JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.180.246.227

216.180.246.227 was found in our database!

This IP was reported 805 times. Confidence of Abuse is 0%: ?

ISP	NETWORK TRANSIT HOLDINGS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	crawler227.deepfield.net
Domain Name	networktransit.net
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 216.180.246.227 is an IP address from within our whitelist belonging to the subnet 216.180.246.0/24, which we identify as: "Deepfield Genome".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 216.180.246.227

Whois 216.180.246.227

IP Abuse Reports for 216.180.246.227:

This IP address has been reported a total of 805 times from 245 distinct sources. 216.180.246.227 was first reported on December 27th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Duggy_Tuxy🧱	2026-06-22 07:11:20 (9 hours ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Web Attack)	Web App Attack Hacking Port Scan
🇫🇷 masterguru	2026-06-21 16:08:23 (1 day ago)	Port Scan detected from 216.180.246.227 (FR/France/crawler227.deepfield.net). 11 hits in the last ... show more Port Scan detected from 216.180.246.227 (FR/France/crawler227.deepfield.net). 11 hits in the last 50 seconds (0-131) show less	Port Scan
🇺🇸 kuj	2026-06-21 06:15:22 (1 day ago)	2026-06-21T00:13:31.715421-06:00 derpamp-oci derper[287106]: 2026/06/21 00:13:31 http: TLS handshake ... show more 2026-06-21T00:13:31.715421-06:00 derpamp-oci derper[287106]: 2026/06/21 00:13:31 http: TLS handshake error from 216.180.246.227:21266: acme/autocert: missing server name 2026-06-21T00:14:20.106706-06:00 derpamp-oci derper[287106]: 2026/06/21 00:14:20 http: TLS handshake error from 216.180.246.227:21266: acme/autocert: missing server name 2026-06-21T00:15:21.912253-06:00 derpamp-oci derper[287106]: 2026/06/21 00:15:21 http: TLS handshake error from 216.180.246.227:21266: acme/autocert: missing server name ... show less	Port Scan Brute-Force
🇵🇱 genokrad	2026-06-20 23:30:39 (1 day ago)	Direct ip access to website TCP 80/443 [Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.no ... show more Direct ip access to website TCP 80/443 [Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.]. show less	Port Scan Web App Attack
🇩🇪 acadeova	2026-06-20 15:14:26 (2 days ago)	Blocked by UFW on vps2 [443/tcp] Source port: 21372 TTL: 58 Packet length: 44 TOS: 0x00 This report ... show more Blocked by UFW on vps2 [443/tcp] Source port: 21372 TTL: 58 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 librebit	2026-06-20 12:59:01 (2 days ago)	Brute force	Brute-Force
🇧🇪 webbie	2026-06-20 07:22:28 (2 days ago)	216.180.246.227 - - [20/Jun/2026:09:22:21 +0200] "GET /manage/account/login HTTP/1.1" 404 381 "-" "M ... show more 216.180.246.227 - - [20/Jun/2026:09:22:21 +0200] "GET /manage/account/login HTTP/1.1" 404 381 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.227 - - [20/Jun/2026:09:22:22 +0200] "GET /admin/index.html HTTP/1.1" 404 381 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.227 - - [20/Jun/2026:09:22:24 +0200] "GET /+CSCOE+/logon.html HTTP/1.1" 404 381 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.227 - - [20/Jun/2026:09:22:25 +0200] "GET /cgi-bin/login.cgi HTTP/1.1" 404 381 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.227 - - [20/Jun/2026:09:22:26 +0200] "GET /login.htm HTTP/1.1" 404 381 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" ... show less	Brute-Force Web App Attack
🇲🇿 delsio	2026-06-20 05:28:49 (2 days ago)	AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=216.180.246.227; destinat ... show more AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=216.180.246.227; destination=196.10.148.127; destination_port=2050; score=110; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence ntopng_blacklisted alert=Live Flow High Score dst=196.10.148.127 port=2050 show less	Port Scan
🇩🇪 Ano_Nym	2026-06-20 00:27:06 (2 days ago)	CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/http-admin-interface-probing	Web App Attack
🇲🇿 delsio	2026-06-20 00:11:34 (2 days ago)	AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=216.180.246.227; destinat ... show more AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=216.180.246.227; destination=196.10.148.66; destination_port=1988; score=110; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence ntopng_blacklisted alert=Live Flow High Score dst=196.10.148.66 port=1988 show less	Port Scan
🇳🇱 WinnieHoneypots	2026-06-19 22:20:49 (2 days ago)	📡 TCP port scanner, 5 or more hits, last seen on port 1935 1935 1935	Port Scan
🇺🇸 en0	2026-06-19 21:34:07 (2 days ago)	216.180.246.227 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident co ... show more 216.180.246.227 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 425 show less	Port Scan
🇨🇳 WMK965	2026-06-19 17:19:33 (2 days ago)	216.180.246.227 - - [20/Jun/2026:01:18:53 +0800] "\x16\x03\x01\x00\xFD\x01\x00\x00\xF9\x03\x03\x5C\x ... show more 216.180.246.227 - - [20/Jun/2026:01:18:53 +0800] "\x16\x03\x01\x00\xFD\x01\x00\x00\xF9\x03\x03\x5C\xF1\xB5\xF4:\xD7\xF1\x7Fy\xB4\xEEK\x05\x9A\xF2B#T\xB4\x95:\xE9\xB9\xB3\x02\x890#\xE1rp\xAB :\x88\x0ET[\x13q,\xAE\xBC\xD9O\x86m\xE0\xC5Y\x80\xB0/\x00\x8F\xBE\xC5z\xC9b\x0B\xD8h\xDB\x14\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 154 "-" "-" "-" 216.180.246.227 - - [20/Jun/2026:01:19:28 +0800] "GET /manage/account/login HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" 216.180.246.227 - - [20/Jun/2026:01:19:31 +0800] "GET /admin/index.html HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" show less	Port Scan Web App Attack
🇷🇴 abuse_IP_reporter	2026-06-18 17:45:07 (3 days ago)	Jun 18 19:50:32 server UFW BLOCK SRC=216.180.246.227 PROTO=TCP SPT=21578 DPT=441	Port Scan
🇧🇷 opastorello	2026-06-18 17:42:29 (3 days ago)	T-Pot honeypot: 53 hits in 15min on port(s) 4248 (P0f/Honeytrap/Suricata). Port scan / unsolicited c ... show more T-Pot honeypot: 53 hits in 15min on port(s) 4248 (P0f/Honeytrap/Suricata). Port scan / unsolicited connection. Automated report. show less	Port Scan

Showing 1 to 15 of 805 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.218.19.202

🇺🇸 185.191.171.13

🇪🇸 185.13.77.240

🇺🇸 173.249.253.253

🇮🇹 172.238.232.7

🇺🇸 139.55.21.87

🇨🇳 118.81.200.230

🇳🇵 103.156.26.25

🇺🇦 81.162.102.192

🇲🇾 47.250.133.70

🇹🇭 1.20.176.112

🇹🇼 220.129.12.96

🇦🇺 203.221.144.203

🇹🇼 198.235.24.22

🇷🇺 188.187.99.121

🇸🇪 188.151.160.50

🇦🇷 186.61.188.156

🇦🇷 179.62.46.59

🇺🇸 173.249.253.211

🇺🇸 173.249.253.120