Whois information
NetRange: 12.0.0.0 - 12.255.255.255
CIDR: 12.0.0.0/8
NetName: ATT
NetHandle: NET-12-0-0-0-1
Parent: NET12 (NET-12-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: AT&T Enterprises, LLC (AEL-360)
RegDate: 1983-08-23
Updated: 2025-03-18
Ref: https://rdap.arin.net/registry/ip/12.0.0.0
OrgName: AT&T Enterprises, LLC
OrgId: AEL-360
Address: 208 S. Akard St.
City: Dallas
StateProv: TX
PostalCode: 75202
Country: US
RegDate: 2024-11-22
Updated: 2025-03-21
Ref: https://rdap.arin.net/registry/entity/AEL-360
OrgRoutingHandle: ROUTI59-ARIN
OrgRoutingName: Routing POC
OrgRoutingPhone: +1-999-999-9999
OrgRoutingEmail: routing@cbbtier3.att.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/ROUTI59-ARIN
OrgAbuseHandle: ABUSE7-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-919-319-8167
OrgAbuseEmail: abuse@att.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE7-ARIN
OrgTechHandle: ZS44-ARIN
OrgTechName: IPAdmin-ATT Internet Services
OrgTechPhone: +1-888-510-5545
OrgTechEmail: ipadmin@semail.att.com
OrgTechRef: https://rdap.arin.net/registry/entity/ZS44-ARIN
OrgTechHandle: ICC-ARIN
OrgTechName: IP Team
OrgTechPhone: +1-888-876-2382
OrgTechEmail: rm-ipspecialist@att.com
OrgTechRef: https://rdap.arin.net/registry/entity/ICC-ARIN
Most recent complaints
Please help us keep Internet safer and cleaner by leaving a descriptive comment about 12.173.73.209 IP address
DNSBL* - is a list of IP addresses published through the Internet Domain Name Service (DNS) either as a zone file that can be used by DNS server software, or as a live DNS zone that can be queried in real-time. DNSBLs are most often used to publish the addresses of computers or networks linked to spamming; most mail server software can be configured to reject or flag messages which have been sent from a site listed on one or more such lists.
WHOIS** - is a query/response protocol that is widely used for querying databases in order to determine the registrant or assignee of Internet resources, such as a domain name, an IP address block, or an autonomous system number. WHOIS lookups were traditionally performed with a command line interface application, and network administrators predominantly still use this method, but many simplified web-based tools exist. WHOIS services are typically communicated using the Transmission Control Protocol (TCP). Servers listen to requests on the well-known port number 43.
** Approximate Geographic Location - This is NOT the exact geographical location of the person/organization with the given IP address. However, this should still give you a good idea about the area/region where this person/orgranization is located.
Complaint by Scott :
Im a security guy and i just noticed some weird connections hitting our firewall logs nonstop last night. The source popped up in our mail headers too with an uncanny volume of failed log ins. Felt like a botnet audition gone sideways or just some bored script kiddies playing dress up. If you peek at your server console you might spot the same hacker hustle in real time. Ive never seen that exact fingerprint before and it had me scratching my head at 3 am. Could be an experimental worm or just a misconfigured router throwing a tantrum in cyberspace. Either way keep your eyeballs glued to the traffic monitor and rotate those creds asap. Sharing this in case it sparks some ideas or maybe alerts others before it blows up into a bigger mess.