City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 156.245.0.0 - 156.245.255.255
CIDR: 156.245.0.0/16
NetName: AFRINIC-ERX-156-245-0-0
NetHandle: NET-156-245-0-0-1
Parent: NET156 (NET-156-0-0-0-0)
NetType: Transferred to AfriNIC
OriginAS:
Organization: African Network Information Center (AFRINIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under AFRINIC responsibility.
Comment: Please see http://www.afrinic.net/ for further details,
Comment: or check the WHOIS server located at whois.afrinic.net.
Ref: https://rdap.arin.net/registry/ip/156.245.0.0
ResourceLink: http://afrinic.net/en/services/whois-query
ResourceLink: whois.afrinic.net
OrgName: African Network Information Center
OrgId: AFRINIC
Address: Level 11ABC
Address: Raffles Tower
Address: Lot 19, Cybercity
City: Ebene
StateProv:
PostalCode:
Country: MU
RegDate: 2004-05-17
Updated: 2015-05-04
Comment: AfriNIC - http://www.afrinic.net
Comment: The African & Indian Ocean Internet Registry
Ref: https://rdap.arin.net/registry/entity/AFRINIC
ReferralServer: whois://whois.afrinic.net
ResourceLink: http://afrinic.net/en/services/whois-query
OrgTechHandle: GENER11-ARIN
OrgTechName: Generic POC
OrgTechPhone: +230 4666616
OrgTechEmail: abusepoc@afrinic.net
OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
OrgAbuseHandle: GENER11-ARIN
OrgAbuseName: Generic POC
OrgAbusePhone: +230 4666616
OrgAbuseEmail: abusepoc@afrinic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.afrinic.net.
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '156.245.205.0 - 156.245.205.255'
% No abuse contact registered for 156.245.205.0 - 156.245.205.255
inetnum: 156.245.205.0 - 156.245.205.255
netname: Zillion_Network_Inc
descr: Zillion Network Inc.
country: HK
admin-c: CIS1-AFRINIC
tech-c: CIS1-AFRINIC
status: ASSIGNED PA
mnt-by: CIL1-MNT
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered
parent: 156.224.0.0 - 156.255.255.255
person: Cloud Innovation Support
address: Ebene
address: MU
address: Mahe
address: Seychelles
phone: tel:+248-4-610-795
nic-hdl: CIS1-AFRINIC
mnt-by: CIL1-MNT
source: AFRINIC # Filtered
% Information related to '156.245.204.0/22AS54801'
route: 156.245.204.0/22
origin: AS54801
descr: Hong Kong megalayer
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 156.245.205.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55633
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;156.245.205.34. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026072600 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 26 23:00:41 CST 2026
;; MSG SIZE rcvd: 107Host 34.205.245.156.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 34.205.245.156.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.98.148 | attackspam | SSH invalid-user multiple login try |
2019-12-03 23:39:45 |
| 170.0.171.174 | attackspam | " " |
2019-12-04 00:08:55 |
| 113.128.9.13 | attackspam | A spam blank email was sent from this SMTP server. This spam email attempted to camouflage the SMTP server with a KDDI's legitimate server. All To headers of this kind of spam emails were "To: undisclosed-recipients:;". |
2019-12-03 23:44:14 |
| 52.155.217.246 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2019-12-03 23:51:36 |
| 58.1.134.41 | attackspambots | Dec 3 20:13:08 vibhu-HP-Z238-Microtower-Workstation sshd\[26938\]: Invalid user hellesylt from 58.1.134.41 Dec 3 20:13:08 vibhu-HP-Z238-Microtower-Workstation sshd\[26938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.1.134.41 Dec 3 20:13:10 vibhu-HP-Z238-Microtower-Workstation sshd\[26938\]: Failed password for invalid user hellesylt from 58.1.134.41 port 51535 ssh2 Dec 3 20:19:56 vibhu-HP-Z238-Microtower-Workstation sshd\[27474\]: Invalid user vcsa from 58.1.134.41 Dec 3 20:19:56 vibhu-HP-Z238-Microtower-Workstation sshd\[27474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.1.134.41 ... |
2019-12-03 23:48:18 |
| 159.65.146.141 | attack | 2019-12-03T15:34:26.216888abusebot-4.cloudsearch.cf sshd\[25505\]: Invalid user Eetu from 159.65.146.141 port 34916 |
2019-12-03 23:47:31 |
| 118.89.191.145 | attack | Dec 3 17:45:32 server sshd\[28579\]: Invalid user fax from 118.89.191.145 Dec 3 17:45:32 server sshd\[28579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.191.145 Dec 3 17:45:34 server sshd\[28579\]: Failed password for invalid user fax from 118.89.191.145 port 60708 ssh2 Dec 3 18:04:35 server sshd\[1018\]: Invalid user server from 118.89.191.145 Dec 3 18:04:35 server sshd\[1018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.191.145 ... |
2019-12-04 00:12:52 |
| 172.81.243.232 | attackbotsspam | Dec 3 16:26:51 MK-Soft-VM6 sshd[17559]: Failed password for root from 172.81.243.232 port 47974 ssh2 Dec 3 16:34:21 MK-Soft-VM6 sshd[17677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.243.232 ... |
2019-12-04 00:04:11 |
| 218.92.0.135 | attackspam | Dec 3 13:01:41 firewall sshd[23394]: Failed password for root from 218.92.0.135 port 36938 ssh2 Dec 3 13:01:41 firewall sshd[23394]: error: maximum authentication attempts exceeded for root from 218.92.0.135 port 36938 ssh2 [preauth] Dec 3 13:01:41 firewall sshd[23394]: Disconnecting: Too many authentication failures [preauth] ... |
2019-12-04 00:03:27 |
| 103.1.153.103 | attackbotsspam | Dec 3 16:27:22 OPSO sshd\[28401\]: Invalid user luva from 103.1.153.103 port 42472 Dec 3 16:27:22 OPSO sshd\[28401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.153.103 Dec 3 16:27:24 OPSO sshd\[28401\]: Failed password for invalid user luva from 103.1.153.103 port 42472 ssh2 Dec 3 16:34:11 OPSO sshd\[30064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.153.103 user=root Dec 3 16:34:13 OPSO sshd\[30064\]: Failed password for root from 103.1.153.103 port 49720 ssh2 |
2019-12-04 00:17:22 |
| 71.19.252.157 | attack | Comment spam. SPAM URL: hairstylesvip.com |
2019-12-03 23:44:57 |
| 46.101.135.104 | attackbots | 2019-12-03T15:31:38.706194abusebot-5.cloudsearch.cf sshd\[13697\]: Invalid user shou from 46.101.135.104 port 37108 |
2019-12-03 23:44:40 |
| 51.38.189.150 | attackbots | Dec 3 06:01:45 web1 sshd\[2045\]: Invalid user delhi7 from 51.38.189.150 Dec 3 06:01:45 web1 sshd\[2045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.189.150 Dec 3 06:01:48 web1 sshd\[2045\]: Failed password for invalid user delhi7 from 51.38.189.150 port 43342 ssh2 Dec 3 06:07:11 web1 sshd\[2651\]: Invalid user dovecot from 51.38.189.150 Dec 3 06:07:11 web1 sshd\[2651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.189.150 |
2019-12-04 00:13:09 |
| 175.172.6.4 | attackspam | Port scan on 3 port(s): 2375 2376 4243 |
2019-12-03 23:53:03 |
| 180.124.236.130 | attackbots | SpamReport |
2019-12-03 23:37:20 |