JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.180.246.238

216.180.246.238 was found in our database!

This IP was reported 863 times. Confidence of Abuse is 0%: ?

ISP	NETWORK TRANSIT HOLDINGS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	crawler238.deepfield.net
Domain Name	networktransit.net
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 216.180.246.238 is an IP address from within our whitelist belonging to the subnet 216.180.246.0/24, which we identify as: "Deepfield Genome".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 216.180.246.238

Whois 216.180.246.238

IP Abuse Reports for 216.180.246.238:

This IP address has been reported a total of 863 times from 256 distinct sources. 216.180.246.238 was first reported on December 27th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 pingusurmars	2026-06-23 04:50:47 (8 hours ago)	Blocked by UFW on amperetwo [2577/tcp] Source port: 21119 TTL: 61 Packet length: 44 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [2577/tcp] Source port: 21119 TTL: 61 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mw	2026-06-23 01:56:33 (11 hours ago)	Web App Attack	Web App Attack
🇺🇸 mw	2026-06-22 01:26:11 (1 day ago)	Web App Attack	Web App Attack
🇩🇪 acadeova	2026-06-21 19:46:41 (1 day ago)	🚨 Recon detected (nft drop) SRC=216.180.246.238 Observed=TCP dpt=8080 in=enp0s6 ttl=59 Time=recent(j ... show more 🚨 Recon detected (nft drop) SRC=216.180.246.238 Observed=TCP dpt=8080 in=enp0s6 ttl=59 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇫🇷 LRNP	2026-06-21 16:27:10 (1 day ago)	_:80 216.180.246.238 - - [21/Jun/2026:16:27:10 +0000] "\x16\x03\x01\x00\xFD\x01\x00\x00\xF9\x03\x03\ ... show more _:80 216.180.246.238 - - [21/Jun/2026:16:27:10 +0000] "\x16\x03\x01\x00\xFD\x01\x00\x00\xF9\x03\x03\x12q\xE6\x88\x04\xAC\x0E\xE3\x8A{U\xE1\x07\xB8\xC3N\x19\xD9\x06\xF9\xC1\x03\xDA]k4K!\xD7m\xE1x \x82\xE44\xF5n}\xBD\xECh>\xC1ZM\xA7\xCE\xF5\xBB!\xBA\xCC,\x1F-P\x9E\x12V\xB6\x89gM\xAC\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" ... show less	Bad Web Bot Web App Attack
🇧🇷 diego	2026-06-21 15:35:27 (1 day ago)	[rede-188] 2026-06-21 15:15:39, Client: 216.180.246.238, Protocol: 6, Unauthorized activity to HTTP: ... show more [rede-188] 2026-06-21 15:15:39, Client: 216.180.246.238, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇩🇪 Justin F. \| AS204464	2026-06-21 15:16:42 (1 day ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 4764 [9] TCP Reported by: Justin ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 4764 [9] TCP Reported by: Justin F. show less	Port Scan
🇺🇸 Axel	2026-06-21 10:47:36 (2 days ago)	Blocked by UFW on LAXHH [2222/tcp] \| SPT: 21119 \| TTL: 56 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [2222/tcp] \| SPT: 21119 \| TTL: 56 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-21 05:57:12 (2 days ago)	Blocked by UFW on MVI [2085/tcp] \| SPT: 21119 \| TTL: 58 \| LEN: 44 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2085/tcp] \| SPT: 21119 \| TTL: 58 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 vfAcceloReporter	2026-06-21 01:56:37 (2 days ago)	216.180.246.238 - - [20/Jun/2026:22:56:33 -0300] "GET /login.htm HTTP/1.1" 404 125 "-" "Mozilla/5.0 ... show more 216.180.246.238 - - [20/Jun/2026:22:56:33 -0300] "GET /login.htm HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.238 - - [20/Jun/2026:22:56:34 -0300] "GET /login.html HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.238 - - [20/Jun/2026:22:56:35 -0300] "GET /login.jsp HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.238 - - [20/Jun/2026:22:56:36 -0300] "GET /login HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" 216.180.246.238 - - [20/Jun/2026:22:56:36 -0300] "GET /doc/index.html HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" ... show less	Brute-Force Web App Attack Exploited Host
🇺🇸 mw	2026-06-21 01:26:04 (2 days ago)	Web App Attack	Web App Attack
Anonymous	2026-06-20 22:20:17 (2 days ago)		Web App Attack
🇳🇱 0xffffffff	2026-06-20 15:43:14 (2 days ago)	[2026-06-20 18:40:39.189995] [authz_core:error] [pid 686683:tid 136825155618496] [client 216.180.246 ... show more [2026-06-20 18:40:39.189995] [authz_core:error] [pid 686683:tid 136825155618496] [client 216.180.246.238:21639] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/' [2026-06-20 18:41:57.191010] [authz_core:error] [pid 686683:tid 136824924083904] [client 216.180.246.238:21639] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/' [2026-06-20 18:43:08.197191] [authz_core:error] [pid 686683:tid 136825164011200] [client 216.180.246.238:45072] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/' [2026-06-20 18:43:09.204697] [authz_core:error] [pid 686683:tid 136825122047680] [client 216.180.246.238:45072] AH01630: client denied by server configuration: /var/www/html/manage , error_notes:wrong-host , URI:'/manage/account/login' [2026-06-20 18:43:11.959875] [authz_core:error] [pid 686683:tid 136825041581760] [client 216.180.246.238:45072] AH01630: client denied by server configuration show less	Web App Attack Bad Web Bot
🇺🇸 Carltonfsck	2026-06-20 09:05:45 (3 days ago)	216.180.246.238 - - [20/Jun/2026:09:05:41 +0000] "GET /manage/account/login HTTP/1.1" 404 49 216.180 ... show more 216.180.246.238 - - [20/Jun/2026:09:05:41 +0000] "GET /manage/account/login HTTP/1.1" 404 49 216.180.246.238 - - [20/Jun/2026:09:05:42 +0000] "GET /admin/index.html HTTP/1.1" 404 49 216.180.246.238 - - [20/Jun/2026:09:05:44 +0000] "GET /+CSCOE+/logon.html HTTP/1.1" 404 49 ... show less	Hacking Web App Attack
🇩🇪 Roper123	2026-06-20 06:34:04 (3 days ago)	Web exploits	Web App Attack

Showing 1 to 15 of 863 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 103.143.72.165

🇲🇻 43.247.143.223

🇷🇴 2.57.121.112

🇮🇩 202.145.0.61

🇬🇧 193.176.29.28

🇧🇷 189.15.10.179

🇨🇴 179.33.186.150

🇩🇪 167.94.146.60

🇺🇸 147.185.132.18

🇸🇬 142.91.102.186

🇩🇪 134.122.93.100

🇨🇳 116.179.32.36

🇮🇳 103.91.246.73

🇬🇧 92.41.231.154

🇷🇴 80.94.92.171

🇺🇸 64.62.156.224

🇷🇴 2.57.122.238

🇳🇱 212.8.242.38

🇨🇳 180.76.179.77

🇰🇷 121.169.119.154