Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: RTC Communications LLC

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#


NetRange:       65.128.0.0 - 65.159.255.255
CIDR:           65.128.0.0/11
NetName:        CENTURYLINK-LEGACY-QWEST-INET-18
NetHandle:      NET-65-128-0-0-1
Parent:         NET65 (NET-65-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   CenturyLink Communications, LLC (CCL-534)
RegDate:        2000-08-23
Updated:        2018-02-21
Ref:            https://rdap.arin.net/registry/ip/65.128.0.0



OrgName:        CenturyLink Communications, LLC
OrgId:          CCL-534
Address:        100 CENTURYLINK DR
City:           Monroe
StateProv:      LA
PostalCode:     71201
Country:        US
RegDate:        2018-07-12
Updated:        2024-06-17
Comment:        USAGE OF IP SPACE MUST COMPLY WITH OUR ACCEPTABLE USE POLICY:
Comment:        https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:        
Comment:        ADDRESSES COVERED BY THIS ORG-ID ARE NON-PORTABLE ANY ISP ANNOUNCING OR TRANSITING PORTIONS WITHIN OUR RANGES SHOULD NOT RELY ON PRESENTED LOA'S OR OLD WHOIS UNLESS THOSE RANGES ARE ALSO ACTIVELY DIRECTLY ANNOUNCED TO A LUMEN ASN. WITH ALL LOA'S THESE CONDITIONS APPLY:
Comment:        
Comment:        1. You are permitted to route the Lumen IP prefixes listed via Public BGP to your alternate ISP from the designated ASN. Any other ASN originating the prefix listed is forbidden.
Comment:        2. The Lumen IP prefixes listed can be routed via Public BGP to your alternate ISP as long as you remain an active customer with Lumen and continue to route the prefixes over at least one Lumen Internet circuit without significant traffic engineering.
Comment:        3. Should your Internet services with Lumen be discontinued, Lumen reserves the right to have your alternate ISP terminate the routing of the Lumen IP prefixes without advanced notification, should you fail to do so.
Comment:        4. All IP Addresses assigned or allocated by Lumen to an end-user (customer or ISP) shall be considered non-portable and will be reclaimed by Lumen upon service termination.
Comment:        5. Lumen reserves the right to conduct audits to ensure the LOA conditions are being met.
Comment:        6. Usage of IP space must comply with our AUP https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:        
Comment:        Our looking glass is located at: https://lookingglass.centurylink.com/
Comment:        
Comment:        For subpoena or court order please fax 844.254.5800 or refer to our Trust & Safety page:
Comment:        https://www.lumen.com/en-us/about/legal/trust-center/trust-and-safety.html
Comment:        
Comment:        For abuse issues, please email abuse@aup.lumen.com
Comment:        All abuse reports MUST include:
Comment:        * src IP
Comment:        * dest IP (your IP)
Comment:        * dest port
Comment:        * Accurate date/timestamp and timezone of activity
Comment:        * Intensity/frequency (short log extracts)
Comment:        * Your contact details (phone and email)
Comment:        Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref:            https://rdap.arin.net/registry/entity/CCL-534


OrgAbuseHandle: CAD54-ARIN
OrgAbuseName:   Centurylink Abuse Desk
OrgAbusePhone:  +1-877-886-6515 
OrgAbuseEmail:  abuse@aup.lumen.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/CAD54-ARIN

OrgRoutingHandle: RPKIR-ARIN
OrgRoutingName:   RPKI-ROA
OrgRoutingPhone:  +1-877-886-6515 
OrgRoutingEmail:  rpki-roa@lumen.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/RPKIR-ARIN

OrgTechHandle: QIA-ARIN
OrgTechName:   Centurylink IP Admin
OrgTechPhone:  +1-877-886-6515 
OrgTechEmail:  ipadmin@centurylink.com
OrgTechRef:    https://rdap.arin.net/registry/entity/QIA-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.145.188.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25269
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;65.145.188.133.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025092600 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 26 18:27:33 CST 2025
;; MSG SIZE  rcvd: 107
Host info
Host 133.188.145.65.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 133.188.145.65.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
36.92.154.122 attackbotsspam
20/9/5@12:47:31: FAIL: Alarm-Network address from=36.92.154.122
...
2020-09-07 00:35:29
80.82.77.227 attackbotsspam
" "
2020-09-06 23:57:17
89.47.62.88 attackbotsspam
(smtpauth) Failed SMTP AUTH login from 89.47.62.88 (GB/United Kingdom/-): 5 in the last 3600 secs
2020-09-06 23:56:45
45.142.120.192 attackspam
2020-09-06 18:32:10 dovecot_login authenticator failed for \(User\) \[45.142.120.192\]: 535 Incorrect authentication data \(set_id=livestream@no-server.de\)
2020-09-06 18:32:53 dovecot_login authenticator failed for \(User\) \[45.142.120.192\]: 535 Incorrect authentication data \(set_id=oascentral@no-server.de\)
2020-09-06 18:33:57 dovecot_login authenticator failed for \(User\) \[45.142.120.192\]: 535 Incorrect authentication data \(set_id=gertrude@no-server.de\)
2020-09-06 18:34:03 dovecot_login authenticator failed for \(User\) \[45.142.120.192\]: 535 Incorrect authentication data \(set_id=gertrude@no-server.de\)
2020-09-06 18:34:35 dovecot_login authenticator failed for \(User\) \[45.142.120.192\]: 535 Incorrect authentication data \(set_id=dean@no-server.de\)
2020-09-06 18:34:35 dovecot_login authenticator failed for \(User\) \[45.142.120.192\]: 535 Incorrect authentication data \(set_id=dean@no-server.de\)
2020-09-06 18:34:37 dovecot_login authenticator failed for \(User\) \[45.1
...
2020-09-07 00:36:41
106.8.167.27 attack
2020-08-31 07:22:10 login_virtual_exim authenticator failed for (In9EMuTfU) [106.8.167.27]: 535 Incorrect authentication data (set_id=strueber.stellpflug)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.8.167.27
2020-09-07 00:26:18
2a01:4f8:c17:8ad7::1 attackbots
xmlrpc attack
2020-09-07 00:29:43
51.75.87.58 attack
2020-09-05 12:39:32.540258-0500  localhost smtpd[46585]: NOQUEUE: reject: RCPT from unknown[51.75.87.58]: 450 4.7.25 Client host rejected: cannot find your hostname, [51.75.87.58]; from= to= proto=ESMTP helo=
2020-09-07 00:15:31
129.45.76.52 attackspambots
2020-09-05 11:35:48.851568-0500  localhost smtpd[41784]: NOQUEUE: reject: RCPT from unknown[129.45.76.52]: 554 5.7.1 Service unavailable; Client host [129.45.76.52] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/129.45.76.52; from= to= proto=ESMTP helo=<[129.45.76.52]>
2020-09-07 00:18:52
73.255.154.127 attack
73.255.154.127 - - \[05/Sep/2020:23:40:07 +0300\] "POST /xmlrpc.php HTTP/1.1" 403 5589 "-" "Mozilla/5.0 \(X11\; Linux i686\; rv:2.0.1\) Gecko/20100101 Firefox/4.0.1"73.255.154.127 - - \[05/Sep/2020:23:47:57 +0300\] "POST /xmlrpc.php HTTP/1.1" 403 5589 "-" "Mozilla/5.0 \(X11\; Linux i686\; rv:2.0.1\) Gecko/20100101 Firefox/4.0.1"
...
2020-09-07 00:04:42
117.221.22.178 attackbots
20/9/5@13:56:03: FAIL: Alarm-Network address from=117.221.22.178
...
2020-09-07 00:30:31
2.38.130.63 attackbots
 TCP (SYN) 2.38.130.63:8570 -> port 8080, len 44
2020-09-07 00:34:16
126.203.36.46 attackbotsspam
Aug 31 07:14:37 v26 sshd[27039]: Invalid user pi from 126.203.36.46 port 39026
Aug 31 07:14:37 v26 sshd[27037]: Invalid user pi from 126.203.36.46 port 39024
Aug 31 07:14:37 v26 sshd[27037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=126.203.36.46
Aug 31 07:14:37 v26 sshd[27039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=126.203.36.46
Aug 31 07:14:39 v26 sshd[27039]: Failed password for invalid user pi from 126.203.36.46 port 39026 ssh2
Aug 31 07:14:39 v26 sshd[27037]: Failed password for invalid user pi from 126.203.36.46 port 39024 ssh2
Aug 31 07:14:39 v26 sshd[27039]: Connection closed by 126.203.36.46 port 39026 [preauth]
Aug 31 07:14:39 v26 sshd[27037]: Connection closed by 126.203.36.46 port 39024 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=126.203.36.46
2020-09-06 23:59:30
213.49.57.234 attackbots
Port Scan detected!
...
2020-09-07 00:27:41
104.244.75.157 attack
Sep  6 17:42:06 santamaria sshd\[27180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.75.157  user=root
Sep  6 17:42:09 santamaria sshd\[27180\]: Failed password for root from 104.244.75.157 port 34869 ssh2
Sep  6 17:42:17 santamaria sshd\[27180\]: Failed password for root from 104.244.75.157 port 34869 ssh2
...
2020-09-07 00:09:30
218.92.0.192 attackbots
Sep  6 17:27:34 sip sshd[1526304]: Failed password for root from 218.92.0.192 port 28960 ssh2
Sep  6 17:30:15 sip sshd[1526318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.192  user=root
Sep  6 17:30:17 sip sshd[1526318]: Failed password for root from 218.92.0.192 port 32167 ssh2
...
2020-09-07 00:16:14

Recently Reported IPs

103.20.81.67 20.80.80.29 192.168.41.14 13.89.121.92
183.10.99.69 183.24.166.138 183.21.244.200 82.147.88.84
144.172.97.117 1.10.245.86 113.95.133.220 209.38.100.53
14.212.111.7 194.50.91.19 122.245.187.231 99.209.99.82
170.64.147.31 10.0.10.99 117.70.138.106 79.124.58.138