City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 156.245.0.0 - 156.245.255.255
CIDR: 156.245.0.0/16
NetName: AFRINIC-ERX-156-245-0-0
NetHandle: NET-156-245-0-0-1
Parent: NET156 (NET-156-0-0-0-0)
NetType: Transferred to AfriNIC
OriginAS:
Organization: African Network Information Center (AFRINIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under AFRINIC responsibility.
Comment: Please see http://www.afrinic.net/ for further details,
Comment: or check the WHOIS server located at whois.afrinic.net.
Ref: https://rdap.arin.net/registry/ip/156.245.0.0
ResourceLink: http://afrinic.net/en/services/whois-query
ResourceLink: whois.afrinic.net
OrgName: African Network Information Center
OrgId: AFRINIC
Address: Level 11ABC
Address: Raffles Tower
Address: Lot 19, Cybercity
City: Ebene
StateProv:
PostalCode:
Country: MU
RegDate: 2004-05-17
Updated: 2015-05-04
Comment: AfriNIC - http://www.afrinic.net
Comment: The African & Indian Ocean Internet Registry
Ref: https://rdap.arin.net/registry/entity/AFRINIC
ReferralServer: whois://whois.afrinic.net
ResourceLink: http://afrinic.net/en/services/whois-query
OrgAbuseHandle: GENER11-ARIN
OrgAbuseName: Generic POC
OrgAbusePhone: +230 4666616
OrgAbuseEmail: abusepoc@afrinic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
OrgTechHandle: GENER11-ARIN
OrgTechName: Generic POC
OrgTechPhone: +230 4666616
OrgTechEmail: abusepoc@afrinic.net
OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.afrinic.net.
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '156.245.207.0 - 156.245.207.255'
% No abuse contact registered for 156.245.207.0 - 156.245.207.255
inetnum: 156.245.207.0 - 156.245.207.255
netname: Zillion_Network_Inc
descr: Zillion Network Inc.
country: HK
admin-c: CIS1-AFRINIC
tech-c: CIS1-AFRINIC
status: ASSIGNED PA
mnt-by: CIL1-MNT
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered
parent: 156.224.0.0 - 156.255.255.255
person: Cloud Innovation Support
address: Ebene
address: MU
address: Mahe
address: Seychelles
phone: tel:+248-4-610-795
nic-hdl: CIS1-AFRINIC
abuse-mailbox: abuse@cloudinnovation.org
mnt-by: CIL1-MNT
source: AFRINIC # Filtered
% Information related to '156.245.204.0/22AS54801'
route: 156.245.204.0/22
origin: AS54801
descr: Hong Kong megalayer
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 156.245.207.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25838
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;156.245.207.207. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026040401 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 05 05:00:07 CST 2026
;; MSG SIZE rcvd: 108Host 207.207.245.156.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 207.207.245.156.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 149.202.61.217 | attackbots | Jan 19 15:56:31 jane sshd[24549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.61.217 Jan 19 15:56:33 jane sshd[24549]: Failed password for invalid user bb from 149.202.61.217 port 34842 ssh2 ... |
2020-01-20 00:37:01 |
| 195.246.45.130 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-01-20 00:29:39 |
| 49.146.44.251 | attackspam | 1579438541 - 01/19/2020 13:55:41 Host: 49.146.44.251/49.146.44.251 Port: 445 TCP Blocked |
2020-01-20 01:01:13 |
| 105.224.105.208 | attackspam | Jan 15 15:36:05 server010 sshd[12464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.224.105.208 user=r.r Jan 15 15:36:07 server010 sshd[12464]: Failed password for r.r from 105.224.105.208 port 60260 ssh2 Jan 15 15:42:10 server010 sshd[12798]: Invalid user fan from 105.224.105.208 Jan 15 15:42:10 server010 sshd[12798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.224.105.208 Jan 15 15:42:12 server010 sshd[12798]: Failed password for invalid user fan from 105.224.105.208 port 35636 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=105.224.105.208 |
2020-01-20 01:09:31 |
| 79.110.249.135 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-20 00:31:33 |
| 58.249.123.38 | attack | Unauthorized connection attempt detected from IP address 58.249.123.38 to port 2220 [J] |
2020-01-20 00:42:42 |
| 119.236.46.70 | attackbotsspam | Unauthorized connection attempt detected from IP address 119.236.46.70 to port 5555 [J] |
2020-01-20 01:07:39 |
| 179.108.17.239 | attack | Honeypot attack, port: 81, PTR: PTR record not found |
2020-01-20 00:52:46 |
| 80.82.77.245 | attack | 80.82.77.245 was recorded 11 times by 6 hosts attempting to connect to the following ports: 1041,1032,1042. Incident counter (4h, 24h, all-time): 11, 81, 18229 |
2020-01-20 01:00:49 |
| 112.162.191.160 | attack | Unauthorized connection attempt detected from IP address 112.162.191.160 to port 2220 [J] |
2020-01-20 00:32:16 |
| 91.134.114.213 | attack | 91.134.114.213 is triying to hack sip phones to make fraud sip calls |
2020-01-20 00:56:42 |
| 218.92.0.184 | attack | Jan 19 17:45:10 srv01 sshd[13633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.184 user=root Jan 19 17:45:13 srv01 sshd[13633]: Failed password for root from 218.92.0.184 port 19676 ssh2 Jan 19 17:45:16 srv01 sshd[13633]: Failed password for root from 218.92.0.184 port 19676 ssh2 Jan 19 17:45:10 srv01 sshd[13633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.184 user=root Jan 19 17:45:13 srv01 sshd[13633]: Failed password for root from 218.92.0.184 port 19676 ssh2 Jan 19 17:45:16 srv01 sshd[13633]: Failed password for root from 218.92.0.184 port 19676 ssh2 Jan 19 17:45:10 srv01 sshd[13633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.184 user=root Jan 19 17:45:13 srv01 sshd[13633]: Failed password for root from 218.92.0.184 port 19676 ssh2 Jan 19 17:45:16 srv01 sshd[13633]: Failed password for root from 218.92.0.184 port 19676 ... |
2020-01-20 01:01:41 |
| 190.22.247.96 | attackbots | Lines containing failures of 190.22.247.96 Jan 19 14:17:38 kmh-vmh-001-fsn07 sshd[5830]: Did not receive identification string from 190.22.247.96 port 44026 Jan 19 14:22:30 kmh-vmh-001-fsn07 sshd[14934]: Received disconnect from 190.22.247.96 port 45580:11: Bye Bye [preauth] Jan 19 14:22:30 kmh-vmh-001-fsn07 sshd[14934]: Disconnected from 190.22.247.96 port 45580 [preauth] Jan 19 14:39:04 kmh-vmh-001-fsn07 sshd[11284]: Invalid user admin from 190.22.247.96 port 48170 Jan 19 14:39:04 kmh-vmh-001-fsn07 sshd[11284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.22.247.96 Jan 19 14:39:06 kmh-vmh-001-fsn07 sshd[11284]: Failed password for invalid user admin from 190.22.247.96 port 48170 ssh2 Jan 19 14:39:07 kmh-vmh-001-fsn07 sshd[11284]: Received disconnect from 190.22.247.96 port 48170:11: Bye Bye [preauth] Jan 19 14:39:07 kmh-vmh-001-fsn07 sshd[11284]: Disconnected from invalid user admin 190.22.247.96 port 48170 [preauth] Jan ........ ------------------------------ |
2020-01-20 01:00:24 |
| 178.211.96.40 | attack | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-01-20 00:34:07 |
| 152.136.100.66 | attackspam | 2020-01-19T14:29:37.787716shield sshd\[25234\]: Invalid user vnc from 152.136.100.66 port 48742 2020-01-19T14:29:37.795187shield sshd\[25234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.100.66 2020-01-19T14:29:39.636596shield sshd\[25234\]: Failed password for invalid user vnc from 152.136.100.66 port 48742 ssh2 2020-01-19T14:34:18.256562shield sshd\[26691\]: Invalid user test1 from 152.136.100.66 port 47990 2020-01-19T14:34:18.259598shield sshd\[26691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.100.66 |
2020-01-20 01:07:08 |