Network Report

AS396356 — Latitude.sh

What Predax has observed across this network's address space, and what it means for traffic screening.

Addresses observed
173
99% carried a flag

About this network

Latitude.sh (AS396356) is commercial hosting space — servers rented by whoever pays for them, not connections an ISP assigns to homes. Traffic from the 173 addresses we have observed here is almost always software: monitors, API clients, scrapers, and services someone deployed.

Of those addresses, 99% carry the datacenter flag and 1% are known VPN endpoints, and 2 (1%) carried a notable risk score of 40 or higher when last checked. Hosting space is neutral in itself — the same racks hold uptime monitors and credential-stuffing scripts — so the risk share, not the datacenter flag, is the number to read.

Observed
173
distinct addresses checked
Flagged
99%
171 with any threat flag
Notable risk
1%
2 scoring 40+
Countries
11
where addresses geolocate

Flag composition

Share of observed addresses carrying each classification when last checked.

VPN11%
Proxy00%
Tor00%
Datacenter17199%

Geography

United States
107
Mexico
42
Australia
5
United Kingdom
5
Argentina
4
Germany
4
Most-seen cities

Ashburn (US) · Mexico City (MX) · London (GB) · New York (US) · Sydney (AU) · Salt Lake City (US)

Observation window

Addresses on this network have been looked up through Predax between February 10, 2026 and August 31, 2026. Each figure on this page reflects an address's most recent check, not a permanent record.

Geographically, the observed addresses span 11 countries, with the largest share (107 of 173) geolocating to United States.

Should you screen traffic from this network?

Traffic from hosting space is rarely a person on a browser, so friction here is cheap: rate limits, bot checks and challenges cost you almost no real visitors. Reserve outright blocks for addresses whose individual score justifies it.

Before blocking an address here, check whether it belongs to a service you actually rely on — uptime monitors, payment webhooks and integrations all live in networks like this one.

Addresses observed on this network

A sample of the most-looked-up addresses — each links to its full report. Capped at 12.

Check Another IP