City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 156.245.0.0 - 156.245.255.255
CIDR: 156.245.0.0/16
NetName: AFRINIC-ERX-156-245-0-0
NetHandle: NET-156-245-0-0-1
Parent: NET156 (NET-156-0-0-0-0)
NetType: Transferred to AfriNIC
OriginAS:
Organization: African Network Information Center (AFRINIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under AFRINIC responsibility.
Comment: Please see http://www.afrinic.net/ for further details,
Comment: or check the WHOIS server located at whois.afrinic.net.
Ref: https://rdap.arin.net/registry/ip/156.245.0.0
ResourceLink: http://afrinic.net/en/services/whois-query
ResourceLink: whois.afrinic.net
OrgName: African Network Information Center
OrgId: AFRINIC
Address: Level 11ABC
Address: Raffles Tower
Address: Lot 19, Cybercity
City: Ebene
StateProv:
PostalCode:
Country: MU
RegDate: 2004-05-17
Updated: 2015-05-04
Comment: AfriNIC - http://www.afrinic.net
Comment: The African & Indian Ocean Internet Registry
Ref: https://rdap.arin.net/registry/entity/AFRINIC
ReferralServer: whois://whois.afrinic.net
ResourceLink: http://afrinic.net/en/services/whois-query
OrgAbuseHandle: GENER11-ARIN
OrgAbuseName: Generic POC
OrgAbusePhone: +230 4666616
OrgAbuseEmail: abusepoc@afrinic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
OrgTechHandle: GENER11-ARIN
OrgTechName: Generic POC
OrgTechPhone: +230 4666616
OrgTechEmail: abusepoc@afrinic.net
OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.afrinic.net.
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '156.245.207.0 - 156.245.207.255'
% No abuse contact registered for 156.245.207.0 - 156.245.207.255
inetnum: 156.245.207.0 - 156.245.207.255
netname: Zillion_Network_Inc
descr: Zillion Network Inc.
country: HK
admin-c: CIS1-AFRINIC
tech-c: CIS1-AFRINIC
status: ASSIGNED PA
mnt-by: CIL1-MNT
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered
parent: 156.224.0.0 - 156.255.255.255
person: Cloud Innovation Support
address: Ebene
address: MU
address: Mahe
address: Seychelles
phone: tel:+248-4-610-795
nic-hdl: CIS1-AFRINIC
abuse-mailbox: abuse@cloudinnovation.org
mnt-by: CIL1-MNT
source: AFRINIC # Filtered
% Information related to '156.245.204.0/22AS54801'
route: 156.245.204.0/22
origin: AS54801
descr: Hong Kong megalayer
mnt-by: LARUS-SERVICE-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 156.245.207.228
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12961
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;156.245.207.228. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042800 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 28 23:32:28 CST 2026
;; MSG SIZE rcvd: 108Host 228.207.245.156.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 228.207.245.156.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 183.83.166.213 | attack | Unauthorized connection attempt from IP address 183.83.166.213 on Port 445(SMB) |
2019-12-06 02:36:15 |
| 51.38.186.47 | attack | 2019-12-05T18:45:56.381284shield sshd\[11736\]: Invalid user lcimonet from 51.38.186.47 port 60142 2019-12-05T18:45:56.385995shield sshd\[11736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.ip-51-38-186.eu 2019-12-05T18:45:58.151127shield sshd\[11736\]: Failed password for invalid user lcimonet from 51.38.186.47 port 60142 ssh2 2019-12-05T18:51:16.072814shield sshd\[13176\]: Invalid user guest from 51.38.186.47 port 42638 2019-12-05T18:51:16.077905shield sshd\[13176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.ip-51-38-186.eu |
2019-12-06 02:56:12 |
| 217.115.183.228 | attackbotsspam | Dec 5 18:10:44 sso sshd[11071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.115.183.228 Dec 5 18:10:46 sso sshd[11071]: Failed password for invalid user user from 217.115.183.228 port 52950 ssh2 ... |
2019-12-06 02:10:48 |
| 51.38.238.87 | attackspam | Dec 5 13:37:53 ny01 sshd[28861]: Failed password for mail from 51.38.238.87 port 54124 ssh2 Dec 5 13:43:04 ny01 sshd[29364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.238.87 Dec 5 13:43:06 ny01 sshd[29364]: Failed password for invalid user admin from 51.38.238.87 port 35986 ssh2 |
2019-12-06 02:58:43 |
| 80.232.246.116 | attack | Dec 5 18:32:55 sbg01 sshd[16405]: Failed password for root from 80.232.246.116 port 47368 ssh2 Dec 5 18:42:06 sbg01 sshd[16467]: Failed password for root from 80.232.246.116 port 39558 ssh2 |
2019-12-06 02:49:18 |
| 142.93.101.148 | attackbots | Dec 5 08:29:48 php1 sshd\[23260\]: Invalid user duwayn from 142.93.101.148 Dec 5 08:29:48 php1 sshd\[23260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.148 Dec 5 08:29:50 php1 sshd\[23260\]: Failed password for invalid user duwayn from 142.93.101.148 port 47190 ssh2 Dec 5 08:35:15 php1 sshd\[23800\]: Invalid user nithya from 142.93.101.148 Dec 5 08:35:15 php1 sshd\[23800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.148 |
2019-12-06 02:38:14 |
| 132.232.7.197 | attackbots | $f2bV_matches_ltvn |
2019-12-06 02:13:16 |
| 162.243.158.198 | attackbotsspam | 2019-12-05T18:37:22.002366vps751288.ovh.net sshd\[11121\]: Invalid user nagios from 162.243.158.198 port 43310 2019-12-05T18:37:22.013602vps751288.ovh.net sshd\[11121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.158.198 2019-12-05T18:37:23.994022vps751288.ovh.net sshd\[11121\]: Failed password for invalid user nagios from 162.243.158.198 port 43310 ssh2 2019-12-05T18:43:01.990479vps751288.ovh.net sshd\[11183\]: Invalid user morteza from 162.243.158.198 port 52448 2019-12-05T18:43:01.998607vps751288.ovh.net sshd\[11183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.158.198 |
2019-12-06 02:28:23 |
| 177.101.255.26 | attack | Dec 5 13:25:46 plusreed sshd[23822]: Invalid user octave from 177.101.255.26 ... |
2019-12-06 02:48:03 |
| 216.211.99.23 | attack | 2019-12-05T17:11:29.931454abusebot-3.cloudsearch.cf sshd\[24824\]: Invalid user oeystein from 216.211.99.23 port 47707 2019-12-05T17:11:29.935771abusebot-3.cloudsearch.cf sshd\[24824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216-211-99-23.static.tbaytel.net |
2019-12-06 02:50:36 |
| 202.130.122.50 | attackspambots | Unauthorized connection attempt from IP address 202.130.122.50 on Port 445(SMB) |
2019-12-06 03:00:21 |
| 187.141.50.219 | attackbots | Dec 5 07:17:31 hpm sshd\[23266\]: Invalid user hoerhammer from 187.141.50.219 Dec 5 07:17:31 hpm sshd\[23266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.50.219 Dec 5 07:17:33 hpm sshd\[23266\]: Failed password for invalid user hoerhammer from 187.141.50.219 port 35794 ssh2 Dec 5 07:24:03 hpm sshd\[23874\]: Invalid user w3ftp from 187.141.50.219 Dec 5 07:24:03 hpm sshd\[23874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.50.219 |
2019-12-06 02:35:04 |
| 14.177.90.237 | attackspambots | Unauthorized connection attempt from IP address 14.177.90.237 on Port 445(SMB) |
2019-12-06 02:58:59 |
| 190.207.4.174 | attackbots | Unauthorized connection attempt from IP address 190.207.4.174 on Port 445(SMB) |
2019-12-06 02:29:26 |
| 14.142.181.179 | attackspam | Unauthorised access (Dec 5) SRC=14.142.181.179 LEN=52 TTL=113 ID=3883 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Dec 4) SRC=14.142.181.179 LEN=52 TTL=111 ID=5214 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-06 02:42:15 |