City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 8.8.9.0 - 8.127.255.255
CIDR: 8.8.9.0/24, 8.8.64.0/18, 8.10.0.0/15, 8.8.16.0/20, 8.32.0.0/11, 8.12.0.0/14, 8.64.0.0/10, 8.16.0.0/12, 8.8.128.0/17, 8.8.32.0/19, 8.8.10.0/23, 8.9.0.0/16, 8.8.12.0/22
NetName: LVLT-ORG-8-8
NetHandle: NET-8-8-9-0-3
Parent: NET8 (NET-8-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Level 3 Parent, LLC (LPL-141)
RegDate: 1992-12-01
Updated: 2023-12-28
Ref: https://rdap.arin.net/registry/ip/8.8.9.0
OrgName: Level 3 Parent, LLC
OrgId: LPL-141
Address: 100 CenturyLink Drive
City: Monroe
StateProv: LA
PostalCode: 71203
Country: US
RegDate: 2018-02-06
Updated: 2026-04-22
Comment: USAGE OF IP SPACE MUST COMPLY WITH OUR ACCEPTABLE USE POLICY:
Comment: https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:
Comment: ADDRESSES COVERED BY THIS ORG-ID ARE NON-PORTABLE ANY ISP ANNOUNCING OR TRANSITING PORTIONS WITHIN OUR RANGES SHOULD NOT RELY ON PRESENTED LOA'S OR OLD WHOIS UNLESS THOSE RANGES ARE ALSO ACTIVELY DIRECTLY ANNOUNCED TO A LUMEN ASN. WITH ALL LOA'S THESE CONDITIONS APPLY:
Comment:
Comment: 1. You are permitted to route the Lumen IP prefixes listed via Public BGP to your alternate ISP from the designated ASN. Any other ASN originating the prefix listed is forbidden.
Comment: 2. The Lumen IP prefixes listed can be routed via Public BGP to your alternate ISP as long as you remain an active customer with Lumen and continue to route the prefixes over at least one Lumen Internet circuit without significant traffic engineering.
Comment: 3. Should your Internet services with Lumen be discontinued, Lumen reserves the right to have your alternate ISP terminate the routing of the Lumen IP prefixes without advanced notification, should you fail to do so.
Comment: 4. All IP Addresses assigned or allocated by Lumen to an end-user (customer or ISP) shall be considered non-portable and will be reclaimed by Lumen upon service termination.
Comment: 5. Lumen reserves the right to conduct audits to ensure the LOA conditions are being met.
Comment: 6. Usage of IP space must comply with our AUP https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html
Comment:
Comment: Our looking glass is located at: https://lookingglass.centurylink.com/
Comment:
Comment: For subpoena or court order please fax 844.254.5800 or refer to our Trust & Safety page:
Comment: https://www.lumen.com/en-us/about/legal/trust-center/trust-and-safety.html
Comment:
Comment: For abuse issues, please email abuse@aup.lumen.com
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email)
Comment: Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/LPL-141
OrgAbuseHandle: LAC56-ARIN
OrgAbuseName: L3 Abuse Contact
OrgAbusePhone: +1-877-453-8353
OrgAbuseEmail: abuse@level3.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/LAC56-ARIN
OrgRoutingHandle: RPKIR-ARIN
OrgRoutingName: RPKI-ROA
OrgRoutingPhone: +1-877-886-6515
OrgRoutingEmail: rpki-roa@lumen.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/RPKIR-ARIN
OrgTechHandle: APL7-ARIN
OrgTechName: ADMIN POC LVLT
OrgTechPhone: +1-877-453-8353
OrgTechEmail: ipadmin@centurylink.com
OrgTechRef: https://rdap.arin.net/registry/entity/APL7-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 8.36.72.235
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64808
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;8.36.72.235. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042500 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 25 21:06:30 CST 2026
;; MSG SIZE rcvd: 104Host 235.72.36.8.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 235.72.36.8.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 196.38.70.24 | attack | 5x Failed Password |
2020-04-03 04:22:24 |
| 217.21.193.74 | attackbotsspam | IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking. |
2020-04-03 04:21:18 |
| 221.215.149.34 | attackspambots | Apr 2 23:14:50 itv-usvr-01 sshd[3532]: Invalid user sz from 221.215.149.34 Apr 2 23:14:50 itv-usvr-01 sshd[3532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.215.149.34 Apr 2 23:14:50 itv-usvr-01 sshd[3532]: Invalid user sz from 221.215.149.34 Apr 2 23:14:52 itv-usvr-01 sshd[3532]: Failed password for invalid user sz from 221.215.149.34 port 19987 ssh2 Apr 2 23:23:47 itv-usvr-01 sshd[3880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.215.149.34 user=root Apr 2 23:23:49 itv-usvr-01 sshd[3880]: Failed password for root from 221.215.149.34 port 3985 ssh2 |
2020-04-03 03:54:38 |
| 162.243.129.106 | attackbots | 8022/tcp 2376/tcp 161/udp... [2020-02-04/04-02]23pkt,18pt.(tcp),3pt.(udp) |
2020-04-03 04:22:40 |
| 157.230.25.61 | attack | CMS (WordPress or Joomla) login attempt. |
2020-04-03 04:06:08 |
| 128.199.206.170 | attackbotsspam | 2020-04-02T13:12:10.735987linuxbox-skyline sshd[4441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.206.170 user=root 2020-04-02T13:12:12.524788linuxbox-skyline sshd[4441]: Failed password for root from 128.199.206.170 port 36016 ssh2 ... |
2020-04-03 04:06:56 |
| 118.24.89.243 | attackbotsspam | Apr 2 13:00:14 localhost sshd[30237]: Invalid user yukti from 118.24.89.243 port 45476 Apr 2 13:00:14 localhost sshd[30237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.89.243 Apr 2 13:00:14 localhost sshd[30237]: Invalid user yukti from 118.24.89.243 port 45476 Apr 2 13:00:17 localhost sshd[30237]: Failed password for invalid user yukti from 118.24.89.243 port 45476 ssh2 Apr 2 13:09:26 localhost sshd[31235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.89.243 user=root Apr 2 13:09:27 localhost sshd[31235]: Failed password for root from 118.24.89.243 port 55080 ssh2 ... |
2020-04-03 03:50:24 |
| 177.69.39.19 | attackspam | Apr 2 19:47:03 hosting sshd[22054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.39.19 user=root Apr 2 19:47:05 hosting sshd[22054]: Failed password for root from 177.69.39.19 port 14349 ssh2 ... |
2020-04-03 03:55:27 |
| 106.13.65.207 | attackspambots | $f2bV_matches |
2020-04-03 04:02:44 |
| 94.181.94.12 | attackspambots | Invalid user mg from 94.181.94.12 port 35732 |
2020-04-03 04:26:34 |
| 137.74.159.147 | attackbotsspam | Apr 2 21:38:36 jane sshd[28968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.159.147 Apr 2 21:38:38 jane sshd[28968]: Failed password for invalid user test from 137.74.159.147 port 35882 ssh2 ... |
2020-04-03 03:56:14 |
| 83.223.208.13 | attackbotsspam | Invalid user rentbikegate from 83.223.208.13 port 51008 |
2020-04-03 04:12:46 |
| 188.190.91.156 | attackbots | trying to access non-authorized port |
2020-04-03 04:21:52 |
| 49.88.112.75 | attack | Apr 3 01:26:13 gw1 sshd[6402]: Failed password for root from 49.88.112.75 port 47610 ssh2 ... |
2020-04-03 04:27:21 |
| 162.247.73.192 | attack | (mod_security) mod_security (id:210492) triggered by 162.247.73.192 (US/United States/-): 5 in the last 3600 secs |
2020-04-03 04:08:10 |