165.254.252.101

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

b'#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       165.254.0.0 - 165.254.255.255
CIDR:           165.254.0.0/16
NetName:        NTTA-165-254
NetHandle:      NET-165-254-0-0-1
Parent:         NET165 (NET-165-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   NTT America, Inc. (NTTAM-1)
RegDate:        1993-10-21
Updated:        2026-06-15
Comment:        Geofeed https://geo.ip.gin.ntt.net/geofeeds/geofeeds.csv
Comment:        
Comment:        Reassignment information for this block is
Comment:        available at rwhois.gin.ntt.net port 4321
Ref:            https://rdap.arin.net/registry/ip/165.254.0.0


OrgName:        NTT America, Inc.
OrgId:          NTTAM-1
Address:        15809 Bear Creek Pkwy
Address:        Suite 320
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        2005-12-08
Updated:        2024-03-04
Ref:            https://rdap.arin.net/registry/entity/NTTAM-1

ReferralServer:  rwhois://rwhois.gin.ntt.net:4321

OrgRoutingHandle: PEERI-ARIN
OrgRoutingName:   Peering
OrgRoutingPhone:  +1-877-688-6625 
OrgRoutingEmail:  peering@ntt.net
OrgRoutingRef:    https://rdap.arin.net/registry/entity/PEERI-ARIN

OrgNOCHandle: NASC-ARIN
OrgNOCName:   NTT America Support Contact
OrgNOCPhone:  +1-877-688-6625 
OrgNOCEmail:  ce-support@gin.ntt.net
OrgNOCRef:    https://rdap.arin.net/registry/entity/NASC-ARIN

OrgTechHandle: CANDE70-ARIN
OrgTechName:   Candela, Massimo 
OrgTechPhone:  +1-214-915-1366 
OrgTechEmail:  massimo@ntt.net
OrgTechRef:    https://rdap.arin.net/registry/entity/CANDE70-ARIN

OrgTechHandle: VIPAR-ARIN
OrgTechName:   VIPAR
OrgTechPhone:  +1-877-688-6625 
OrgTechEmail:  ipr@gin.ntt.net
OrgTechRef:    https://rdap.arin.net/registry/entity/VIPAR-ARIN

OrgAbuseHandle: NAAC-ARIN
OrgAbuseName:   NTT America Abuse Contact
OrgAbusePhone:  +1-877-688-6625 
OrgAbuseEmail:  abuse@ntt.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/NAAC-ARIN

RTechHandle: VIA4-ORG-ARIN
RTechName:   VIPAR
RTechPhone:  +1-877-688-6625 
RTechEmail:  ipr@gin.ntt.net
RTechRef:    https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to rwhois.gin.ntt.net:4321.

%rwhois V-1.5:0078b6:00 rwhois.gin.ntt.net (Vipar 0.1a. Comments to ipr@gin.ntt.net)
network:Class-Name:network
network:Auth-Area:165.254.0.0/16
network:ID:NETBLK-USV4-165-254-252.127.0.0.1/32
network:Handle:NETBLK-USV4-165-254-252
network:Network-Name:USV4-165-254-252
network:IP-Network:165.254.252.0/23
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:165.254.252.0 - 165.254.253.255
network:Org-Name:NTT America/Wholesale
network:Street-Address:101 Park Ave, 41st Floor
network:City:New York
network:State:NY
network:Postal-Code:10178
network:Country-Code:US
network:Tech-Contact;I:VRIO-NTTA.127.0.0.1/32
network:Created:2026-05-26 14:04:26.655018+00
network:Updated:2026-06-02 12:13:31.066256+00

network:Class-Name:network
network:Auth-Area:165.254.0.0/16
network:ID:NETBLK-USV4-165-254.127.0.0.1/32
network:Handle:NETBLK-USV4-165-254
network:Network-Name:USV4-165-254
network:IP-Network:165.254.0.0/16
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:165.254.0.0 - 165.254.255.255
network:Org-Name:NTT DATA
network:Street-Address:8300 E Maplewood Ave. Suite 400
network:City:Greenwood Village
network:State:CO
network:Postal-Code:80111
network:Country-Code:US
network:Tech-Contact;I:GIN-BBV4.127.0.0.1/32
network:Created:1999-10-21 05:00:00+00
network:Updated:2019-02-26 15:29:11.25021+00

%ok'

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.254.252.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7186
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;165.254.252.101.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026080500 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 05 17:11:24 CST 2026
;; MSG SIZE  rcvd: 108

Host info

Host 101.252.254.165.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 101.252.254.165.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.105.173.98	attack	Unauthorized connection attempt from IP address 200.105.173.98 on Port 445(SMB)	2020-09-02 22:15:21
111.229.103.45	attackspam	Invalid user bdos from 111.229.103.45 port 59130	2020-09-02 22:00:42
188.122.82.146	attack	0,17-04/18 [bc01/m05] PostRequest-Spammer scoring: Durban01	2020-09-02 22:05:18
95.10.134.249	attackbotsspam	Unauthorized connection attempt from IP address 95.10.134.249 on Port 445(SMB)	2020-09-02 22:16:30
198.199.72.47	attackbotsspam	firewall-block, port(s): 24521/tcp	2020-09-02 21:34:39
185.232.30.130	attackbots	TCP (SYN) 185.232.30.130:44445 -> port 30389, len 44	2020-09-02 22:10:35
160.153.245.123	attack	160.153.245.123 - - [02/Sep/2020:14:00:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 160.153.245.123 - - [02/Sep/2020:14:00:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 160.153.245.123 - - [02/Sep/2020:14:01:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-02 21:42:44
5.196.8.72	attack	Sep 2 04:17:50 localhost sshd\[28408\]: Invalid user monit from 5.196.8.72 port 60864 Sep 2 04:17:50 localhost sshd\[28408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.8.72 Sep 2 04:17:53 localhost sshd\[28408\]: Failed password for invalid user monit from 5.196.8.72 port 60864 ssh2 ...	2020-09-02 21:33:06
105.107.151.28	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-02 21:36:20
101.83.193.244	attack	Unauthorized connection attempt from IP address 101.83.193.244 on Port 445(SMB)	2020-09-02 22:10:20
5.239.122.127	attack	Automatic report - Port Scan Attack	2020-09-02 21:32:45
24.234.220.6	attackspambots	(sshd) Failed SSH login from 24.234.220.6 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 1 12:47:25 server2 sshd[17005]: Invalid user admin from 24.234.220.6 Sep 1 12:47:27 server2 sshd[17005]: Failed password for invalid user admin from 24.234.220.6 port 53454 ssh2 Sep 1 12:47:27 server2 sshd[17093]: Invalid user admin from 24.234.220.6 Sep 1 12:47:29 server2 sshd[17093]: Failed password for invalid user admin from 24.234.220.6 port 53511 ssh2 Sep 1 12:47:30 server2 sshd[17167]: Invalid user admin from 24.234.220.6	2020-09-02 21:32:19
180.167.53.18	attack	Sep 2 11:17:24 lnxweb62 sshd[24420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.53.18	2020-09-02 21:52:43
222.186.42.137	attack	2020-09-02T15:55:41.754482vps751288.ovh.net sshd\[28653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root 2020-09-02T15:55:43.606282vps751288.ovh.net sshd\[28653\]: Failed password for root from 222.186.42.137 port 46202 ssh2 2020-09-02T15:55:46.707613vps751288.ovh.net sshd\[28653\]: Failed password for root from 222.186.42.137 port 46202 ssh2 2020-09-02T15:56:00.174955vps751288.ovh.net sshd\[28655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root 2020-09-02T15:56:01.966799vps751288.ovh.net sshd\[28655\]: Failed password for root from 222.186.42.137 port 58520 ssh2	2020-09-02 21:59:44
222.186.180.130	attackbotsspam	Sep 2 14:28:27 rocket sshd[15163]: Failed password for root from 222.186.180.130 port 42440 ssh2 Sep 2 14:28:39 rocket sshd[15180]: Failed password for root from 222.186.180.130 port 32258 ssh2 ...	2020-09-02 21:35:24

Recently Reported IPs

14.212.103.164	104.251.82.147	146.190.251.179	2606:4700:10::ac43:2182
2606:4700:10::6814:6817	209.209.84.19	2606:4700:10::6816:1648	2606:4700:10::6814:8934
34.178.47.95	2606:4700:10::ac43:2303	185.238.231.150	43.106.49.85
2606:4700:10::6816:3625	20.65.94.140	61.164.213.27	103.199.122.118
64.118.133.74	111.172.4.57	172.206.67.244	2606:4700:10::6816:1114