City: Santa Clara
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 104.164.0.0 - 104.165.255.255
CIDR: 104.164.0.0/15
NetName: EGNL-1
NetHandle: NET-104-164-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: EGIHosting (EGNL-1)
RegDate: 2014-07-22
Updated: 2023-05-09
Comment: Geofeed https://geofeed.egihosting.com/geofeed.csv
Ref: https://rdap.arin.net/registry/ip/104.164.0.0
OrgName: EGIHosting
OrgId: EGNL-1
Address: 3223 Kenneth Street
City: Santa Clara
StateProv: CA
PostalCode: 95054
Country: US
RegDate: 2007-07-23
Updated: 2026-04-20
Comment: http://egihosting.com
Comment: Geofeed https://geofeed.egihosting.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/EGNL-1
OrgRoutingHandle: NOC2660-ARIN
OrgRoutingName: Network Operations Center
OrgRoutingPhone: +1-888-808-8806
OrgRoutingEmail: noc@egihosting.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/NOC2660-ARIN
OrgTechHandle: DOTOM3-ARIN
OrgTechName: Do, Tommy
OrgTechPhone: +1-888-808-8806
OrgTechEmail: tommy@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/DOTOM3-ARIN
OrgTechHandle: KTBIJ-ARIN
OrgTechName: KT, Bijoy
OrgTechPhone: +1-888-808-8806
OrgTechEmail: bijoy@americancloud.com
OrgTechRef: https://rdap.arin.net/registry/entity/KTBIJ-ARIN
OrgNOCHandle: NOC2660-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-888-808-8806
OrgNOCEmail: noc@egihosting.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC2660-ARIN
OrgTechHandle: TRANH54-ARIN
OrgTechName: Tran, Hung
OrgTechPhone: +1-408-581-1984
OrgTechEmail: htran@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/TRANH54-ARIN
OrgTechHandle: CHENJ-ARIN
OrgTechName: Chen, James
OrgTechPhone: +1-408-228-4448
OrgTechEmail: james@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/CHENJ-ARIN
OrgTechHandle: HERNA1269-ARIN
OrgTechName: Hernandez, Aaron
OrgTechPhone: +1-408-228-4448
OrgTechEmail: aaron@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/HERNA1269-ARIN
OrgTechHandle: SIMKI10-ARIN
OrgTechName: Simkiss, John
OrgTechPhone: +1-408-228-4448
OrgTechEmail: jas3@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/SIMKI10-ARIN
OrgAbuseHandle: ABUSE1715-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-888-808-8806
OrgAbuseEmail: abuse@egihosting.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1715-ARIN
OrgTechHandle: KUMAR396-ARIN
OrgTechName: kumar, Indhira
OrgTechPhone: +1-408-228-4448
OrgTechEmail: indra.kumar@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/KUMAR396-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.165.198.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8683
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.165.198.19. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082000 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 20 15:03:32 CST 2026
;; MSG SIZE rcvd: 107Host 19.198.165.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 19.198.165.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 108.31.246.142 | attackbotsspam | firewall-block, port(s): 80/tcp |
2020-06-05 18:50:01 |
| 213.32.111.53 | attackspam | 2020-06-05T11:38:10.715329ns386461 sshd\[29748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip53.ip-213-32-111.eu user=root 2020-06-05T11:38:12.593966ns386461 sshd\[29748\]: Failed password for root from 213.32.111.53 port 38752 ssh2 2020-06-05T11:53:41.628922ns386461 sshd\[11251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip53.ip-213-32-111.eu user=root 2020-06-05T11:53:43.986558ns386461 sshd\[11251\]: Failed password for root from 213.32.111.53 port 60586 ssh2 2020-06-05T11:58:54.627240ns386461 sshd\[15660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip53.ip-213-32-111.eu user=root ... |
2020-06-05 18:15:27 |
| 212.129.58.228 | attack | WordPress wp-login brute force :: 212.129.58.228 0.080 BYPASS [05/Jun/2020:03:50:15 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2261 "https://saraylilokma.com/wp-login.php" "Opera/9.80 (Windows NT 6.1) Presto/2.12.388 Version/12.12" |
2020-06-05 18:46:09 |
| 42.236.10.122 | attackbotsspam | Automatic report - Banned IP Access |
2020-06-05 18:24:35 |
| 196.0.12.130 | attackspambots | (UG/Uganda/-) SMTP Bruteforcing attempts |
2020-06-05 18:43:41 |
| 67.143.176.156 | attackbots | Brute forcing email accounts |
2020-06-05 18:47:56 |
| 198.108.66.115 | attack | Jun 5 11:19:27 debian kernel: [247729.628913] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=198.108.66.115 DST=89.252.131.35 LEN=45 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=UDP SPT=35679 DPT=47808 LEN=25 |
2020-06-05 18:39:53 |
| 180.76.143.116 | attackspambots | Lines containing failures of 180.76.143.116 Jun 1 05:20:45 dns01 sshd[3307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.143.116 user=r.r Jun 1 05:20:47 dns01 sshd[3307]: Failed password for r.r from 180.76.143.116 port 35414 ssh2 Jun 1 05:20:47 dns01 sshd[3307]: Received disconnect from 180.76.143.116 port 35414:11: Bye Bye [preauth] Jun 1 05:20:47 dns01 sshd[3307]: Disconnected from authenticating user r.r 180.76.143.116 port 35414 [preauth] Jun 1 05:37:38 dns01 sshd[7319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.143.116 user=r.r Jun 1 05:37:40 dns01 sshd[7319]: Failed password for r.r from 180.76.143.116 port 51930 ssh2 Jun 1 05:37:40 dns01 sshd[7319]: Received disconnect from 180.76.143.116 port 51930:11: Bye Bye [preauth] Jun 1 05:37:40 dns01 sshd[7319]: Disconnected from authenticating user r.r 180.76.143.116 port 51930 [preauth] Jun 1 05:41:06 dns01........ ------------------------------ |
2020-06-05 18:35:15 |
| 68.183.157.97 | attackbots | Jun 5 09:40:53 v22019038103785759 sshd\[1944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.157.97 user=root Jun 5 09:40:55 v22019038103785759 sshd\[1944\]: Failed password for root from 68.183.157.97 port 36506 ssh2 Jun 5 09:46:51 v22019038103785759 sshd\[2320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.157.97 user=root Jun 5 09:46:53 v22019038103785759 sshd\[2320\]: Failed password for root from 68.183.157.97 port 60338 ssh2 Jun 5 09:49:02 v22019038103785759 sshd\[2426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.157.97 user=root ... |
2020-06-05 18:53:37 |
| 59.41.93.164 | attackbotsspam | Jun 5 05:40:23 ncomp sshd[32466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.41.93.164 user=root Jun 5 05:40:25 ncomp sshd[32466]: Failed password for root from 59.41.93.164 port 28496 ssh2 Jun 5 05:50:12 ncomp sshd[32600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.41.93.164 user=root Jun 5 05:50:14 ncomp sshd[32600]: Failed password for root from 59.41.93.164 port 27456 ssh2 |
2020-06-05 18:48:17 |
| 112.85.42.181 | attackspam | Jun 5 12:18:44 ns382633 sshd\[13555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root Jun 5 12:18:46 ns382633 sshd\[13555\]: Failed password for root from 112.85.42.181 port 29706 ssh2 Jun 5 12:18:50 ns382633 sshd\[13555\]: Failed password for root from 112.85.42.181 port 29706 ssh2 Jun 5 12:18:51 ns382633 sshd\[13558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root Jun 5 12:18:53 ns382633 sshd\[13555\]: Failed password for root from 112.85.42.181 port 29706 ssh2 Jun 5 12:18:53 ns382633 sshd\[13558\]: Failed password for root from 112.85.42.181 port 29349 ssh2 |
2020-06-05 18:22:31 |
| 196.1.126.69 | attack | (SC/Seychelles/-) SMTP Bruteforcing attempts |
2020-06-05 18:26:50 |
| 138.68.105.194 | attackbots | web-1 [ssh_2] SSH Attack |
2020-06-05 18:49:28 |
| 101.36.150.59 | attackbots | $f2bV_matches |
2020-06-05 18:18:20 |
| 60.250.244.210 | attackspambots | Jun 5 12:18:49 buvik sshd[26720]: Failed password for root from 60.250.244.210 port 50258 ssh2 Jun 5 12:22:38 buvik sshd[27276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.250.244.210 user=root Jun 5 12:22:40 buvik sshd[27276]: Failed password for root from 60.250.244.210 port 54294 ssh2 ... |
2020-06-05 18:23:40 |