City: Santa Clara
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 172.120.0.0 - 172.121.255.255
CIDR: 172.120.0.0/15
NetName: EGN-23
NetHandle: NET-172-120-0-0-1
Parent: NET172 (NET-172-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: EGIHosting (EGNL-1)
RegDate: 2015-06-23
Updated: 2015-06-23
Ref: https://rdap.arin.net/registry/ip/172.120.0.0
OrgName: EGIHosting
OrgId: EGNL-1
Address: 3223 Kenneth Street
City: Santa Clara
StateProv: CA
PostalCode: 95054
Country: US
RegDate: 2007-07-23
Updated: 2026-02-05
Comment: http://egihosting.com
Comment: Geofeed https://geofeed.egihosting.com/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/EGNL-1
OrgTechHandle: TRANH54-ARIN
OrgTechName: Tran, Hung
OrgTechPhone: +1-408-581-1984
OrgTechEmail: htran@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/TRANH54-ARIN
OrgTechHandle: HERNA1269-ARIN
OrgTechName: Hernandez, Aaron
OrgTechPhone: +1-408-228-4448
OrgTechEmail: aaron@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/HERNA1269-ARIN
OrgTechHandle: TRANR22-ARIN
OrgTechName: Tran, Ryan
OrgTechPhone: +1-408-228-4448
OrgTechEmail: rtran@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/TRANR22-ARIN
OrgAbuseHandle: ABUSE1715-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-888-808-8806
OrgAbuseEmail: abuse@egihosting.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1715-ARIN
OrgRoutingHandle: NOC2660-ARIN
OrgRoutingName: Network Operations Center
OrgRoutingPhone: +1-888-808-8806
OrgRoutingEmail: noc@egihosting.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/NOC2660-ARIN
OrgTechHandle: SIMKI10-ARIN
OrgTechName: Simkiss, John
OrgTechPhone: +1-408-228-4448
OrgTechEmail: jas3@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/SIMKI10-ARIN
OrgTechHandle: DOTOM3-ARIN
OrgTechName: Do, Tommy
OrgTechPhone: +1-888-808-8806
OrgTechEmail: tommy@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/DOTOM3-ARIN
OrgTechHandle: CHENJ-ARIN
OrgTechName: Chen, James
OrgTechPhone: +1-408-228-4448
OrgTechEmail: james@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/CHENJ-ARIN
OrgTechHandle: KTBIJ-ARIN
OrgTechName: KT, Bijoy
OrgTechPhone: +1-888-808-8806
OrgTechEmail: egni@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/KTBIJ-ARIN
OrgNOCHandle: NOC2660-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-888-808-8806
OrgNOCEmail: noc@egihosting.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC2660-ARIN
OrgTechHandle: KUMAR396-ARIN
OrgTechName: kumar, Indhira
OrgTechPhone: +1-408-228-4448
OrgTechEmail: indra.kumar@egihosting.com
OrgTechRef: https://rdap.arin.net/registry/entity/KUMAR396-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.120.173.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24681
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;172.120.173.243. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032400 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 24 15:58:41 CST 2026
;; MSG SIZE rcvd: 108b'Host 243.173.120.172.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 172.120.173.243.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.198.228.2 | attackbotsspam | Fail2Ban Ban Triggered |
2020-08-03 14:16:04 |
| 111.223.65.170 | attackbotsspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-08-03 14:16:54 |
| 158.69.246.141 | attack | [2020-08-03 02:04:18] NOTICE[1248][C-0000321d] chan_sip.c: Call from '' (158.69.246.141:58133) to extension '00441519470489' rejected because extension not found in context 'public'. [2020-08-03 02:04:18] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-03T02:04:18.882-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441519470489",SessionID="0x7f27205a5c28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/158.69.246.141/58133",ACLName="no_extension_match" [2020-08-03 02:04:50] NOTICE[1248][C-0000321e] chan_sip.c: Call from '' (158.69.246.141:60992) to extension '+441519470489' rejected because extension not found in context 'public'. [2020-08-03 02:04:50] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-03T02:04:50.352-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="+441519470489",SessionID="0x7f272007c5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/158 ... |
2020-08-03 14:15:13 |
| 178.184.24.126 | attackbots | xmlrpc attack |
2020-08-03 13:58:25 |
| 175.203.159.91 | attackbotsspam | 08/02/2020-23:55:48.312486 175.203.159.91 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-08-03 14:02:30 |
| 185.234.218.84 | attackbotsspam | Jul 22 14:12:11 WHD8 postfix/smtpd\[52481\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 22 15:56:38 WHD8 postfix/smtpd\[63149\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 22 17:37:46 WHD8 postfix/smtpd\[72352\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 22 19:22:39 WHD8 postfix/smtpd\[82060\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 22 21:07:25 WHD8 postfix/smtpd\[90637\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 22 22:52:49 WHD8 postfix/smtpd\[98594\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 23 00:40:07 WHD8 postfix/smtpd\[106394\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 23 04:11:28 WHD8 postfix/smtpd\[121811\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentica ... |
2020-08-03 14:07:06 |
| 124.232.147.46 | attack | DATE:2020-08-03 05:55:13, IP:124.232.147.46, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq) |
2020-08-03 14:20:37 |
| 89.223.92.32 | attackspam | Aug 2 19:38:56 sachi sshd\[6257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.223.92.32 user=root Aug 2 19:38:58 sachi sshd\[6257\]: Failed password for root from 89.223.92.32 port 39942 ssh2 Aug 2 19:41:15 sachi sshd\[6528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.223.92.32 user=root Aug 2 19:41:18 sachi sshd\[6528\]: Failed password for root from 89.223.92.32 port 48556 ssh2 Aug 2 19:43:38 sachi sshd\[6686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.223.92.32 user=root |
2020-08-03 13:49:12 |
| 218.92.0.216 | attack | Unauthorized connection attempt detected from IP address 218.92.0.216 to port 22 |
2020-08-03 14:09:20 |
| 210.92.91.199 | attackbots | Failed password for root from 210.92.91.199 port 36768 ssh2 |
2020-08-03 13:56:05 |
| 104.211.207.91 | attack | Aug 3 04:59:46 jumpserver sshd[368209]: Failed password for root from 104.211.207.91 port 25202 ssh2 Aug 3 05:01:54 jumpserver sshd[368230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.207.91 user=root Aug 3 05:01:57 jumpserver sshd[368230]: Failed password for root from 104.211.207.91 port 56092 ssh2 ... |
2020-08-03 14:01:02 |
| 185.99.213.13 | attackbots | Automatic report - Port Scan Attack |
2020-08-03 13:59:12 |
| 51.38.186.244 | attackspam | $f2bV_matches |
2020-08-03 14:01:48 |
| 109.123.117.250 | attack | " " |
2020-08-03 14:21:20 |
| 185.234.219.229 | attackspambots | $f2bV_matches |
2020-08-03 14:10:13 |