Forum Moderators: open

Message Too Old, No Replies

Requesting opinion or experience with Centurylink /24

Bot activity? VPN or Proxy?

         

SumGuy

11:19 pm on Nov 28, 2022 (gmt 0)

5+ Year Member Top Contributors Of The Month



Can anyone who maintains IP logs of web hits check to see if they have any records for 205.169.39.0/24?

My history of hits from that /24 starts sept 30 / 2020 but really ramps up March 25 / 2021 and what I'd really like to know is - is this a proxy or vpn of some sort?

I never see referrers from the hits I get, the browser is always chrome (up until recently an older version of chrome like 7x or 83, one hit was X11; Linux x86_64 headless chrome), requests for my landing page html file don't necessarily follow through with the rest of the page files, and this request in particular is odd:

/squid-internal-static/icons/SN.png

Have only seen this once - today. Otherwise never see the typical garbage (like wp-login.php, etc).

This /24 comes back as CenturyLink Communications, part of a /14 but curiously this particular /24 is also announced.

Websites like abuseipdb.com show a history of "abuse" sightings from this /24. And for what it's worth, I've never seen hits from anything inside 205.169.0.0/16 except from this /24.