Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Colorado

Country: United States

Internet Service Provider: RTC Communications LLC

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#



# start

NetRange:       205.168.0.0 - 205.171.255.255
CIDR:           205.168.0.0/14
NetName:        CENTURYLINK-LEGACY-QWEST-INET-35
NetHandle:      NET-205-168-0-0-1
Parent:         NET205 (NET-205-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   CenturyLink Communications, LLC (CCL-534)
RegDate:        1995-03-17
Updated:        2018-02-21
Ref:            https://rdap.arin.net/registry/ip/205.168.0.0



OrgName:        CenturyLink Communications, LLC
OrgId:          CCL-534
Address:        100 CENTURYLINK DR
City:           Monroe
StateProv:      LA
PostalCode:     71201
Country:        US
RegDate:        2018-07-12
Updated:        2024-06-17
Comment:        USAGE OF IP SPACE MUST COMPLY WITH OUR ACCEPTABLE USE POLICY:
Comment:        https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:        
Comment:        ADDRESSES COVERED BY THIS ORG-ID ARE NON-PORTABLE ANY ISP ANNOUNCING OR TRANSITING PORTIONS WITHIN OUR RANGES SHOULD NOT RELY ON PRESENTED LOA'S OR OLD WHOIS UNLESS THOSE RANGES ARE ALSO ACTIVELY DIRECTLY ANNOUNCED TO A LUMEN ASN. WITH ALL LOA'S THESE CONDITIONS APPLY:
Comment:        
Comment:        1. You are permitted to route the Lumen IP prefixes listed via Public BGP to your alternate ISP from the designated ASN. Any other ASN originating the prefix listed is forbidden.
Comment:        2. The Lumen IP prefixes listed can be routed via Public BGP to your alternate ISP as long as you remain an active customer with Lumen and continue to route the prefixes over at least one Lumen Internet circuit without significant traffic engineering.
Comment:        3. Should your Internet services with Lumen be discontinued, Lumen reserves the right to have your alternate ISP terminate the routing of the Lumen IP prefixes without advanced notification, should you fail to do so.
Comment:        4. All IP Addresses assigned or allocated by Lumen to an end-user (customer or ISP) shall be considered non-portable and will be reclaimed by Lumen upon service termination.
Comment:        5. Lumen reserves the right to conduct audits to ensure the LOA conditions are being met.
Comment:        6. Usage of IP space must comply with our AUP https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:        
Comment:        Our looking glass is located at: https://lookingglass.centurylink.com/
Comment:        
Comment:        For subpoena or court order please fax 844.254.5800 or refer to our Trust & Safety page:
Comment:        https://www.lumen.com/en-us/about/legal/trust-center/trust-and-safety.html
Comment:        
Comment:        For abuse issues, please email abuse@aup.lumen.com
Comment:        All abuse reports MUST include:
Comment:        * src IP
Comment:        * dest IP (your IP)
Comment:        * dest port
Comment:        * Accurate date/timestamp and timezone of activity
Comment:        * Intensity/frequency (short log extracts)
Comment:        * Your contact details (phone and email)
Comment:        Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref:            https://rdap.arin.net/registry/entity/CCL-534


OrgTechHandle: QIA-ARIN
OrgTechName:   Centurylink IP Admin
OrgTechPhone:  +1-877-886-6515 
OrgTechEmail:  ipadmin@centurylink.com
OrgTechRef:    https://rdap.arin.net/registry/entity/QIA-ARIN

OrgAbuseHandle: CAD54-ARIN
OrgAbuseName:   Centurylink Abuse Desk
OrgAbusePhone:  +1-877-886-6515 
OrgAbuseEmail:  abuse@aup.lumen.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/CAD54-ARIN

OrgRoutingHandle: RPKIR-ARIN
OrgRoutingName:   RPKI-ROA
OrgRoutingPhone:  +1-877-886-6515 
OrgRoutingEmail:  rpki-roa@lumen.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/RPKIR-ARIN

# end


# start

NetRange:       205.169.39.0 - 205.169.39.255
CIDR:           205.169.39.0/24
NetName:        LOANED-SPACE-TO-PALO-ALTO
NetHandle:      NET-205-169-39-0-1
Parent:         CENTURYLINK-LEGACY-QWEST-INET-35 (NET-205-168-0-0-1)
NetType:        Reassigned
OriginAS:       
Organization:   Palo Alto Networks, Inc (PAN-22)
RegDate:        2025-12-01
Updated:        2025-12-01
Ref:            https://rdap.arin.net/registry/ip/205.169.39.0


OrgName:        Palo Alto Networks, Inc
OrgId:          PAN-22
Address:        Palo Alto Networks
Address:        3000 Tannery Way
Address:        Santa Clara, CA 95054
City:           Santa Clara
StateProv:      CA
PostalCode:     95054
Country:        US
RegDate:        2017-11-22
Updated:        2024-11-25
Ref:            https://rdap.arin.net/registry/entity/PAN-22


OrgTechHandle: GNS20-ARIN
OrgTechName:   Global Network Services 
OrgTechPhone:  +1-408-753-4000 
OrgTechEmail:  gns-prod@paloaltonetworks.com
OrgTechRef:    https://rdap.arin.net/registry/entity/GNS20-ARIN

OrgAbuseHandle: IPABU42-ARIN
OrgAbuseName:   IP Abuse
OrgAbusePhone:  +1-408-753-4000 
OrgAbuseEmail:  dl-ipabuse@paloaltonetworks.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/IPABU42-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 205.169.39.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53048
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;205.169.39.201.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025121000 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 10 22:31:14 CST 2025
;; MSG SIZE  rcvd: 107
Host info
Host 201.39.169.205.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 201.39.169.205.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
124.156.241.17 attack
Port Scan detected!
...
2020-06-16 20:38:24
129.204.233.214 attack
2020-06-16T15:00:50.693377mail.standpoint.com.ua sshd[18766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.233.214  user=root
2020-06-16T15:00:53.080783mail.standpoint.com.ua sshd[18766]: Failed password for root from 129.204.233.214 port 38776 ssh2
2020-06-16T15:02:54.750012mail.standpoint.com.ua sshd[19054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.233.214  user=root
2020-06-16T15:02:56.826084mail.standpoint.com.ua sshd[19054]: Failed password for root from 129.204.233.214 port 38006 ssh2
2020-06-16T15:05:00.788065mail.standpoint.com.ua sshd[19340]: Invalid user aq from 129.204.233.214 port 37214
...
2020-06-16 20:24:54
112.85.42.172 attack
SSH invalid-user multiple login attempts
2020-06-16 20:45:43
176.98.216.149 attackspam
20/6/16@08:24:39: FAIL: Alarm-Network address from=176.98.216.149
20/6/16@08:24:39: FAIL: Alarm-Network address from=176.98.216.149
...
2020-06-16 20:30:57
78.194.196.203 attackbotsspam
Fail2Ban Ban Triggered
2020-06-16 20:04:57
123.185.8.4 attack
 TCP (SYN) 123.185.8.4:11831 -> port 23, len 44
2020-06-16 20:24:05
41.32.112.60 attackbots
20/6/16@08:24:37: FAIL: Alarm-Network address from=41.32.112.60
20/6/16@08:24:37: FAIL: Alarm-Network address from=41.32.112.60
...
2020-06-16 20:33:37
46.38.145.247 attackbotsspam
Jun 16 14:19:23 relay postfix/smtpd\[15015\]: warning: unknown\[46.38.145.247\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 16 14:20:02 relay postfix/smtpd\[22799\]: warning: unknown\[46.38.145.247\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 16 14:22:05 relay postfix/smtpd\[13980\]: warning: unknown\[46.38.145.247\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 16 14:22:44 relay postfix/smtpd\[24036\]: warning: unknown\[46.38.145.247\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 16 14:24:44 relay postfix/smtpd\[29904\]: warning: unknown\[46.38.145.247\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-16 20:25:16
177.5.43.196 attackbots
IP 177.5.43.196 attacked honeypot on port: 8080 at 6/16/2020 5:24:31 AM
2020-06-16 20:39:11
221.7.131.28 attackspam
DATE:2020-06-16 14:24:25, IP:221.7.131.28, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq)
2020-06-16 20:39:45
78.187.77.150 attack
Unauthorised access (Jun 16) SRC=78.187.77.150 LEN=52 TTL=116 ID=4443 DF TCP DPT=445 WINDOW=8192 SYN
2020-06-16 20:21:45
106.13.231.239 attackbots
06/16/2020-08:39:46.223326 106.13.231.239 Protocol: 6 ET SCAN Potential SSH Scan
2020-06-16 20:41:14
49.88.160.247 attack
Postfix RBL failed
2020-06-16 20:10:46
182.122.10.173 attackbots
Jun 16 05:41:42 datenbank sshd[13073]: Invalid user ga from 182.122.10.173 port 45708
Jun 16 05:41:45 datenbank sshd[13073]: Failed password for invalid user ga from 182.122.10.173 port 45708 ssh2
Jun 16 05:46:26 datenbank sshd[13080]: Invalid user gpadmin from 182.122.10.173 port 24284
...
2020-06-16 20:20:54
78.128.113.115 attackbots
2020-06-16 14:43:47 dovecot_plain authenticator failed for \(\[78.128.113.115\]\) \[78.128.113.115\]: 535 Incorrect authentication data \(set_id=abuse@opso.it\)
2020-06-16 14:43:55 dovecot_plain authenticator failed for \(\[78.128.113.115\]\) \[78.128.113.115\]: 535 Incorrect authentication data
2020-06-16 14:44:04 dovecot_plain authenticator failed for \(\[78.128.113.115\]\) \[78.128.113.115\]: 535 Incorrect authentication data
2020-06-16 14:44:10 dovecot_plain authenticator failed for \(\[78.128.113.115\]\) \[78.128.113.115\]: 535 Incorrect authentication data
2020-06-16 14:44:23 dovecot_plain authenticator failed for \(\[78.128.113.115\]\) \[78.128.113.115\]: 535 Incorrect authentication data
2020-06-16 20:46:17

Recently Reported IPs

103.191.15.151 103.127.219.59 2.58.56.55 91.25.109.227
216.36.96.207 167.172.177.125 81.94.156.226 135.237.126.203
39.144.162.230 180.178.57.74 34.231.195.239 221.207.34.189
28.76.5.176 142.93.199.16 5.180.186.61 1.82.133.130
100.30.248.17 83.4.161.145 47.84.99.214 47.237.80.102