Skip to content
InternetData
IPv4 address

180.149.228.246

An address in Sydney, New South Wales, Australia, used by Ransom IT Infrastructure, announced by Host Universal Pty Ltd (AS136557). It's a VPN exit of FrootVPN, hosting space of Host Universal, an SSH server on port 22, a web server on port 80, and a BitTorrent peer.

Summary

Geolocation
Sydney, New South Wales
  • VPNFrootVPN
  • HostingHost Universal

No mobile carrier, anycast or CDN

  • SSHPort 22
  • WebPort 80
  • BitTorrent

Geolocation

Where the address is, and what that place uses.

City
Sydney
Region
New South Wales
Postal code
1001
Country
Australia
Continent
Oceania
Timezone
Australia/Sydney
Currency
AUD
Name
Dollar
Symbol
A$

Ownership

Who holds the address: the AS announcing it, the registry record, the abuse contact and its name in DNS.

Company
Ransom IT Infrastructure
Domain
ransomit.com.au
Type
Business
Registered in
Australia
AS number
AS136557
Name
Host Universal Pty Ltd
RPKI
Not found
Type
Hosting
Domain
hostuniversal.com.au
Registered in
Australia
Name
Ransom_IT_Infrastructure
Network name
Ransom_IT_Infrastructure
Status
ALLOCATED NON-PORTABLE
Registry
APNIC
Domain
hostroyale.com
Name
ABUSE HOSTROYALETECHNOLOGIESIN
Address
Office Number 101, City Mall, Ganeshkhind Road, Pune 411007
Network
180.149.228.0-180.149.228.255
Not seen inIP RWHOISIP RDNS

Anonymity

Whether the address hides someone else: a VPN, Tor, a relay, a proxy pool, or a hosting range.

Provider
FrootVPN
Confidence
High
Last seen
2026-11-08
Provider
Host Universal
Confidence
High
Last seen
2026-11-08

Network

What kind of network it is on: a mobile carrier, a satellite operator, an anycast service, a CDN edge.

Services

What our own internet-wide measurement found listening on it.

Port
22
Banner
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
Host key
SHA256:62956c7dc27d94e6c12080d50229086d79f4bfd6729f7cd33641dbd1eaf65923
Handshake
Completed
First seen
2026-08-12
Last seen
2026-11-05
80 status
403
80 server
nginx/1.14.0 (Ubuntu)
80 title
403 Forbidden
80 seen
2026-08-12 to 2026-11-07
Verified
No
ID matches IP
Yes
Clients
Not identified
Ports
4
Most on one day
2
First seen
2026-10-29
Last seen
2026-11-06
Last reachable
Never
00 · Evaluate

Test the real build first.

An evaluation license puts a full current build in your hands, with no sampling, so you can measure it against your own traffic before anyone talks about terms.

01 · License

Then license what you use.

Standard, for detection and decisions inside your own product and operations.
Redistribution, when the data ships onward inside what you sell, priced by scope rather than by seat.
Annual terms, a named contact, and monthly, quarterly or yearly payment.