城市(city): Denver
省份(region): Colorado
国家(country): United States
运营商(isp): RTC Communications LLC
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 71.218.87.168 | attack | Unknown connection |
2020-06-25 01:17:07 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 71.208.0.0 - 71.223.255.255
CIDR: 71.208.0.0/12
NetName: CENTURYLINK-LEGACY-QWEST-INET-118
NetHandle: NET-71-208-0-0-1
Parent: NET71 (NET-71-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: CenturyLink Communications, LLC (CCL-534)
RegDate: 2005-05-06
Updated: 2018-10-04
Ref: https://rdap.arin.net/registry/ip/71.208.0.0
OrgName: CenturyLink Communications, LLC
OrgId: CCL-534
Address: 100 CENTURYLINK DR
City: Monroe
StateProv: LA
PostalCode: 71201
Country: US
RegDate: 2018-07-12
Updated: 2026-04-22
Comment: USAGE OF IP SPACE MUST COMPLY WITH OUR ACCEPTABLE USE POLICY:
Comment: https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:
Comment: ADDRESSES COVERED BY THIS ORG-ID ARE NON-PORTABLE ANY ISP ANNOUNCING OR TRANSITING PORTIONS WITHIN OUR RANGES SHOULD NOT RELY ON PRESENTED LOA'S OR OLD WHOIS UNLESS THOSE RANGES ARE ALSO ACTIVELY DIRECTLY ANNOUNCED TO A LUMEN ASN. WITH ALL LOA'S THESE CONDITIONS APPLY:
Comment:
Comment: 1. You are permitted to route the Lumen IP prefixes listed via Public BGP to your alternate ISP from the designated ASN. Any other ASN originating the prefix listed is forbidden.
Comment: 2. The Lumen IP prefixes listed can be routed via Public BGP to your alternate ISP as long as you remain an active customer with Lumen and continue to route the prefixes over at least one Lumen Internet circuit without significant traffic engineering.
Comment: 3. Should your Internet services with Lumen be discontinued, Lumen reserves the right to have your alternate ISP terminate the routing of the Lumen IP prefixes without advanced notification, should you fail to do so.
Comment: 4. All IP Addresses assigned or allocated by Lumen to an end-user (customer or ISP) shall be considered non-portable and will be reclaimed by Lumen upon service termination.
Comment: 5. Lumen reserves the right to conduct audits to ensure the LOA conditions are being met.
Comment: 6. Usage of IP space must comply with our AUP https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:
Comment: Our looking glass is located at: https://lookingglass.centurylink.com/
Comment:
Comment: For subpoena or court order please fax 844.254.5800 or refer to our Trust & Safety page:
Comment: https://www.lumen.com/en-us/about/legal/trust-center/trust-and-safety.html
Comment:
Comment: For abuse issues, please email abuse@aup.lumen.com
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email)
Comment: Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/CCL-534
OrgTechHandle: QIA-ARIN
OrgTechName: Centurylink IP Admin
OrgTechPhone: +1-877-886-6515
OrgTechEmail: ipadmin@centurylink.com
OrgTechRef: https://rdap.arin.net/registry/entity/QIA-ARIN
OrgRoutingHandle: RPKIR-ARIN
OrgRoutingName: RPKI-ROA
OrgRoutingPhone: +1-877-886-6515
OrgRoutingEmail: rpki-roa@lumen.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/RPKIR-ARIN
OrgAbuseHandle: CAD54-ARIN
OrgAbuseName: Centurylink Abuse Desk
OrgAbusePhone: +1-877-886-6515
OrgAbuseEmail: abuse@aup.lumen.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/CAD54-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 71.218.8.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;71.218.8.133. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026092800 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 28 16:36:10 CST 2026
;; MSG SIZE rcvd: 105133.8.218.71.in-addr.arpa domain name pointer 71-218-8-133.hlrn.qwest.net.b'133.8.218.71.in-addr.arpa name = 71-218-8-133.hlrn.qwest.net.
Authoritative answers can be found from:
'| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 183.22.24.63 | attack | Invalid user deploy from 183.22.24.63 port 12845 |
2020-04-12 14:36:57 |
| 219.92.251.237 | attack | B: Abusive ssh attack |
2020-04-12 14:43:36 |
| 37.43.60.43 | attackspambots | Brute force attack against VPN service |
2020-04-12 14:41:27 |
| 129.146.172.170 | attackbotsspam | *Port Scan* detected from 129.146.172.170 (US/United States/New Jersey/Newark/-). 4 hits in the last 30 seconds |
2020-04-12 14:55:49 |
| 51.68.84.36 | attack | This client attempted to login to an administrator account on a Website, or abused from another resource. |
2020-04-12 14:39:02 |
| 47.240.100.158 | attack | firewall-block, port(s): 11211/tcp |
2020-04-12 14:26:47 |
| 61.250.122.115 | attack | Invalid user user0 from 61.250.122.115 port 34780 |
2020-04-12 14:19:39 |
| 169.197.108.205 | attack | " " |
2020-04-12 14:28:30 |
| 86.69.2.215 | attackspambots | Apr 12 07:27:02 vpn01 sshd[31257]: Failed password for root from 86.69.2.215 port 54630 ssh2 ... |
2020-04-12 14:32:57 |
| 54.39.138.251 | attackbots | detected by Fail2Ban |
2020-04-12 14:20:08 |
| 66.249.79.145 | attack | 404 NOT FOUND |
2020-04-12 14:47:54 |
| 67.205.153.16 | attackbots | 2020-04-12T03:55:33.113826abusebot-8.cloudsearch.cf sshd[11732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=imap.vtigermail.com user=root 2020-04-12T03:55:35.260366abusebot-8.cloudsearch.cf sshd[11732]: Failed password for root from 67.205.153.16 port 40814 ssh2 2020-04-12T03:58:50.157168abusebot-8.cloudsearch.cf sshd[11986]: Invalid user nagios from 67.205.153.16 port 48782 2020-04-12T03:58:50.167500abusebot-8.cloudsearch.cf sshd[11986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=imap.vtigermail.com 2020-04-12T03:58:50.157168abusebot-8.cloudsearch.cf sshd[11986]: Invalid user nagios from 67.205.153.16 port 48782 2020-04-12T03:58:52.356898abusebot-8.cloudsearch.cf sshd[11986]: Failed password for invalid user nagios from 67.205.153.16 port 48782 ssh2 2020-04-12T04:02:13.604717abusebot-8.cloudsearch.cf sshd[12168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r ... |
2020-04-12 14:41:40 |
| 222.244.144.163 | attackspambots | Apr 12 04:37:32 vlre-nyc-1 sshd\[28592\]: Invalid user Root123 from 222.244.144.163 Apr 12 04:37:32 vlre-nyc-1 sshd\[28592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.244.144.163 Apr 12 04:37:34 vlre-nyc-1 sshd\[28592\]: Failed password for invalid user Root123 from 222.244.144.163 port 58878 ssh2 Apr 12 04:43:53 vlre-nyc-1 sshd\[28913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.244.144.163 user=root Apr 12 04:43:55 vlre-nyc-1 sshd\[28913\]: Failed password for root from 222.244.144.163 port 49766 ssh2 ... |
2020-04-12 14:49:31 |
| 51.15.58.168 | attackbots | Apr 12 07:27:59 pkdns2 sshd\[12582\]: Invalid user splunk from 51.15.58.168Apr 12 07:28:01 pkdns2 sshd\[12582\]: Failed password for invalid user splunk from 51.15.58.168 port 55886 ssh2Apr 12 07:31:26 pkdns2 sshd\[12775\]: Invalid user poll from 51.15.58.168Apr 12 07:31:28 pkdns2 sshd\[12775\]: Failed password for invalid user poll from 51.15.58.168 port 35896 ssh2Apr 12 07:34:54 pkdns2 sshd\[12880\]: Invalid user siamiah from 51.15.58.168Apr 12 07:34:56 pkdns2 sshd\[12880\]: Failed password for invalid user siamiah from 51.15.58.168 port 44138 ssh2 ... |
2020-04-12 14:19:14 |
| 106.13.107.196 | attackbots | Apr 12 07:43:46 ns382633 sshd\[15243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.107.196 user=root Apr 12 07:43:48 ns382633 sshd\[15243\]: Failed password for root from 106.13.107.196 port 39014 ssh2 Apr 12 07:46:39 ns382633 sshd\[15952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.107.196 user=root Apr 12 07:46:40 ns382633 sshd\[15952\]: Failed password for root from 106.13.107.196 port 34266 ssh2 Apr 12 07:47:31 ns382633 sshd\[16025\]: Invalid user fnjoroge from 106.13.107.196 port 41562 Apr 12 07:47:31 ns382633 sshd\[16025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.107.196 |
2020-04-12 14:17:30 |