# Target Analysis Report --- **Selector:** `65.130.44.199` **Type:** `IP Address` --- ## IP to Whois **Timestamp:** `20250605185255680` **Input:** `{"ip_address": "65.130.44.199"}` **Status:** `COMPLETE` **Stdout:** ``` [*] Found 'whois' executable at: /usr/bin/whois [*] Running system 'whois' command for 65.130.44.199... --- System WHOIS Output --- [Stdout] # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/resources/registry/whois/tou/ # # If you see inaccuracies in the results, please report at # https://www.arin.net/resources/registry/whois/inaccuracy_reporting/ # # Copyright 1997-2025, American Registry for Internet Numbers, Ltd. # NetRange: 65.128.0.0 - 65.159.255.255 CIDR: 65.128.0.0/11 NetName: CENTURYLINK-LEGACY-QWEST-INET-18 NetHandle: NET-65-128-0-0-1 Parent: NET65 (NET-65-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: CenturyLink Communications, LLC (CCL-534) RegDate: 2000-08-23 Updated: 2018-02-21 Ref: https://rdap.arin.net/registry/ip/65.128.0.0 OrgName: CenturyLink Communications, LLC OrgId: CCL-534 Address: 100 CENTURYLINK DR City: Monroe StateProv: LA PostalCode: 71201 Country: US RegDate: 2018-07-12 Updated: 2024-06-17 Comment: USAGE OF IP SPACE MUST COMPLY WITH OUR ACCEPTABLE USE POLICY: Comment: https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html Comment: Comment: ADDRESSES COVERED BY THIS ORG-ID ARE NON-PORTABLE ANY ISP ANNOUNCING OR TRANSITING PORTIONS WITHIN OUR RANGES SHOULD NOT RELY ON PRESENTED LOA'S OR OLD WHOIS UNLESS THOSE RANGES ARE ALSO ACTIVELY DIRECTLY ANNOUNCED TO A LUMEN ASN. WITH ALL LOA'S THESE CONDITIONS APPLY: Comment: Comment: 1. You are permitted to route the Lumen IP prefixes listed via Public BGP to your alternate ISP from the designated ASN. Any other ASN originating the prefix listed is forbidden. Comment: 2. The Lumen IP prefixes listed can be routed via Public BGP to your alternate ISP as long as you remain an active customer with Lumen and continue to route the prefixes over at least one Lumen Internet circuit without significant traffic engineering. Comment: 3. Should your Internet services with Lumen be discontinued, Lumen reserves the right to have your alternate ISP terminate the routing of the Lumen IP prefixes without advanced notification, should you fail to do so. Comment: 4. All IP Addresses assigned or allocated by Lumen to an end-user (customer or ISP) shall be considered non-portable and will be reclaimed by Lumen upon service termination. Comment: 5. Lumen reserves the right to conduct audits to ensure the LOA conditions are being met. Comment: 6. Usage of IP space must comply with our AUP https://www.lumen.com/en-us/about/legal/acceptable-use-policy.html Comment: Comment: Our looking glass is located at: https://lookingglass.centurylink.com/ Comment: Comment: For subpoena or court order please fax 844.254.5800 or refer to our Trust & Safety page: Comment: https://www.lumen.com/en-us/about/legal/trust-center/trust-and-safety.html Comment: Comment: For abuse issues, please email abuse@aup.lumen.com Comment: All abuse reports MUST include: Comment: * src IP Comment: * dest IP (your IP) Comment: * dest port Comment: * Accurate date/timestamp and timezone of activity Comment: * Intensity/frequency (short log extracts) Comment: * Your contact details (phone and email) Comment: Without these we will be unable to identify the correct owner of the IP address at that point in time. Ref: https://rdap.arin.net/registry/entity/CCL-534 OrgAbuseHandle: CAD54-ARIN OrgAbuseName: Centurylink Abuse Desk OrgAbusePhone: +1-877-886-6515 OrgAbuseEmail: abuse@aup.lumen.com OrgAbuseRef: https://rdap.arin.net/registry/entity/CAD54-ARIN OrgTechHandle: QIA-ARIN OrgTechName: Centurylink IP Admin OrgTechPhone: +1-877-886-6515 OrgTechEmail: ipadmin@centurylink.com OrgTechRef: https://rdap.arin.net/registry/entity/QIA-ARIN OrgRoutingHandle: RPKIR-ARIN OrgRoutingName: RPKI-ROA OrgRoutingPhone: +1-877-886-6515 OrgRoutingEmail: rpki-roa@lumen.com OrgRoutingRef: https://rdap.arin.net/registry/entity/RPKIR-ARIN # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/resources/registry/whois/tou/ # # If you see inaccuracies in the results, please report at # https://www.arin.net/resources/registry/whois/inaccuracy_reporting/ # # Copyright 1997-2025, American Registry for Internet Numbers, Ltd. # --------------------------- ``` **Stderr:** ``` *No standard error* ``` --- ## IP Geolocation Finder **Timestamp:** `20250605185306478` **Input:** `{"ip_address": "65.130.44.199"}` **Status:** `COMPLETE` **Stdout:** ``` [*] Checking IP: 65.130.44.199 [*] Geolocation Information: Country: United States (US) City: South Jordan Latitude: 40.5581 Longitude: -111.9222 ISP: CENTURYLINK-US-LEGACY-QWEST ``` **Stderr:** ``` *No standard error* ``` --- ## IP to ASN Lookup **Timestamp:** `20250605185317217` **Input:** `{"ip_address": "65.130.44.199"}` **Status:** `COMPLETE` **Stdout:** ``` [*] Querying Team Cymru WHOIS for IP: 65.130.44.199... --- Team Cymru WHOIS Information --- AS : 209 IP : 65.130.44.199 BGP Prefix : 65.130.0.0/16 CC : US Registry : arin Allocated : 2000-08-23 AS Name : CENTURYLINK-US-LEGACY-QWEST, US ------------------------------------ ``` **Stderr:** ``` *No standard error* ``` --- ## IP to Nslookup **Timestamp:** `20250605185328007` **Input:** `{"ip_address": "65.130.44.199"}` **Status:** `COMPLETE` **Stdout:** ``` 199.44.130.65.in-addr.arpa name = 65-130-44-199.slkc.qwest.net. Authoritative answers can be found from: ``` **Stderr:** ``` *No standard error* ``` --- ## IP to Dig -x **Timestamp:** `20250605185338748` **Input:** `{"ip_address": "65.130.44.199"}` **Status:** `COMPLETE` **Stdout:** ``` ; <<>> DiG 9.18.30-0ubuntu0.22.04.2-Ubuntu <<>> -x 65.130.44.199 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44557 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;199.44.130.65.in-addr.arpa. IN PTR ;; ANSWER SECTION: 199.44.130.65.in-addr.arpa. 300 IN PTR 65-130-44-199.slkc.qwest.net. ;; Query time: 48 msec ;; SERVER: 169.254.78.1#53(169.254.78.1) (UDP) ;; WHEN: Thu Jun 05 18:53:43 UTC 2025 ;; MSG SIZE rcvd: 97 ``` **Stderr:** ``` *No standard error* ``` --- ## IP to Traceroute UDP **Timestamp:** `20250605185344421` **Input:** `{"ip_address": "65.130.44.199"}` **Status:** `COMPLETE` **Stdout:** ``` --- Remote PING Output via SSH (134.199.140.209) --- [Stdout] traceroute to 65.130.44.199 (65.130.44.199), 30 hops max, 60 byte packets 1 138.68.34.247 1.403 ms 1.383 ms 138.68.34.246 1.183 ms 2 143.244.192.74 1.360 ms 143.244.192.78 1.389 ms 143.244.192.82 1.345 ms 3 143.244.224.14 1.213 ms 143.244.224.6 1.367 ms 143.244.224.16 1.315 ms 4 143.244.224.3 1.197 ms 143.244.224.11 1.171 ms 143.244.224.5 1.147 ms 5 4.71.117.217 3.120 ms 3.149 ms 4.7.18.9 3.100 ms 6 4.69.219.54 20.591 ms 20.429 ms 20.403 ms 7 4.68.38.162 20.454 ms 32.675 ms 20.394 ms 8 207.108.177.130 20.887 ms 20.871 ms 20.857 ms 9 * * * 10 * * * 11 * * * 12 * * * 13 * * * 14 * * * 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * ------------------------------------------------ ``` **Stderr:** ``` *No standard error* ``` --- ## CDN, Cloud, and WAF Detection **Timestamp:** `20250605185420783` **Input:** `{"domain_or_ip": "65.130.44.199"}` **Status:** `COMPLETE` **Stdout:** ``` *No standard output* ``` **Stderr:** ``` __ __ __ _________/ /___ _____/ /_ ___ _____/ /__ / ___/ __ / __ \/ ___/ __ \/ _ \/ ___/ //_/ / /__/ /_/ / / / / /__/ / / / __/ /__/ ,< \___/\__,_/_/ /_/\___/_/ /_/\___/\___/_/|_| projectdiscovery.io [INF] Current cdncheck version v1.1.16 (outdated) [INF] No results found. ``` --- ## Wise TCP Port Checker **Timestamp:** `20250605185431586` **Input:** `{"ip_address": "65.130.44.199", "tcp_ports": "80,443,22,8080,21,4567,23,53,143,110"}` **Status:** `COMPLETE` **Stdout:** ``` # Attempting to connect to 65.130.44.199:80... [+] Port 80 appears to be open. [-] No banner received immediately. Assuming HTTP or similar service. [*] Sending HTTP GET request... --- Request --- GET / HTTP/1.1 Host: 65.130.44.199 User-Agent: CCBot/2.0 Accept: */* Connection: close --------------- ## Received Response: HTTP/1.1 200 OK Server: openresty Date: Thu, 05 Jun 2025 18:54:39 GMT Content-Type: text/html Content-Length: 1033 Last-Modified: Wed, 22 May 2024 22:42:19 GMT Connection: close ETag: "664e74cb-409" Accept-Ranges: bytes Default Site

Congratulations!

You've successfully started the Nginx Proxy Manager.

If you're seeing this site then you're trying to access a host that isn't set up yet.

Log in to the Admin panel to get started.

Powered by Nginx Proxy Manager

# Attempting to connect to 65.130.44.199:443... [+] Port 443 appears to be open. [-] No banner received immediately. Assuming HTTP or similar service. [*] Sending HTTP GET request... --- Request --- GET / HTTP/1.1 Host: 65.130.44.199 User-Agent: CCBot/2.0 Accept: */* Connection: close --------------- ## Received Response: HTTP/1.1 400 Bad Request Server: openresty Date: Thu, 05 Jun 2025 18:54:42 GMT Content-Type: text/html Content-Length: 252 Connection: close 400 The plain HTTP request was sent to HTTPS port

400 Bad Request

The plain HTTP request was sent to HTTPS port
openresty
# Attempting to connect to 65.130.44.199:22... [-] Connection to 65.130.44.199:22 timed out. # Attempting to connect to 65.130.44.199:8080... [+] Port 8080 appears to be open. [-] No banner received immediately. Assuming HTTP or similar service. [*] Sending HTTP GET request... --- Request --- GET / HTTP/1.1 Host: 65.130.44.199 User-Agent: CCBot/2.0 Accept: */* Connection: close --------------- ## Received Response: HTTP/1.1 401 Unauthorized X-Plex-Protocol: 1.0 Content-Length: 193 Content-Type: text/html Connection: close Cache-Control: no-cache Date: Thu, 05 Jun 2025 18:54:50 GMT Unauthorized

401 Unauthorized

# Attempting to connect to 65.130.44.199:21... [-] Connection to 65.130.44.199:21 timed out. # Attempting to connect to 65.130.44.199:4567... [-] Connection to 65.130.44.199:4567 timed out. # Attempting to connect to 65.130.44.199:23... [-] Connection to 65.130.44.199:23 timed out. # Attempting to connect to 65.130.44.199:53... [-] Connection to 65.130.44.199:53 timed out. # Attempting to connect to 65.130.44.199:143... [-] Connection to 65.130.44.199:143 timed out. # Attempting to connect to 65.130.44.199:110... [-] Connection to 65.130.44.199:110 timed out. ### --- Port Check Logic End --- ### ``` **Stderr:** ``` Command '/usr/bin/python3 app.py --ip_address 65.130.44.199 --tcp_ports 80,443,22,8080,21,4567,23,53,143,110' returned non-zero exit status 1. ``` ---