104.164.153.121 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 104.164.153.121 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: United States
• Network:
• Noticed: 1 times
• Protocols Attacked: SSH
• Passive DNS Results: kfwnet.com energy-pjr.com congeedynasty.com sufiterapi.com 51bmp.com erc-global.com oaktreeitconsulting.com mygreatcollegeessay.com longfamily4.com anjijy.com puigmoreno.com ericlary.com zbashq.com zgshsd.com smhhk.com anjie1688.com 23novel.com bda-investmentpark.com cwx88.com kansai-support.com nicolesnider.com buckshotprints.com aquasys-bg.com kornicklindsay.com jpedrofernandes.com smallwebmaster.com pangulfopt.com silkcitybanaras.com rus007.com huadagj.com ws2m.com qdfumosha.com lunardesign.net kure-mamoru.net andaleon.net yuanhezone.com dmcmould.com bjqhxwd.com 6pixels.com tylietou.com gxsswl.com jieyafushi.com wxbojie.com ahrzsh.com ledtm.com qdjrqxjjx.cn hometexnet.com.cn anyangcook.com bernasconidigital.com chaoyangdong.cn dkdate.com sabzdaru.com synank.com lesxcn.com imyouzhong.com qdyzw.com alpatova.com fps-online.cn jiyiri.com.cn termevenezia.com suaritmafilitresi.com eishacollins.com espresso-banana.com jumpsportland.com hyvconstruccionesyconsultorias.com

Malware Detected on Host

Count:

Map

Whois Information

• NetRange: 104.164.0.0 - 104.165.255.255
• CIDR: 104.164.0.0/15
• NetName: EGNL-1
• NetHandle: NET-104-164-0-0-1
• Parent: NET104 (NET-104-0-0-0-0)
• NetType: Direct Allocation
• OriginAS: AS18779
• Organization: EGIHosting (EGNL-1)
• RegDate: 2014-07-22
• Updated: 2023-05-09
• Comment: Geofeed https://geofeed.egihosting.com/geofeed.csv
• Ref: https://rdap.arin.net/registry/ip/104.164.0.0
• OrgName: EGIHosting
• OrgId: EGNL-1
• Address: 3223 Kenneth Street
• City: Santa Clara
• StateProv: CA
• PostalCode: 95054
• Country: US
• RegDate: 2007-07-23
• Updated: 2025-04-01
• Comment: http://egihosting.com
• Comment: Geofeed https://geofeed.egihosting.com/geofeed.csv
• Ref: https://rdap.arin.net/registry/entity/EGNL-1
• OrgTechHandle: KUMAR396-ARIN
• OrgTechName: kumar, Indhira
• OrgTechPhone: +1-408-228-4448
• OrgTechEmail: indra.kumar@egihosting.com
• OrgTechRef: https://rdap.arin.net/registry/entity/KUMAR396-ARIN
• OrgTechHandle: TRANR22-ARIN
• OrgTechName: Tran, Ryan
• OrgTechPhone: +1-408-228-4448
• OrgTechEmail: rtran@egihosting.com
• OrgTechRef: https://rdap.arin.net/registry/entity/TRANR22-ARIN
• OrgTechHandle: SIMKI10-ARIN
• OrgTechName: Simkiss, John
• OrgTechPhone: +1-408-228-4448
• OrgTechEmail: jas3@egihosting.com
• OrgTechRef: https://rdap.arin.net/registry/entity/SIMKI10-ARIN
• OrgAbuseHandle: ABUSE1715-ARIN
• OrgAbuseName: Abuse Department
• OrgAbusePhone: +1-888-808-8806
• OrgAbuseEmail: abuse@egihosting.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1715-ARIN
• OrgTechHandle: CHENJ-ARIN
• OrgTechName: Chen, James
• OrgTechPhone: +1-408-228-4448
• OrgTechEmail: james@egihosting.com
• OrgTechRef: https://rdap.arin.net/registry/entity/CHENJ-ARIN
• OrgTechHandle: HERNA1269-ARIN
• OrgTechName: Hernandez, Aaron
• OrgTechPhone: +1-408-228-4448
• OrgTechEmail: aaron@egihosting.com
• OrgTechRef: https://rdap.arin.net/registry/entity/HERNA1269-ARIN
• OrgTechHandle: TRANH54-ARIN
• OrgTechName: Tran, Hung
• OrgTechPhone: +1-408-581-1984
• OrgTechEmail: htran@egihosting.com
• OrgTechRef: https://rdap.arin.net/registry/entity/TRANH54-ARIN
• OrgNOCHandle: NOC2660-ARIN
• OrgNOCName: Network Operations Center
• OrgNOCPhone: +1-888-808-8806
• OrgNOCEmail: noc@egihosting.com
• OrgNOCRef: https://rdap.arin.net/registry/entity/NOC2660-ARIN
• OrgRoutingHandle: NOC2660-ARIN
• OrgRoutingName: Network Operations Center
• OrgRoutingPhone: +1-888-808-8806
• OrgRoutingEmail: noc@egihosting.com
• OrgRoutingRef: https://rdap.arin.net/registry/entity/NOC2660-ARIN
• OrgTechHandle: KTBIJ-ARIN
• OrgTechName: KT, Bijoy
• OrgTechPhone: +1-888-808-8806
• OrgTechEmail: egni@egihosting.com
• OrgTechRef: https://rdap.arin.net/registry/entity/KTBIJ-ARIN
• NetRange: 104.164.153.0 - 104.164.153.255
• CIDR: 104.164.153.0/24
• NetName: NETWORK-104-164-153-0
• NetHandle: NET-104-164-153-0-1
• Parent: EGNL-1 (NET-104-164-0-0-1)
• NetType: Reallocated
• OriginAS: AS214238
• Organization: IWIHOST NET (HTL-117)
• RegDate: 2025-05-05
• Updated: 2025-05-07
• Comment: Geofeed:https://iwihost.net/geofeed.csv
• Ref: https://rdap.arin.net/registry/ip/104.164.153.0
• OrgName: IWIHOST NET
• OrgId: HTL-117
• Address: 71-75, Shelton Street, Covent Garden,
• City: London
• StateProv:
• PostalCode: WC2H 9JQ
• Country: GB
• RegDate: 2024-09-17
• Updated: 2024-09-19
• Comment: Hosting provider
• Ref: https://rdap.arin.net/registry/entity/HTL-117
• OrgAbuseHandle: ABUSE9136-ARIN
• OrgAbuseName: Abuse
• OrgAbusePhone: +442080403398
• OrgAbuseEmail: abuse@iwihost.net
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9136-ARIN
• OrgTechHandle: TECH1485-ARIN
• OrgTechName: Tech
• OrgTechPhone: +442080403398
• OrgTechEmail: tech@iwihost.net
• OrgTechRef: https://rdap.arin.net/registry/entity/TECH1485-ARIN

Links to attack logs

****** ****** ******