City: unknown
Region: unknown
Country: United States
Internet Service Provider: GlobeTouch Inc.
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 16.5.0.0 - 16.5.255.255
CIDR: 16.5.0.0/16
NetName: HPE-15
NetHandle: NET-16-5-0-0-1
Parent: NET16 (NET-16-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: HEWLETT PACKARD ENTERPRISE COMPANY (HPE-15)
RegDate: 1989-05-18
Updated: 2023-10-17
Ref: https://rdap.arin.net/registry/ip/16.5.0.0
OrgName: HEWLETT PACKARD ENTERPRISE COMPANY
OrgId: HPE-15
Address: 1701 E. Mossy Oaks Road
City: Spring
StateProv: TX
PostalCode: 77389
Country: US
RegDate: 2016-08-26
Updated: 2026-03-13
Ref: https://rdap.arin.net/registry/entity/HPE-15
OrgTechHandle: HPEIP-ARIN
OrgTechName: HPE IPADDR
OrgTechPhone: +1-800-524-7638
OrgTechEmail: ddi-hostmaster@groups.ext.hpe.com
OrgTechRef: https://rdap.arin.net/registry/entity/HPEIP-ARIN
OrgAbuseHandle: HSA41-ARIN
OrgAbuseName: HPE Subnet Abuse
OrgAbusePhone: +1-888-342-2156
OrgAbuseEmail: IPv4.notices@hpe.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/HSA41-ARIN
OrgNOCHandle: HPEIP-ARIN
OrgNOCName: HPE IPADDR
OrgNOCPhone: +1-800-524-7638
OrgNOCEmail: ddi-hostmaster@groups.ext.hpe.com
OrgNOCRef: https://rdap.arin.net/registry/entity/HPEIP-ARIN
# end
# start
NetRange: 16.5.0.0 - 16.5.255.255
CIDR: 16.5.0.0/16
NetName: IPXO-LLC
NetHandle: NET-16-5-0-0-2
Parent: HPE-15 (NET-16-5-0-0-1)
NetType: Reallocated
OriginAS:
Organization: IPXO LLC (IL-845)
RegDate: 2026-04-03
Updated: 2026-04-03
Ref: https://rdap.arin.net/registry/ip/16.5.0.0
OrgName: IPXO LLC
OrgId: IL-845
Address: 3132 State Street
City: Dallas
StateProv: TX
PostalCode: 75204-3500
Country: US
RegDate: 2021-03-25
Updated: 2025-09-10
Comment: Geofeed https://geofeed.ipxo.com/geofeed.txt
Ref: https://rdap.arin.net/registry/entity/IL-845
OrgTechHandle: IST36-ARIN
OrgTechName: IPXO Support Team
OrgTechPhone: +1 (650) 564-3425
OrgTechEmail: support@ipxo.com
OrgTechRef: https://rdap.arin.net/registry/entity/IST36-ARIN
OrgDNSHandle: IST36-ARIN
OrgDNSName: IPXO Support Team
OrgDNSPhone: +1 (650) 564-3425
OrgDNSEmail: support@ipxo.com
OrgDNSRef: https://rdap.arin.net/registry/entity/IST36-ARIN
OrgAbuseHandle: IAMT1-ARIN
OrgAbuseName: IPXO Abuse Management Team
OrgAbusePhone: +1 (650) 934-1667
OrgAbuseEmail: abuse@ipxo.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IAMT1-ARIN
# end
# start
NetRange: 16.5.0.0 - 16.5.255.255
CIDR: 16.5.0.0/16
NetName: NETUTILS
NetHandle: NET-16-5-0-0-3
Parent: IPXO-LLC (NET-16-5-0-0-2)
NetType: Reallocated
OriginAS:
Organization: Internet Utilities NA LLC (DCL-577)
RegDate: 2026-04-18
Updated: 2026-08-17
Comment: -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Ref: https://rdap.arin.net/registry/ip/16.5.0.0
OrgName: Internet Utilities NA LLC
OrgId: DCL-577
Address: 2711 Centerville Road
City: Wilmington
StateProv: DE
PostalCode: 19808
Country: US
RegDate: 2015-11-18
Updated: 2024-08-23
Ref: https://rdap.arin.net/registry/entity/DCL-577
OrgTechHandle: IUS-ARIN
OrgTechName: Internet Utilities Support
OrgTechPhone: +1-650-564-3425
OrgTechEmail: support@netutils.io
OrgTechRef: https://rdap.arin.net/registry/entity/IUS-ARIN
OrgAbuseHandle: IUA-ARIN
OrgAbuseName: Internet Utilities Abuse
OrgAbusePhone: +1-650-934-1667
OrgAbuseEmail: report@abuseradar.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IUA-ARIN
# end
# start
NetRange: 16.5.0.0 - 16.5.0.255
CIDR: 16.5.0.0/24
NetName: NET-16-5-0-0-24
NetHandle: NET-16-5-0-0-4
Parent: NETUTILS (NET-16-5-0-0-3)
NetType: Reassigned
OriginAS:
Customer: EMBNEX. LLC (C11674652)
RegDate: 2026-08-07
Updated: 2026-08-07
Comment: report@abuseradar.com
Comment: Geofeed https://geofeed.ipxo.com/geofeed.txt
Ref: https://rdap.arin.net/registry/ip/16.5.0.0
CustName: EMBNEX. LLC
Address: 7345 W SAND LAKE ROAD STE 210 OFFICE 6234
City: ORLANDO
StateProv: FL
PostalCode: 32819
Country: US
RegDate: 2026-08-07
Updated: 2026-08-07
Ref: https://rdap.arin.net/registry/entity/C11674652
OrgTechHandle: IUS-ARIN
OrgTechName: Internet Utilities Support
OrgTechPhone: +1-650-564-3425
OrgTechEmail: support@netutils.io
OrgTechRef: https://rdap.arin.net/registry/entity/IUS-ARIN
OrgAbuseHandle: IUA-ARIN
OrgAbuseName: Internet Utilities Abuse
OrgAbusePhone: +1-650-934-1667
OrgAbuseEmail: report@abuseradar.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/IUA-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 16.5.0.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18881
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;16.5.0.214. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091802 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 19 15:00:55 CST 2026
;; MSG SIZE rcvd: 103214.0.5.16.in-addr.arpa domain name pointer embnex.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
214.0.5.16.in-addr.arpa name = embnex.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.109.33.247 | attackspambots | May 13 14:36:49 choloepus sshd[18400]: Invalid user sniffer from 114.109.33.247 port 54324 May 13 14:36:49 choloepus sshd[18400]: Invalid user sniffer from 114.109.33.247 port 54324 May 13 14:36:49 choloepus sshd[18400]: Connection closed by invalid user sniffer 114.109.33.247 port 54324 [preauth] ... |
2020-05-13 23:36:24 |
| 138.68.93.14 | attackspambots | May 13 17:31:23 prox sshd[26864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.93.14 May 13 17:31:25 prox sshd[26864]: Failed password for invalid user vlado from 138.68.93.14 port 49494 ssh2 |
2020-05-13 23:50:36 |
| 37.252.187.140 | attackbots | May 13 17:22:04 prox sshd[29733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.187.140 May 13 17:22:06 prox sshd[29733]: Failed password for invalid user aptproxy from 37.252.187.140 port 43164 ssh2 |
2020-05-14 00:08:16 |
| 43.227.23.76 | attack | SSH Brute-Force reported by Fail2Ban |
2020-05-13 23:33:08 |
| 54.36.150.162 | attackbotsspam | [Wed May 13 20:56:28.237789 2020] [:error] [pid 2057:tid 140111108912896] [client 54.36.150.162:33054] [client 54.36.150.162] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "183"] [id "913102"] [msg "Found User-Agent associated with web crawler/bot"] [data "Matched Data: AhrefsBot found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; ahrefsbot/6.1; +http://ahrefs.com/robot/)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-crawler"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/CRAWLER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/1127-kalender-tanam-katam-terpadu-kecamatan-panji-kabupaten-situbond ... |
2020-05-14 00:07:11 |
| 217.209.112.161 | attackspam | 20 attempts against mh-ssh on cloud |
2020-05-13 23:57:18 |
| 177.97.208.106 | attackspam | Automatic report - Port Scan Attack |
2020-05-14 00:07:34 |
| 54.36.150.156 | attackspambots | [Wed May 13 19:36:47.807872 2020] [:error] [pid 23852:tid 140604151064320] [client 54.36.150.156:50364] [client 54.36.150.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "183"] [id "913102"] [msg "Found User-Agent associated with web crawler/bot"] [data "Matched Data: AhrefsBot found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; ahrefsbot/6.1; +http://ahrefs.com/robot/)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-crawler"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/CRAWLER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/2015-04-16-10-15-17/913-klimatologi/agroklimatologi/kalender-tanam-katam-terpadu/kalen ... |
2020-05-13 23:32:39 |
| 222.186.175.151 | attackspam | May 13 17:45:08 eventyay sshd[15305]: Failed password for root from 222.186.175.151 port 19986 ssh2 May 13 17:45:21 eventyay sshd[15305]: Failed password for root from 222.186.175.151 port 19986 ssh2 May 13 17:45:21 eventyay sshd[15305]: error: maximum authentication attempts exceeded for root from 222.186.175.151 port 19986 ssh2 [preauth] ... |
2020-05-14 00:04:13 |
| 51.254.37.192 | attackbotsspam | Auto Fail2Ban report, multiple SSH login attempts. |
2020-05-13 23:43:54 |
| 111.230.210.229 | attack | (sshd) Failed SSH login from 111.230.210.229 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 13 17:29:26 srv sshd[13434]: Invalid user test from 111.230.210.229 port 58774 May 13 17:29:28 srv sshd[13434]: Failed password for invalid user test from 111.230.210.229 port 58774 ssh2 May 13 17:32:00 srv sshd[13509]: Invalid user anuel from 111.230.210.229 port 50424 May 13 17:32:02 srv sshd[13509]: Failed password for invalid user anuel from 111.230.210.229 port 50424 ssh2 May 13 17:33:21 srv sshd[13573]: Invalid user ubuntu from 111.230.210.229 port 60026 |
2020-05-13 23:54:46 |
| 61.133.232.249 | attack | (sshd) Failed SSH login from 61.133.232.249 (CN/China/-): 5 in the last 3600 secs |
2020-05-13 23:42:02 |
| 62.122.156.74 | attackbotsspam | $f2bV_matches |
2020-05-13 23:56:20 |
| 177.137.96.15 | attackspam | May 13 14:39:08 v22019038103785759 sshd\[1508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.137.96.15 user=dovecot May 13 14:39:10 v22019038103785759 sshd\[1508\]: Failed password for dovecot from 177.137.96.15 port 60882 ssh2 May 13 14:43:56 v22019038103785759 sshd\[1862\]: Invalid user ubuntu from 177.137.96.15 port 41260 May 13 14:43:56 v22019038103785759 sshd\[1862\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.137.96.15 May 13 14:43:58 v22019038103785759 sshd\[1862\]: Failed password for invalid user ubuntu from 177.137.96.15 port 41260 ssh2 ... |
2020-05-13 23:29:33 |
| 213.194.132.252 | attackspam | Automatic report - Port Scan Attack |
2020-05-13 23:37:43 |