Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Mercês

Region: Minas Gerais

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       170.254.0.0 - 170.254.255.255
CIDR:           170.254.0.0/16
NetName:        LACNIC-ERX-170-254-0-0
NetHandle:      NET-170-254-0-0-1
Parent:         NET170 (NET-170-0-0-0-0)
NetType:        Transferred to LACNIC
OriginAS:       
Organization:   Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate:        2010-11-03
Updated:        2010-11-17
Comment:        This IP address range is under LACNIC responsibility
Comment:        for further allocations to users in LACNIC region.
Comment:        Please see http://www.lacnic.net/ for further details,
Comment:        or check the WHOIS server located at http://whois.lacnic.net
Ref:            https://rdap.arin.net/registry/ip/170.254.0.0

ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink:  whois.lacnic.net


OrgName:        Latin American and Caribbean IP address Regional Registry
OrgId:          LACNIC
Address:        Rambla Republica de Mexico 6125
City:           Montevideo
StateProv:      
PostalCode:     11400
Country:        UY
RegDate:        2002-07-27
Updated:        2018-03-15
Ref:            https://rdap.arin.net/registry/entity/LACNIC

ReferralServer:  whois://whois.lacnic.net
ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois

OrgAbuseHandle: LWI100-ARIN
OrgAbuseName:   LACNIC Whois Info
OrgAbusePhone:  +598-2604-2222 
OrgAbuseEmail:  abuse@lacnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/LWI100-ARIN

OrgTechHandle: LACNIC-ARIN
OrgTechName:   LACNIC Whois Info
OrgTechPhone:  +598-2604-2222 
OrgTechEmail:  whois-contact@lacnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/LACNIC-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.lacnic.net.

% IP Client: 124.223.158.242
 % Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-08-29T01:56:52-03:00 - 124.223.158.242

inetnum:     170.254.224.0/22
aut-num:     AS265382
abuse-c:     YOSLT2
owner:       CIOTEC TELECOM LTDA ME
ownerid:     10.703.557/0001-42
responsible: Cirilo Daniel de Souza
owner-c:     CIDAN17
tech-c:      BRL185
inetrev:     170.254.225.0/24
nserver:     a.dns.youisp.com.br
nsstat:      20260828 AA
nslastaa:    20260828
nserver:     b.dns.youisp.com.br
nsstat:      20260828 AA
nslastaa:    20260828
created:     20160801
changed:     20240516

nic-hdl-br:  CIDAN17
person:      cirilo daniel
created:     20150223
changed:     20240527

nic-hdl-br:  BRL185
person:      Brasil Radiowave LTDA
created:     20040506
changed:     20220706

nic-hdl-br:  YOSLT2
person:      YOU SOLU��ES LTDA
created:     20210727
changed:     20220922

% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.254.225.247
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31205
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;170.254.225.247.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026082801 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 29 12:49:32 CST 2026
;; MSG SIZE  rcvd: 108
Host info
247.225.254.170.in-addr.arpa domain name pointer 170.254.225-247.ciotec.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
247.225.254.170.in-addr.arpa	name = 170.254.225-247.ciotec.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
185.176.27.30 attackbotsspam
12/21/2019-12:22:36.752867 185.176.27.30 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-12-21 19:46:57
49.88.112.59 attack
Dec 21 15:15:50 server sshd\[24459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.59  user=root
Dec 21 15:15:52 server sshd\[24459\]: Failed password for root from 49.88.112.59 port 23299 ssh2
Dec 21 15:15:55 server sshd\[24459\]: Failed password for root from 49.88.112.59 port 23299 ssh2
Dec 21 15:15:59 server sshd\[24459\]: Failed password for root from 49.88.112.59 port 23299 ssh2
Dec 21 15:16:02 server sshd\[24459\]: Failed password for root from 49.88.112.59 port 23299 ssh2
...
2019-12-21 20:19:20
178.128.216.127 attackspam
Dec 21 09:48:37 vps647732 sshd[18309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.216.127
Dec 21 09:48:40 vps647732 sshd[18309]: Failed password for invalid user sturle from 178.128.216.127 port 48736 ssh2
...
2019-12-21 20:09:29
101.99.33.145 attack
1576909468 - 12/21/2019 07:24:28 Host: 101.99.33.145/101.99.33.145 Port: 445 TCP Blocked
2019-12-21 20:12:02
114.45.84.112 attackspambots
Unauthorized connection attempt from IP address 114.45.84.112 on Port 445(SMB)
2019-12-21 20:26:13
222.186.180.9 attackbotsspam
Dec 21 16:50:07 gw1 sshd[27731]: Failed password for root from 222.186.180.9 port 16148 ssh2
Dec 21 16:50:10 gw1 sshd[27731]: Failed password for root from 222.186.180.9 port 16148 ssh2
...
2019-12-21 19:52:05
185.153.198.211 attackbots
Dec 21 10:15:51 mc1 kernel: \[1078562.399713\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.153.198.211 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=14976 PROTO=TCP SPT=45423 DPT=33389 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 21 10:16:19 mc1 kernel: \[1078590.485714\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.153.198.211 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57890 PROTO=TCP SPT=45423 DPT=33399 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 21 10:18:39 mc1 kernel: \[1078730.690662\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.153.198.211 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=19805 PROTO=TCP SPT=45423 DPT=33893 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-12-21 20:06:28
87.106.193.162 attack
$f2bV_matches
2019-12-21 20:18:06
174.138.56.93 attack
Invalid user admin from 174.138.56.93 port 57794
2019-12-21 20:01:44
34.67.184.22 attack
Automatically reported by fail2ban report script (mx1)
2019-12-21 19:50:55
211.25.234.14 attackspam
Dec 21 07:24:14 icecube postfix/smtpd[93095]: NOQUEUE: reject: RCPT from unknown[211.25.234.14]: 554 5.7.1 Service unavailable; Client host [211.25.234.14] blocked using all.spamrats.com; SPAMRATS IP Addresses See: http://www.spamrats.com/bl?211.25.234.14; from= to= proto=ESMTP helo=
2019-12-21 20:21:59
222.186.173.180 attackbots
2019-12-21T12:57:30.691299vps751288.ovh.net sshd\[19840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180  user=root
2019-12-21T12:57:32.650011vps751288.ovh.net sshd\[19840\]: Failed password for root from 222.186.173.180 port 56030 ssh2
2019-12-21T12:57:36.569957vps751288.ovh.net sshd\[19840\]: Failed password for root from 222.186.173.180 port 56030 ssh2
2019-12-21T12:57:39.727049vps751288.ovh.net sshd\[19840\]: Failed password for root from 222.186.173.180 port 56030 ssh2
2019-12-21T12:57:43.296087vps751288.ovh.net sshd\[19840\]: Failed password for root from 222.186.173.180 port 56030 ssh2
2019-12-21 20:00:07
181.48.134.65 attack
Dec 21 11:21:13 * sshd[30533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.134.65
Dec 21 11:21:15 * sshd[30533]: Failed password for invalid user steve from 181.48.134.65 port 47650 ssh2
2019-12-21 20:29:46
177.128.104.207 attack
$f2bV_matches
2019-12-21 19:49:04
51.38.32.230 attackspambots
Invalid user chojen from 51.38.32.230 port 60236
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.32.230
Failed password for invalid user chojen from 51.38.32.230 port 60236 ssh2
Invalid user chojen from 51.38.32.230 port 34988
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.32.230
2019-12-21 20:15:44

Recently Reported IPs

188.166.22.8 188.166.21.110 23.225.204.130 172.171.246.129
23.13.167.21 42.201.192.44 103.113.192.195 151.236.162.71
42.201.192.52 186.10.139.127 34.156.141.174 183.87.99.117
37.238.100.65 82.215.82.0 42.201.192.65 112.86.225.161
43.250.81.134 183.87.97.73 9.234.18.210 185.134.231.98