_security) mod_security (id:240335) triggered by 103.219.169.180 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.219.169.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 10:54:47.105517 2026] [security2:error] [pid 7895:tid 7895] [client 103.219.169.180:62322] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.219.169.180 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "ahcFt88338K2lERei6SXPwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 [email protected]	2026-04-29 15:41:44 (4 months ago)	103.219.169.180 - - [29/Apr/2026:17:16:27 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5 ... show more 103.219.169.180 - - [29/Apr/2026:17:16:27 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇮🇹 [email protected]	2026-04-29 15:16:28 (4 months ago)	[Wed Apr 29 17:16:27.099894 2026] [authz_core:error] [pid 4152698:tid 4152803] [client 103.219.169.1 ... show more [Wed Apr 29 17:16:27.099894 2026] [authz_core:error] [pid 4152698:tid 4152803] [client 103.219.169.180:61572] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/xmlrpc.php ... show less	Brute-Force Web App Attack
🇮🇹 [email protected]	2026-04-13 01:55:57 (4 months ago)	103.219.169.180 - - [13/Apr/2026:02:16:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5 ... show more 103.219.169.180 - - [13/Apr/2026:02:16:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 103.219.169.180 - - [13/Apr/2026:02:16:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 103.219.169.180 - - [13/Apr/2026:03:17:01 +0200] "POST /xmlrpc.php HTTP/1.1" 403 841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 abdubhai	2026-04-13 00:38:35 (4 months ago)	103.219.169.180 - - [13/Apr/2026 ...	Brute-Force
🇺🇸 wswd.net	2026-01-04 19:29:16 (8 months ago)	AutoBlocked by WSWD Security	Port Scan Hacking Brute-Force SSH
🇮🇩 Kencang.ID	2025-12-12 23:13:14 (8 months ago)	Failed Login Attempt 2025-12-12 23:13:14 \| 103.219.169.180 \| Desktop \| Google Chrome \| Bogotá, Bogot ... show more Failed Login Attempt 2025-12-12 23:13:14 \| 103.219.169.180 \| Desktop \| Google Chrome \| Bogotá, Bogota D.C., Colombia \| Latitude.sh \| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 show less	FTP Brute-Force Brute-Force
Anonymous	2025-10-27 16:15:34 (10 months ago)	XMLRPC Hack Attempts	Hacking Brute-Force
🇮🇹 VHosting	2025-10-27 15:50:12 (10 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2025-10-27 13:48:13 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇳🇱 exxos	2025-09-09 21:03:01 (11 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.114.105.59

🇪🇸 84.236.153.81

🇭🇰 2602:80d:1003::32

🇭🇷 213.147.113.186

🇧🇪 198.235.24.134

🇫🇷 194.163.189.40

🇨🇴 177.8.77.170

🇺🇸 147.185.132.72

🇺🇸 144.172.102.126

🇧🇩 123.200.9.4

🇵🇱 109.205.211.110

🇮🇩 103.31.158.18

🇨🇦 85.217.149.14

🇩🇪 46.224.112.98

🇧🇷 45.190.141.254

🇮🇩 36.37.73.242

🇻🇳 14.225.251.219

🇨🇳 14.103.111.16

🇷🇴 2.57.121.112

🇳🇱 2a0f:ca80:b00b:ce63::5