City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: CSL Limited
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '103.203.48.0 - 103.203.48.255'
% Abuse contact for '103.203.48.0 - 103.203.48.255' is 'support@cyberwill.com.hk'
inetnum: 103.203.48.0 - 103.203.48.255
netname: Netsec
descr: Netsec
country: HK
admin-c: NN541-AP
tech-c: NN541-AP
abuse-c: NN541-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-CYBERWILLLIMITED-HK
mnt-irt: IRT-CYBERWILLLIMITED-HK
last-modified: 2025-05-17T09:43:07Z
source: APNIC
irt: IRT-CYBERWILLLIMITED-HK
address: Flat 2016, 20/F, New Tech Plaza,, 34 Tai Yau Street,, San Po Kong, Kowloon,, Hong Kong., Hong Kong K
e-mail: support@cyberwill.com.hk
abuse-mailbox: support@cyberwill.com.hk
admin-c: CWLA1-AP
tech-c: CWLA1-AP
auth: # Filtered
remarks: support@cyberwill.com.hk was validated on 2025-09-17
mnt-by: MAINT-CYBERWILLLIMITED-HK
last-modified: 2025-11-18T00:30:28Z
source: APNIC
role: NETSEC NOC
address: Suite 1007, 10/F, The Bay Hub, 17 Kai Cheung Rd, Kowloon Bay
country: HK
phone: +85227511100
e-mail: noc@netsec.com
admin-c: NN541-AP
tech-c: NN541-AP
nic-hdl: NN541-AP
mnt-by: MAINT-NETSEC-HK
last-modified: 2025-03-14T05:55:40Z
source: APNIC
% Information related to '103.203.48.0/24AS45753'
route: 103.203.48.0/24
origin: AS45753
descr: Cyber Will Limited
Unit2607, Billion Plaza,
8 Cheung Yue Street,
Cheung Sha Wan, Kowloon,, Hong Kong.
mnt-by: MAINT-CYBERWILLLIMITED-HK
last-modified: 2021-10-19T09:47:26Z
source: APNIC
% Information related to '103.203.48.0/24AS963'
route: 103.203.48.0/24
origin: AS963
descr: Cyber Will Limited
Unit2607, Billion Plaza,
8 Cheung Yue Street,
Cheung Sha Wan, Kowloon,, Hong Kong.
mnt-by: MAINT-CYBERWILLLIMITED-HK
last-modified: 2025-03-13T06:46:04Z
source: APNIC
% Information related to '103.203.48.0/24AS9744'
route: 103.203.48.0/24
origin: AS9744
descr: Cyber Will Limited
Unit2607, Billion Plaza,
8 Cheung Yue Street,
Cheung Sha Wan, Kowloon,, Hong Kong.
mnt-by: MAINT-CYBERWILLLIMITED-HK
last-modified: 2021-11-16T08:43:52Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.203.48.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26711
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.203.48.102. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026030400 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 04 21:30:43 CST 2026
;; MSG SIZE rcvd: 107
102.48.203.103.in-addr.arpa domain name pointer donela.matrimenu.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
102.48.203.103.in-addr.arpa name = donela.matrimenu.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.232.35.211 | attackspambots | Oct 13 23:32:07 vps691689 sshd[8732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.35.211 Oct 13 23:32:09 vps691689 sshd[8732]: Failed password for invalid user contrasena3@1 from 49.232.35.211 port 39882 ssh2 ... |
2019-10-14 05:40:37 |
| 69.167.148.63 | attack | schuetzenmusikanten.de 69.167.148.63 \[13/Oct/2019:22:15:33 +0200\] "POST /wp-login.php HTTP/1.1" 200 5681 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" schuetzenmusikanten.de 69.167.148.63 \[13/Oct/2019:22:15:35 +0200\] "POST /wp-login.php HTTP/1.1" 200 5647 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-14 05:21:20 |
| 121.35.96.224 | attack | Telnetd brute force attack detected by fail2ban |
2019-10-14 05:14:24 |
| 92.119.160.143 | attackbotsspam | 10/13/2019-17:12:37.865119 92.119.160.143 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-14 05:30:45 |
| 46.38.144.32 | attackspambots | Oct 13 23:22:31 relay postfix/smtpd\[25578\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 13 23:23:11 relay postfix/smtpd\[24455\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 13 23:26:09 relay postfix/smtpd\[9958\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 13 23:26:51 relay postfix/smtpd\[24951\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 13 23:29:53 relay postfix/smtpd\[9958\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-14 05:31:13 |
| 203.142.211.81 | attack | Automatic report - XMLRPC Attack |
2019-10-14 05:38:19 |
| 58.1.134.41 | attack | Oct 13 22:42:13 dev0-dcde-rnet sshd[515]: Failed password for root from 58.1.134.41 port 52183 ssh2 Oct 13 22:46:38 dev0-dcde-rnet sshd[527]: Failed password for root from 58.1.134.41 port 44476 ssh2 |
2019-10-14 05:24:50 |
| 168.167.85.255 | attack | May 14 20:26:58 yesfletchmain sshd\[12627\]: Invalid user dh from 168.167.85.255 port 33992 May 14 20:26:58 yesfletchmain sshd\[12627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.167.85.255 May 14 20:27:00 yesfletchmain sshd\[12627\]: Failed password for invalid user dh from 168.167.85.255 port 33992 ssh2 May 14 20:36:12 yesfletchmain sshd\[12809\]: Invalid user deploy from 168.167.85.255 port 32995 May 14 20:36:12 yesfletchmain sshd\[12809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.167.85.255 ... |
2019-10-14 05:02:51 |
| 211.181.237.52 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 13-10-2019 21:15:21. |
2019-10-14 05:33:01 |
| 37.153.95.197 | attackspambots | Automatic report - XMLRPC Attack |
2019-10-14 05:10:32 |
| 111.231.64.198 | attackspambots | Oct 13 22:46:08 ns381471 sshd[26330]: Failed password for root from 111.231.64.198 port 43676 ssh2 Oct 13 22:49:54 ns381471 sshd[26443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.64.198 Oct 13 22:49:56 ns381471 sshd[26443]: Failed password for invalid user 123 from 111.231.64.198 port 51170 ssh2 |
2019-10-14 05:02:22 |
| 106.12.28.36 | attackspam | Oct 13 22:11:06 MK-Soft-VM3 sshd[23699]: Failed password for root from 106.12.28.36 port 46510 ssh2 ... |
2019-10-14 05:17:29 |
| 190.199.125.245 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 13-10-2019 21:15:20. |
2019-10-14 05:34:14 |
| 58.162.140.172 | attack | Oct 14 00:00:28 sauna sshd[170248]: Failed password for root from 58.162.140.172 port 48394 ssh2 ... |
2019-10-14 05:13:59 |
| 49.51.46.69 | attackbots | 2019-10-13T21:16:12.954438shield sshd\[12619\]: Invalid user 3EDC4RFV from 49.51.46.69 port 33428 2019-10-13T21:16:12.958700shield sshd\[12619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.46.69 2019-10-13T21:16:15.387986shield sshd\[12619\]: Failed password for invalid user 3EDC4RFV from 49.51.46.69 port 33428 ssh2 2019-10-13T21:20:17.686163shield sshd\[14093\]: Invalid user Cowboy@123 from 49.51.46.69 port 45862 2019-10-13T21:20:17.690399shield sshd\[14093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.46.69 |
2019-10-14 05:20:29 |