JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

69.163.180.19

Neutral Activity

Abuse Confidence Score

0% Low Risk

115 reports

58 reporters · latest 2 months ago

ISP: New Dream Network, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS26347
Hostname(s): pdx1-shared-a1-12.dreamhost.com
Domain Name: dreamhost.com
Country: 🇺🇸 United States of America
City: Hillsboro, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

69.163.180.19 has been reported 115 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

115 from 58 distinct reporters

First reported

November 17th 2024

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dot.mg	2026-09-07 22:07:01 UTC · (2 months ago)	Bad behaviour	Web Spam
🇺🇸 xpto	2026-09-07 20:13:59 UTC · (2 months ago)	Blocked for probing for web application vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 20:11:08 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:11:00.519204 2026] [security2:error] [pid 14407:tid 14407] ... show more (mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:11:00.519204 2026] [security2:error] [pid 14407:tid 14407] [client 69.163.180.19:42248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kporterdesign.com"] [uri "/wp-config.php.save"] [unique_id "ap8aVGB1N4gI9yXBKj6m7QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-07 19:31:05 UTC · (2 months ago)	CPOWCO WEBEXPLOIT 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com)	Web App Attack
🇮🇩 penjaga BRIN	2026-09-07 18:30:34 UTC · (2 months ago)	Suspicious malicious activity	Hacking
🇺🇸 TPI-Abuse	2026-09-07 17:54:31 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:54:26.177176 2026] [security2:error] [pid 5903:tid 5903] [c ... show more (mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:54:26.177176 2026] [security2:error] [pid 5903:tid 5903] [client 69.163.180.19:56372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brazilianbottom.com"] [uri "/wp-config.php.bak"] [unique_id "ap76UjFR4a8mDO_p9JVlOQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 17:15:36 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:15:32.953442 2026] [security2:error] [pid 5968:tid 5968] [c ... show more (mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:15:32.953442 2026] [security2:error] [pid 5968:tid 5968] [client 69.163.180.19:33670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thomasgardner.com"] [uri "/wp-config.php~"] [unique_id "ap7xNFtAAcvB_0sMGASTDQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-07 16:03:57 UTC · (2 months ago)	PARMACOM WEBEXPLOIT 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com)	Web App Attack
Anonymous	2026-09-07 16:01:35 UTC · (2 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 15:45:40 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 11:45:35.453793 2026] [security2:error] [pid 3005:tid 3005] [c ... show more (mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 11:45:35.453793 2026] [security2:error] [pid 3005:tid 3005] [client 69.163.180.19:39852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wordpress.americanacademyofteachersofsinging.org"] [uri "/wp-config.php~"] [unique_id "ap7cH1gm2JAzQvvPTdxk3QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TAY	2026-09-07 15:20:13 UTC · (2 months ago)	69.163.180.19 - - [07/Sep/2026:23:20:10 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 69.163.180.19 - - [07/Sep/2026:23:20:10 +0 ... show more 69.163.180.19 - - [07/Sep/2026:23:20:10 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 69.163.180.19 - - [07/Sep/2026:23:20:10 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 72077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 69.163.180.19 - - [07/Sep/2026:23:20:11 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 69.163.180.19 - - [07/Sep/2026:23:20:11 +0800] "GET /wp-config.php~ HTTP/1.1" 404 72077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 69.163.180.19 - - [07/Sep/2026:23:20:12 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge ... show less	Brute-Force
🇵🇱 heterodyna.pl	2026-09-07 14:42:56 UTC · (2 months ago)	Skan 404/probe: /wp-content/plugins/wp-file-manager/ URL: /wp-content/plugins/wp-file-manager/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-07 14:05:06 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 10:05:00.650922 2026] [security2:error] [pid 23821:tid 23821] ... show more (mod_security) mod_security (id:210492) triggered by 69.163.180.19 (pdx1-shared-a1-12.dreamhost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 10:05:00.650922 2026] [security2:error] [pid 23821:tid 23821] [client 69.163.180.19:55734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gracebaptisthartsville.com"] [uri "/wp-config.php.bak"] [unique_id "ap7EjKPOuWbLtwE84uoO2QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 HamSammich	2026-09-07 13:59:57 UTC · (2 months ago)	Automated sensor: 2 HTTPS connection/probe attempts over the last 24h (latest 2026-09-07T13:59Z).	Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-09-07 13:15:02 UTC · (2 months ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 139.59.64.245

🇺🇸 2400:cb00:11:1000:f1a:428d:393b:832c

🇧🇪 198.235.24.129

🇩🇪 196.251.121.125

🇵🇱 172.64.200.231

🇧🇩 163.61.156.21

🇺🇸 54.89.100.45

🇮🇶 37.237.58.158

🇺🇸 8.228.241.55

🇳🇱 193.176.31.248

🇸🇬 155.103.48.7

🇳🇱 138.226.239.233

🇧🇷 137.131.139.17

🇨🇳 121.204.171.142

🇺🇸 98.190.61.247

🇮🇳 49.37.86.25

🇵🇱 2400:cb00:73:1000:403f:5705:5501:b170

🇵🇱 2400:cb00:73:1000:bea:4924:919a:e39f

🇲🇽 187.175.27.146

🇵🇱 172.68.159.115