City: Mercês
Region: Minas Gerais
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 170.254.0.0 - 170.254.255.255
CIDR: 170.254.0.0/16
NetName: LACNIC-ERX-170-254-0-0
NetHandle: NET-170-254-0-0-1
Parent: NET170 (NET-170-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Comment: or check the WHOIS server located at http://whois.lacnic.net
Ref: https://rdap.arin.net/registry/ip/170.254.0.0
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.lacnic.net.
% IP Client: 124.223.158.242
% Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-08-29T01:56:52-03:00 - 124.223.158.242
inetnum: 170.254.224.0/22
aut-num: AS265382
abuse-c: YOSLT2
owner: CIOTEC TELECOM LTDA ME
ownerid: 10.703.557/0001-42
responsible: Cirilo Daniel de Souza
owner-c: CIDAN17
tech-c: BRL185
inetrev: 170.254.225.0/24
nserver: a.dns.youisp.com.br
nsstat: 20260828 AA
nslastaa: 20260828
nserver: b.dns.youisp.com.br
nsstat: 20260828 AA
nslastaa: 20260828
created: 20160801
changed: 20240516
nic-hdl-br: CIDAN17
person: cirilo daniel
created: 20150223
changed: 20240527
nic-hdl-br: BRL185
person: Brasil Radiowave LTDA
created: 20040506
changed: 20220706
nic-hdl-br: YOSLT2
person: YOU SOLU��ES LTDA
created: 20210727
changed: 20220922
% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.254.225.247
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31205
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;170.254.225.247. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082801 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 29 12:49:32 CST 2026
;; MSG SIZE rcvd: 108
247.225.254.170.in-addr.arpa domain name pointer 170.254.225-247.ciotec.com.br.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
247.225.254.170.in-addr.arpa name = 170.254.225-247.ciotec.com.br.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.176.27.30 | attackbotsspam | 12/21/2019-12:22:36.752867 185.176.27.30 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-21 19:46:57 |
| 49.88.112.59 | attack | Dec 21 15:15:50 server sshd\[24459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.59 user=root Dec 21 15:15:52 server sshd\[24459\]: Failed password for root from 49.88.112.59 port 23299 ssh2 Dec 21 15:15:55 server sshd\[24459\]: Failed password for root from 49.88.112.59 port 23299 ssh2 Dec 21 15:15:59 server sshd\[24459\]: Failed password for root from 49.88.112.59 port 23299 ssh2 Dec 21 15:16:02 server sshd\[24459\]: Failed password for root from 49.88.112.59 port 23299 ssh2 ... |
2019-12-21 20:19:20 |
| 178.128.216.127 | attackspam | Dec 21 09:48:37 vps647732 sshd[18309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.216.127 Dec 21 09:48:40 vps647732 sshd[18309]: Failed password for invalid user sturle from 178.128.216.127 port 48736 ssh2 ... |
2019-12-21 20:09:29 |
| 101.99.33.145 | attack | 1576909468 - 12/21/2019 07:24:28 Host: 101.99.33.145/101.99.33.145 Port: 445 TCP Blocked |
2019-12-21 20:12:02 |
| 114.45.84.112 | attackspambots | Unauthorized connection attempt from IP address 114.45.84.112 on Port 445(SMB) |
2019-12-21 20:26:13 |
| 222.186.180.9 | attackbotsspam | Dec 21 16:50:07 gw1 sshd[27731]: Failed password for root from 222.186.180.9 port 16148 ssh2 Dec 21 16:50:10 gw1 sshd[27731]: Failed password for root from 222.186.180.9 port 16148 ssh2 ... |
2019-12-21 19:52:05 |
| 185.153.198.211 | attackbots | Dec 21 10:15:51 mc1 kernel: \[1078562.399713\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.153.198.211 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=14976 PROTO=TCP SPT=45423 DPT=33389 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 21 10:16:19 mc1 kernel: \[1078590.485714\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.153.198.211 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57890 PROTO=TCP SPT=45423 DPT=33399 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 21 10:18:39 mc1 kernel: \[1078730.690662\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.153.198.211 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=19805 PROTO=TCP SPT=45423 DPT=33893 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-21 20:06:28 |
| 87.106.193.162 | attack | $f2bV_matches |
2019-12-21 20:18:06 |
| 174.138.56.93 | attack | Invalid user admin from 174.138.56.93 port 57794 |
2019-12-21 20:01:44 |
| 34.67.184.22 | attack | Automatically reported by fail2ban report script (mx1) |
2019-12-21 19:50:55 |
| 211.25.234.14 | attackspam | Dec 21 07:24:14 icecube postfix/smtpd[93095]: NOQUEUE: reject: RCPT from unknown[211.25.234.14]: 554 5.7.1 Service unavailable; Client host [211.25.234.14] blocked using all.spamrats.com; SPAMRATS IP Addresses See: http://www.spamrats.com/bl?211.25.234.14; from= |
2019-12-21 20:21:59 |
| 222.186.173.180 | attackbots | 2019-12-21T12:57:30.691299vps751288.ovh.net sshd\[19840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180 user=root 2019-12-21T12:57:32.650011vps751288.ovh.net sshd\[19840\]: Failed password for root from 222.186.173.180 port 56030 ssh2 2019-12-21T12:57:36.569957vps751288.ovh.net sshd\[19840\]: Failed password for root from 222.186.173.180 port 56030 ssh2 2019-12-21T12:57:39.727049vps751288.ovh.net sshd\[19840\]: Failed password for root from 222.186.173.180 port 56030 ssh2 2019-12-21T12:57:43.296087vps751288.ovh.net sshd\[19840\]: Failed password for root from 222.186.173.180 port 56030 ssh2 |
2019-12-21 20:00:07 |
| 181.48.134.65 | attack | Dec 21 11:21:13 * sshd[30533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.134.65 Dec 21 11:21:15 * sshd[30533]: Failed password for invalid user steve from 181.48.134.65 port 47650 ssh2 |
2019-12-21 20:29:46 |
| 177.128.104.207 | attack | $f2bV_matches |
2019-12-21 19:49:04 |
| 51.38.32.230 | attackspambots | Invalid user chojen from 51.38.32.230 port 60236 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.32.230 Failed password for invalid user chojen from 51.38.32.230 port 60236 ssh2 Invalid user chojen from 51.38.32.230 port 34988 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.32.230 |
2019-12-21 20:15:44 |