City: São Paulo
Region: Sao Paulo
Country: Brazil
Internet Service Provider: GlobeTouch Inc.
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 16.5.0.0 - 16.5.255.255
CIDR: 16.5.0.0/16
NetName: HPE-15
NetHandle: NET-16-5-0-0-1
Parent: NET16 (NET-16-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: HEWLETT PACKARD ENTERPRISE COMPANY (HPE-15)
RegDate: 1989-05-18
Updated: 2023-10-17
Ref: https://rdap.arin.net/registry/ip/16.5.0.0
OrgName: HEWLETT PACKARD ENTERPRISE COMPANY
OrgId: HPE-15
Address: 1701 E. Mossy Oaks Road
City: Spring
StateProv: TX
PostalCode: 77389
Country: US
RegDate: 2016-08-26
Updated: 2026-03-13
Ref: https://rdap.arin.net/registry/entity/HPE-15
OrgNOCHandle: HPEIP-ARIN
OrgNOCName: HPE IPADDR
OrgNOCPhone: +1-800-524-7638
OrgNOCEmail: ddi-hostmaster@groups.ext.hpe.com
OrgNOCRef: https://rdap.arin.net/registry/entity/HPEIP-ARIN
OrgAbuseHandle: HSA41-ARIN
OrgAbuseName: HPE Subnet Abuse
OrgAbusePhone: +1-888-342-2156
OrgAbuseEmail: IPv4.notices@hpe.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/HSA41-ARIN
OrgTechHandle: HPEIP-ARIN
OrgTechName: HPE IPADDR
OrgTechPhone: +1-800-524-7638
OrgTechEmail: ddi-hostmaster@groups.ext.hpe.com
OrgTechRef: https://rdap.arin.net/registry/entity/HPEIP-ARIN
# end
# start
NetRange: 16.5.0.0 - 16.5.255.255
CIDR: 16.5.0.0/16
NetName: IPXO-LLC
NetHandle: NET-16-5-0-0-2
Parent: HPE-15 (NET-16-5-0-0-1)
NetType: Reallocated
OriginAS:
Organization: IPXO LLC (IL-845)
RegDate: 2026-04-03
Updated: 2026-04-03
Ref: https://rdap.arin.net/registry/ip/16.5.0.0
OrgName: IPXO LLC
OrgId: IL-845
Address: 3132 State Street
City: Dallas
StateProv: TX
PostalCode: 75204-3500
Country: US
RegDate: 2021-03-25
Updated: 2025-09-10
Comment: Geofeed https://geofeed.ipxo.com/geofeed.txt
Ref: https://rdap.arin.net/registry/entity/IL-845
OrgTechHandle: IST36-ARIN
OrgTechName: IPXO Support Team
OrgTechPhone: +1 (650) 564-3425
OrgTechEmail: support@ipxo.com
OrgTechRef: https://rdap.arin.net/registry/entity/IST36-ARIN
OrgAbuseHandle: IAMT1-ARIN
OrgAbuseName: IPXO Abuse Management Team
OrgAbusePhone: +1 (650) 934-1667
OrgAbuseEmail: abuse@ipxo.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IAMT1-ARIN
OrgDNSHandle: IST36-ARIN
OrgDNSName: IPXO Support Team
OrgDNSPhone: +1 (650) 564-3425
OrgDNSEmail: support@ipxo.com
OrgDNSRef: https://rdap.arin.net/registry/entity/IST36-ARIN
# end
# start
NetRange: 16.5.0.0 - 16.5.255.255
CIDR: 16.5.0.0/16
NetName: NETUTILS
NetHandle: NET-16-5-0-0-3
Parent: IPXO-LLC (NET-16-5-0-0-2)
NetType: Reallocated
OriginAS:
Organization: Internet Utilities NA LLC (DCL-577)
RegDate: 2026-04-18
Updated: 2026-10-19
Ref: https://rdap.arin.net/registry/ip/16.5.0.0
OrgName: Internet Utilities NA LLC
OrgId: DCL-577
Address: 2711 Centerville Road
City: Wilmington
StateProv: DE
PostalCode: 19808
Country: US
RegDate: 2015-11-18
Updated: 2024-08-23
Ref: https://rdap.arin.net/registry/entity/DCL-577
OrgAbuseHandle: IUA-ARIN
OrgAbuseName: Internet Utilities Abuse
OrgAbusePhone: +1-650-934-1667
OrgAbuseEmail: report@abuseradar.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IUA-ARIN
OrgTechHandle: IUS-ARIN
OrgTechName: Internet Utilities Support
OrgTechPhone: +1-650-564-3425
OrgTechEmail: support@netutils.io
OrgTechRef: https://rdap.arin.net/registry/entity/IUS-ARIN
# end
# start
NetRange: 16.5.0.0 - 16.5.0.255
CIDR: 16.5.0.0/24
NetName: NET-16-5-0-0-24
NetHandle: NET-16-5-0-0-4
Parent: NETUTILS (NET-16-5-0-0-3)
NetType: Reassigned
OriginAS:
Customer: EMBNEX. LLC (C11674652)
RegDate: 2026-08-07
Updated: 2026-08-07
Comment: report@abuseradar.com
Comment: Geofeed https://geofeed.ipxo.com/geofeed.txt
Ref: https://rdap.arin.net/registry/ip/16.5.0.0
CustName: EMBNEX. LLC
Address: 7345 W SAND LAKE ROAD STE 210 OFFICE 6234
City: ORLANDO
StateProv: FL
PostalCode: 32819
Country: US
RegDate: 2026-08-07
Updated: 2026-08-07
Ref: https://rdap.arin.net/registry/entity/C11674652
OrgAbuseHandle: IUA-ARIN
OrgAbuseName: Internet Utilities Abuse
OrgAbusePhone: +1-650-934-1667
OrgAbuseEmail: report@abuseradar.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IUA-ARIN
OrgTechHandle: IUS-ARIN
OrgTechName: Internet Utilities Support
OrgTechPhone: +1-650-564-3425
OrgTechEmail: support@netutils.io
OrgTechRef: https://rdap.arin.net/registry/entity/IUS-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 16.5.0.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;16.5.0.195. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102103 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 22 10:00:45 CST 2026
;; MSG SIZE rcvd: 103
195.0.5.16.in-addr.arpa domain name pointer embnex.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
195.0.5.16.in-addr.arpa name = embnex.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 23.129.64.159 | attackbotsspam | Oct 20 05:55:52 rotator sshd\[16837\]: Failed password for root from 23.129.64.159 port 52513 ssh2Oct 20 05:55:55 rotator sshd\[16837\]: Failed password for root from 23.129.64.159 port 52513 ssh2Oct 20 05:55:58 rotator sshd\[16837\]: Failed password for root from 23.129.64.159 port 52513 ssh2Oct 20 05:56:00 rotator sshd\[16837\]: Failed password for root from 23.129.64.159 port 52513 ssh2Oct 20 05:56:03 rotator sshd\[16837\]: Failed password for root from 23.129.64.159 port 52513 ssh2Oct 20 05:56:06 rotator sshd\[16837\]: Failed password for root from 23.129.64.159 port 52513 ssh2 ... |
2019-10-20 13:54:11 |
| 190.111.249.153 | attackspam | Oct 20 13:30:17 webhost01 sshd[7846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.111.249.153 Oct 20 13:30:19 webhost01 sshd[7846]: Failed password for invalid user informix from 190.111.249.153 port 44676 ssh2 ... |
2019-10-20 14:30:28 |
| 186.10.17.84 | attackspambots | Oct 19 19:40:45 hpm sshd\[5014\]: Invalid user from 186.10.17.84 Oct 19 19:40:45 hpm sshd\[5014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.10.17.84 Oct 19 19:40:47 hpm sshd\[5014\]: Failed password for invalid user from 186.10.17.84 port 42416 ssh2 Oct 19 19:45:10 hpm sshd\[5394\]: Invalid user ymw from 186.10.17.84 Oct 19 19:45:10 hpm sshd\[5394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.10.17.84 |
2019-10-20 13:51:10 |
| 185.153.196.28 | attackspambots | (PERMBLOCK) 185.153.196.28 (MD/Republic of Moldova/server-185-153-196-28.cloudedic.net) has had more than 4 temp blocks in the last 86400 secs |
2019-10-20 14:29:01 |
| 115.88.25.178 | attack | Invalid user mh from 115.88.25.178 port 45150 |
2019-10-20 13:55:05 |
| 206.189.73.71 | attackspambots | $f2bV_matches |
2019-10-20 14:10:47 |
| 49.88.112.114 | attackspam | Oct 19 20:18:44 web1 sshd\[11144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Oct 19 20:18:47 web1 sshd\[11144\]: Failed password for root from 49.88.112.114 port 61192 ssh2 Oct 19 20:21:01 web1 sshd\[11322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Oct 19 20:21:02 web1 sshd\[11322\]: Failed password for root from 49.88.112.114 port 16987 ssh2 Oct 19 20:22:09 web1 sshd\[11409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root |
2019-10-20 14:22:57 |
| 69.75.91.250 | attack | Oct 20 05:55:33 dev postfix/smtpd\[3854\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure Oct 20 05:55:34 dev postfix/smtpd\[3854\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure Oct 20 05:55:35 dev postfix/smtpd\[3854\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure Oct 20 05:55:35 dev postfix/smtpd\[3854\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure Oct 20 05:55:36 dev postfix/smtpd\[3854\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure |
2019-10-20 14:04:22 |
| 80.82.77.86 | attack | 20.10.2019 05:18:36 Connection to port 623 blocked by firewall |
2019-10-20 14:02:51 |
| 200.107.154.168 | attack | SSH invalid-user multiple login try |
2019-10-20 14:30:05 |
| 34.87.24.125 | attack | Attempt to run wp-login.php |
2019-10-20 14:01:57 |
| 45.67.15.141 | attack | Invalid user ubnt from 45.67.15.141 port 34467 |
2019-10-20 14:13:10 |
| 165.22.160.32 | attackspambots | Oct 20 07:20:00 ns37 sshd[32280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.160.32 |
2019-10-20 14:26:17 |
| 222.186.3.249 | attackspam | Oct 20 08:13:08 minden010 sshd[18291]: Failed password for root from 222.186.3.249 port 34496 ssh2 Oct 20 08:14:38 minden010 sshd[19096]: Failed password for root from 222.186.3.249 port 44632 ssh2 ... |
2019-10-20 14:25:52 |
| 220.92.16.86 | attackspam | ssh failed login |
2019-10-20 13:59:47 |