DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

ORG REPORT — CenturyLink Communications, LLC · centurylink communications, llc

First sighted: July 18, 2023, 3 a.m. · Last sighted: Jan. 25, 2026, 2 a.m.

Risk
12 (low)
Total hits
3134
Total errors
265
Distinct IPs
382
Distinct ASNs
6
Top country
United States
Top city
Albuquerque
Top region
New Mexico

Risk

Model: v1 Computed: 2026-01-29 19:10:08
Risk score
12
Low
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Automated client behavior
Traffic patterns strongly suggest automation rather than a human-operated browser.
bot
Hits 417
Points 208.50
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 7
Points 29.70
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 184
Points 22.68
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 24
Points 21.60
Request size anomaly
Requests are unusually large or shaped in a way that suggests abuse or automation.
request_size
Hits 208
Points 17.40
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 1
Points 8.80

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this organization.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
2328
3xx
47
4xx
125
5xx
140
Unique URLs
2070
Total hits
3134
First seen
July 18, 2023, 3 a.m.
Last seen
Jan. 25, 2026, 2 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Automated client behavior bot
Traffic patterns strongly suggest automation rather than a human-operated browser.
hits 417 pts 208.50
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 417 1 208.50 Oct. 29, 2023, 8:01 p.m. May 26, 2025, 6:23 a.m.
bot 417
Credential brute forcing cred
Repeated authentication attempts consistent with password guessing or credential stuffing.
hits 7 pts 29.70
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 3 1 16.50 Dec. 20, 2023, 3:09 p.m. Dec. 20, 2023, 3:09 p.m.
cred 3
12 2 1 13.20 Dec. 20, 2023, 3:09 p.m. Dec. 20, 2023, 3:09 p.m.
cred 2
0 2 1 0.00 Dec. 20, 2023, 3:09 p.m. Dec. 20, 2023, 3:09 p.m.
cred 2
User-Agent anomaly ua
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 184 pts 22.68
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
6 179 1 21.48 Dec. 12, 2023, 7:05 a.m. Dec. 11, 2025, 9:08 a.m.
ua 179
12 5 1 1.20 Sept. 21, 2023, 5:46 a.m. Dec. 6, 2024, 2:44 a.m.
ua 5
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 24 pts 21.60
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 12 1 21.60 Nov. 29, 2024, 10:52 p.m. March 29, 2025, 9:28 a.m.
scan_velocity 12
0 12 1 0.00 Nov. 29, 2024, 10:52 p.m. March 29, 2025, 9:28 a.m.
scan_velocity 12
Request size anomaly request_size
Requests are unusually large or shaped in a way that suggests abuse or automation.
hits 208 pts 17.40
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
12 23 1 16.56 Dec. 30, 2024, 1:50 a.m. Oct. 14, 2025, 6:14 a.m.
request_size 23
14 1 1 0.84 May 31, 2025, 6:19 p.m. May 31, 2025, 6:19 p.m.
request_size 1
0 184 1 0.00 Dec. 30, 2024, 1:50 a.m. Oct. 14, 2025, 6:13 a.m.
request_size 184
Sensitive file probing sfp
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 1 pts 8.80
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
40 1 1 8.80 July 19, 2023, 2:09 a.m. July 19, 2023, 2:09 a.m.
sensitive_file 1

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Uses totals aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this Org snapshot (peer IPs with coordinates).

Loading map…

ASNs held by this org

Derived from IP rollups (IPReportTotal). Grouped by (asn, as_org_name).
Loading…

Interesting IPs

Top risky peers inside this org (latest snapshot). Sorted by risk score, then hits.

No matching IP rows available for this org.