City: Phoenix
Region: Arizona
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 65.112.0.0 - 65.127.255.255
CIDR: 65.112.0.0/12
NetName: CENTURYLINK-LEGACY-QWEST-65-112-0
NetHandle: NET-65-112-0-0-1
Parent: NET65 (NET-65-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: CenturyLink Communications, LLC (CCL-534)
RegDate: 2001-01-04
Updated: 2025-06-10
Ref: https://rdap.arin.net/registry/ip/65.112.0.0
OrgName: CenturyLink Communications, LLC
OrgId: CCL-534
Address: 100 CENTURYLINK DR
City: Monroe
StateProv: LA
PostalCode: 71201
Country: US
RegDate: 2018-07-12
Updated: 2026-04-22
Comment: USAGE OF IP SPACE MUST COMPLY WITH OUR ACCEPTABLE USE POLICY:
Comment: https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:
Comment: ADDRESSES COVERED BY THIS ORG-ID ARE NON-PORTABLE ANY ISP ANNOUNCING OR TRANSITING PORTIONS WITHIN OUR RANGES SHOULD NOT RELY ON PRESENTED LOA'S OR OLD WHOIS UNLESS THOSE RANGES ARE ALSO ACTIVELY DIRECTLY ANNOUNCED TO A LUMEN ASN. WITH ALL LOA'S THESE CONDITIONS APPLY:
Comment:
Comment: 1. You are permitted to route the Lumen IP prefixes listed via Public BGP to your alternate ISP from the designated ASN. Any other ASN originating the prefix listed is forbidden.
Comment: 2. The Lumen IP prefixes listed can be routed via Public BGP to your alternate ISP as long as you remain an active customer with Lumen and continue to route the prefixes over at least one Lumen Internet circuit without significant traffic engineering.
Comment: 3. Should your Internet services with Lumen be discontinued, Lumen reserves the right to have your alternate ISP terminate the routing of the Lumen IP prefixes without advanced notification, should you fail to do so.
Comment: 4. All IP Addresses assigned or allocated by Lumen to an end-user (customer or ISP) shall be considered non-portable and will be reclaimed by Lumen upon service termination.
Comment: 5. Lumen reserves the right to conduct audits to ensure the LOA conditions are being met.
Comment: 6. Usage of IP space must comply with our AUP https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:
Comment: Our looking glass is located at: https://lookingglass.centurylink.com/
Comment:
Comment: For subpoena or court order please fax 844.254.5800 or refer to our Trust & Safety page:
Comment: https://www.lumen.com/en-us/about/legal/trust-center/trust-and-safety.html
Comment:
Comment: For abuse issues, please email abuse@aup.lumen.com
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email)
Comment: Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/CCL-534
OrgAbuseHandle: CAD54-ARIN
OrgAbuseName: Centurylink Abuse Desk
OrgAbusePhone: +1-877-886-6515
OrgAbuseEmail: abuse@aup.lumen.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/CAD54-ARIN
OrgRoutingHandle: RPKIR-ARIN
OrgRoutingName: RPKI-ROA
OrgRoutingPhone: +1-877-886-6515
OrgRoutingEmail: rpki-roa@lumen.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/RPKIR-ARIN
OrgTechHandle: QIA-ARIN
OrgTechName: Centurylink IP Admin
OrgTechPhone: +1-877-886-6515
OrgTechEmail: ipadmin@centurylink.com
OrgTechRef: https://rdap.arin.net/registry/entity/QIA-ARIN
# end
# start
NetRange: 65.115.93.120 - 65.115.93.127
CIDR: 65.115.93.120/29
NetName: Q0508-65-115-93-120
NetHandle: NET-65-115-93-120-1
Parent: CENTURYLINK-LEGACY-QWEST-65-112-0 (NET-65-112-0-0-1)
NetType: Reassigned
OriginAS:
Organization: BRAINTREE PAYMENT SOLUTIONS (BPS-117)
RegDate: 2013-05-08
Updated: 2013-05-08
Ref: https://rdap.arin.net/registry/ip/65.115.93.120
OrgName: BRAINTREE PAYMENT SOLUTIONS
OrgId: BPS-117
Address: 1985 EL CAMINO REAL
City: PALO ALTO
StateProv: CA
PostalCode: 94306
Country: US
RegDate: 2013-05-08
Updated: 2013-05-08
Ref: https://rdap.arin.net/registry/entity/BPS-117
OrgAbuseHandle: VALLA8-ARIN
OrgAbuseName: VALLALY, MICHAEL
OrgAbusePhone: +1-847-769-5568
OrgAbuseEmail: mike@getbraintree.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/VALLA8-ARIN
OrgTechHandle: VALLA8-ARIN
OrgTechName: VALLALY, MICHAEL
OrgTechPhone: +1-847-769-5568
OrgTechEmail: mike@getbraintree.com
OrgTechRef: https://rdap.arin.net/registry/entity/VALLA8-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.115.93.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51323
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;65.115.93.120. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082401 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 25 13:53:12 CST 2026
;; MSG SIZE rcvd: 106120.93.115.65.in-addr.arpa domain name pointer 65-115-93-120.dia.static.qwest.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
120.93.115.65.in-addr.arpa name = 65-115-93-120.dia.static.qwest.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.88.112.75 | attackspam | Jul 5 13:40:24 dev0-dcde-rnet sshd[3079]: Failed password for root from 49.88.112.75 port 36657 ssh2 Jul 5 13:57:14 dev0-dcde-rnet sshd[3304]: Failed password for root from 49.88.112.75 port 31407 ssh2 |
2020-07-05 20:12:02 |
| 106.12.47.102 | attackspambots | Jul 5 14:24:52 nextcloud sshd\[27843\]: Invalid user ranger from 106.12.47.102 Jul 5 14:24:52 nextcloud sshd\[27843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.47.102 Jul 5 14:24:55 nextcloud sshd\[27843\]: Failed password for invalid user ranger from 106.12.47.102 port 33564 ssh2 |
2020-07-05 20:46:05 |
| 182.253.86.67 | attackspambots | VNC brute force attack detected by fail2ban |
2020-07-05 20:22:05 |
| 207.248.112.7 | attack | $f2bV_matches |
2020-07-05 20:08:58 |
| 218.97.50.169 | attackbots | Jul 5 14:24:50 debian-2gb-nbg1-2 kernel: \[16210504.103418\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=218.97.50.169 DST=195.201.40.59 LEN=52 TOS=0x02 PREC=0x00 TTL=111 ID=12798 DF PROTO=TCP SPT=55143 DPT=1433 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 |
2020-07-05 20:51:19 |
| 5.182.210.206 | attackspambots | " " |
2020-07-05 20:40:14 |
| 51.68.89.100 | attackbots | 3x Failed Password |
2020-07-05 20:42:20 |
| 54.39.151.64 | attackspam | Jul 5 12:15:36 game-panel sshd[31278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.151.64 Jul 5 12:15:38 game-panel sshd[31278]: Failed password for invalid user rdp from 54.39.151.64 port 38354 ssh2 Jul 5 12:24:56 game-panel sshd[31616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.151.64 |
2020-07-05 20:46:54 |
| 51.77.147.5 | attackbotsspam | Jul 5 12:38:10 game-panel sshd[32377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.147.5 Jul 5 12:38:13 game-panel sshd[32377]: Failed password for invalid user www from 51.77.147.5 port 51008 ssh2 Jul 5 12:41:22 game-panel sshd[32661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.147.5 |
2020-07-05 20:41:25 |
| 222.186.175.183 | attackspambots | Jul 5 14:35:40 nextcloud sshd\[7787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Jul 5 14:35:42 nextcloud sshd\[7787\]: Failed password for root from 222.186.175.183 port 45750 ssh2 Jul 5 14:35:46 nextcloud sshd\[7787\]: Failed password for root from 222.186.175.183 port 45750 ssh2 |
2020-07-05 20:37:49 |
| 115.233.209.189 | attackspam | Jul 5 14:04:18 OPSO sshd\[4990\]: Invalid user arlette from 115.233.209.189 port 45994 Jul 5 14:04:18 OPSO sshd\[4990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.233.209.189 Jul 5 14:04:20 OPSO sshd\[4990\]: Failed password for invalid user arlette from 115.233.209.189 port 45994 ssh2 Jul 5 14:07:36 OPSO sshd\[5537\]: Invalid user daniel from 115.233.209.189 port 37711 Jul 5 14:07:36 OPSO sshd\[5537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.233.209.189 |
2020-07-05 20:08:14 |
| 138.117.179.134 | attack | SSH invalid-user multiple login try |
2020-07-05 20:38:46 |
| 146.0.41.70 | attack | $f2bV_matches |
2020-07-05 20:40:35 |
| 51.178.28.196 | attackspambots | SSH Login Bruteforce |
2020-07-05 20:45:00 |
| 106.13.233.5 | attackspambots | Jul 5 14:01:47 host sshd[23904]: Invalid user exp from 106.13.233.5 port 44304 ... |
2020-07-05 20:09:14 |