City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 156.245.0.0 - 156.245.255.255
CIDR: 156.245.0.0/16
NetName: AFRINIC-ERX-156-245-0-0
NetHandle: NET-156-245-0-0-1
Parent: NET156 (NET-156-0-0-0-0)
NetType: Transferred to AfriNIC
OriginAS:
Organization: African Network Information Center (AFRINIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under AFRINIC responsibility.
Comment: Please see http://www.afrinic.net/ for further details,
Comment: or check the WHOIS server located at whois.afrinic.net.
Ref: https://rdap.arin.net/registry/ip/156.245.0.0
ResourceLink: http://afrinic.net/en/services/whois-query
ResourceLink: whois.afrinic.net
OrgName: African Network Information Center
OrgId: AFRINIC
Address: Level 11ABC
Address: Raffles Tower
Address: Lot 19, Cybercity
City: Ebene
StateProv:
PostalCode:
Country: MU
RegDate: 2004-05-17
Updated: 2015-05-04
Comment: AfriNIC - http://www.afrinic.net
Comment: The African & Indian Ocean Internet Registry
Ref: https://rdap.arin.net/registry/entity/AFRINIC
ReferralServer: whois://whois.afrinic.net
ResourceLink: http://afrinic.net/en/services/whois-query
OrgAbuseHandle: GENER11-ARIN
OrgAbuseName: Generic POC
OrgAbusePhone: +230 4666616
OrgAbuseEmail: abusepoc@afrinic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
OrgTechHandle: GENER11-ARIN
OrgTechName: Generic POC
OrgTechPhone: +230 4666616
OrgTechEmail: abusepoc@afrinic.net
OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.afrinic.net.
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '156.245.205.0 - 156.245.205.255'
% No abuse contact registered for 156.245.205.0 - 156.245.205.255
inetnum: 156.245.205.0 - 156.245.205.255
netname: HONG_KONG_LIGHTLAYER_TECHNOLOGY_CO_LIMITED
descr: HONG KONG LIGHTLAYER TECHNOLOGY CO., LIMITED
country: HK
admin-c: CIS1-AFRINIC
tech-c: CIS1-AFRINIC
status: ASSIGNED PA
mnt-by: CIL1-MNT
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered
parent: 156.224.0.0 - 156.255.255.255
person: Cloud Innovation Support
address: Gauteng
address: ZA
address: Gauteng
address: South Africa
phone: tel:+248-4-610-795
nic-hdl: CIS1-AFRINIC
mnt-by: CIL1-MNT
source: AFRINIC # Filtered
% Information related to '156.245.204.0/22AS139613'
route: 156.245.204.0/22
descr: HONG KONG LIGHTLAYER TECHNOLOGY CO., LIMITED
origin: AS139613
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered
% Information related to '156.245.204.0/22AS139646'
route: 156.245.204.0/22
descr: HONG KONG LIGHTLAYER TECHNOLOGY CO., LIMITED
origin: AS139646
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered
% Information related to '156.245.204.0/22AS54801'
route: 156.245.204.0/22
origin: AS54801
descr: Hong Kong megalayer
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 156.245.205.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32848
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;156.245.205.12. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102200 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 22 19:00:35 CST 2026
;; MSG SIZE rcvd: 107
Host 12.205.245.156.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 12.205.245.156.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 1.173.223.223 | attackspam | firewall-block, port(s): 23/tcp |
2019-09-06 19:30:35 |
| 1.179.182.82 | attack | Sep 6 10:52:29 [munged] sshd[24270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.179.182.82 |
2019-09-06 19:06:41 |
| 203.195.150.245 | attackbotsspam | Sep 6 04:44:09 hb sshd\[5405\]: Invalid user support from 203.195.150.245 Sep 6 04:44:09 hb sshd\[5405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.150.245 Sep 6 04:44:11 hb sshd\[5405\]: Failed password for invalid user support from 203.195.150.245 port 35796 ssh2 Sep 6 04:46:55 hb sshd\[5693\]: Invalid user vbox from 203.195.150.245 Sep 6 04:46:55 hb sshd\[5693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.150.245 |
2019-09-06 19:37:10 |
| 103.120.227.49 | attackbots | Sep 6 06:06:12 aat-srv002 sshd[11111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.120.227.49 Sep 6 06:06:15 aat-srv002 sshd[11111]: Failed password for invalid user user1 from 103.120.227.49 port 47164 ssh2 Sep 6 06:11:21 aat-srv002 sshd[11252]: Failed password for root from 103.120.227.49 port 41584 ssh2 Sep 6 06:16:25 aat-srv002 sshd[11431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.120.227.49 ... |
2019-09-06 19:38:57 |
| 123.178.229.147 | attackbotsspam | Port scan attempt detected by AWS-CCS, CTS, India |
2019-09-06 19:03:09 |
| 104.246.113.80 | attack | Sep 6 01:07:09 friendsofhawaii sshd\[29164\]: Invalid user jenkins from 104.246.113.80 Sep 6 01:07:09 friendsofhawaii sshd\[29164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ool-68f67150.dyn.optonline.net Sep 6 01:07:11 friendsofhawaii sshd\[29164\]: Failed password for invalid user jenkins from 104.246.113.80 port 32900 ssh2 Sep 6 01:11:37 friendsofhawaii sshd\[29681\]: Invalid user dev from 104.246.113.80 Sep 6 01:11:37 friendsofhawaii sshd\[29681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ool-68f67150.dyn.optonline.net |
2019-09-06 19:22:17 |
| 144.202.53.37 | attackspambots | 2019-09-06T03:50:17Z - RDP login failed multiple times. (144.202.53.37) |
2019-09-06 19:15:15 |
| 172.105.5.166 | attack | firewall-block, port(s): 1900/udp |
2019-09-06 19:17:31 |
| 67.205.166.29 | attack | SSH login attempt |
2019-09-06 19:05:00 |
| 159.89.53.174 | attackbots | WP_xmlrpc_attack |
2019-09-06 19:45:59 |
| 92.241.97.38 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-06 02:16:59,429 INFO [amun_request_handler] PortScan Detected on Port: 445 (92.241.97.38) |
2019-09-06 19:21:59 |
| 207.178.209.201 | attackspam | firewall-block, port(s): 445/tcp |
2019-09-06 19:07:29 |
| 51.91.193.116 | attackspam | Sep 6 00:47:50 hanapaa sshd\[18772\]: Invalid user a from 51.91.193.116 Sep 6 00:47:50 hanapaa sshd\[18772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip116.ip-51-91-193.eu Sep 6 00:47:52 hanapaa sshd\[18772\]: Failed password for invalid user a from 51.91.193.116 port 42718 ssh2 Sep 6 00:52:26 hanapaa sshd\[19125\]: Invalid user ts3server1 from 51.91.193.116 Sep 6 00:52:26 hanapaa sshd\[19125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip116.ip-51-91-193.eu |
2019-09-06 19:01:03 |
| 159.89.170.154 | attackspam | Sep 6 10:17:30 eventyay sshd[450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.170.154 Sep 6 10:17:32 eventyay sshd[450]: Failed password for invalid user deploy321 from 159.89.170.154 port 51596 ssh2 Sep 6 10:22:27 eventyay sshd[577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.170.154 ... |
2019-09-06 19:44:17 |
| 179.108.106.9 | attackbots | 2019-09-06T11:38:51.865730abusebot-5.cloudsearch.cf sshd\[8598\]: Invalid user 12345678 from 179.108.106.9 port 56384 |
2019-09-06 19:47:23 |