JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.219.169.7

103.219.169.7 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 11%: ?

11%

ISP	Latitude.sh
Usage Type	Content Delivery Network
ASN	AS396356
Domain Name	latitude.sh
Country	🇨🇴 Colombia
City	Barrio San Luis, Bogota D.C.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.219.169.7

Whois 103.219.169.7

IP Abuse Reports for 103.219.169.7:

This IP address has been reported a total of 24 times from 15 distinct sources. 103.219.169.7 was first reported on December 14th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 pengpeng	2026-08-21 13:51:41 (2 days ago)	monitor: on VM-0-7-ubuntu \| port: 52939 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 52939 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-08-21 05:54:37 (2 days ago)	monitor: on VM-0-7-ubuntu \| port: 48910 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 48910 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-24 19:01:29 (1 month ago)	Blocked by UFW (TCP on 6921) Source port: 12373 TTL: 48 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6921) Source port: 12373 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 103.219.169.7) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 filstal.org	2026-05-01 09:39:06 (3 months ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; PPC Mac OS X 10_11_2) AppleWebKit/535.2 (K ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; PPC Mac OS X 10_11_2) AppleWebKit/535.2 (KHTML; like Gecko) Chrome/47.0.884.0 Safari/535.2). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-04-16 07:20:26 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -91.495 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -91.495 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 11_3_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.43 show less	Web App Attack Bad Web Bot
🇺🇸 xmission.com	2026-03-16 17:49:28 (5 months ago)	Blocked by UFW (TCP on 1) Source port: 30629 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 30629 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 103.219.169.7) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-12-30 10:12:03 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇫🇷 dynamix	2025-12-29 07:26:27 (7 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 ipblock.com	2025-12-17 09:57:00 (8 months ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-17 09:46:22 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 103.219.169.7 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 103.219.169.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 04:46:14.514491 2025] [security2:error] [pid 7685:tid 7685] [client 103.219.169.7:25988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.backstore.com"] [uri "/.env"] [unique_id "aUJ75n_PnEdyVUITTvu03AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-12-17 09:29:36 (8 months ago)	Multiple WAF Violations	Web App Attack
🇪🇸 el-brujo	2025-12-17 08:25:38 (8 months ago)	Cloudflare WAF: Request Path: /.env Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 ( ... show more Cloudflare WAF: Request Path: /.env Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0 Action: block Source: firewallManaged ASN Description: LATITUDE-SH Country: CO Method: GET Timestamp: 2025-12-17T08:25:38Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 everkey	2025-12-16 19:32:00 (8 months ago)		Web Spam Bad Web Bot Web App Attack
Anonymous	2025-12-16 14:15:01 (8 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 ipblock.com	2025-12-16 08:18:00 (8 months ago)	IPBlock protected site ID [4055-d][s=01]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 201.217.12.57

🇺🇸 149.22.84.103

🇰🇿 89.218.231.130

🇨🇳 60.28.38.66

🇩🇪 216.26.254.135

🇳🇱 195.178.110.30

🇫🇷 193.32.126.231

🇺🇸 147.185.132.47

🇺🇸 134.122.126.211

🇸🇬 118.139.164.171

🇩🇪 104.207.63.220

🇫🇷 85.217.140.37

🇧🇬 79.124.58.198

🇳🇱 45.148.10.151

🇯🇵 45.32.37.87

🇩🇪 194.187.176.90

🇺🇸 167.99.51.115

🇺🇸 162.216.150.30

🇺🇸 154.16.115.34

🇺🇸 136.66.210.89