Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       156.245.0.0 - 156.245.255.255
CIDR:           156.245.0.0/16
NetName:        AFRINIC-ERX-156-245-0-0
NetHandle:      NET-156-245-0-0-1
Parent:         NET156 (NET-156-0-0-0-0)
NetType:        Transferred to AfriNIC
OriginAS:       
Organization:   African Network Information Center (AFRINIC)
RegDate:        2010-11-03
Updated:        2010-11-17
Comment:        This IP address range is under AFRINIC responsibility.
Comment:        Please see http://www.afrinic.net/ for further details,
Comment:        or check the WHOIS server located at whois.afrinic.net.
Ref:            https://rdap.arin.net/registry/ip/156.245.0.0

ResourceLink:  http://afrinic.net/en/services/whois-query
ResourceLink:  whois.afrinic.net


OrgName:        African Network Information Center
OrgId:          AFRINIC
Address:        Level 11ABC
Address:        Raffles Tower
Address:        Lot 19, Cybercity
City:           Ebene
StateProv:      
PostalCode:     
Country:        MU
RegDate:        2004-05-17
Updated:        2015-05-04
Comment:        AfriNIC - http://www.afrinic.net
Comment:        The African & Indian Ocean Internet Registry
Ref:            https://rdap.arin.net/registry/entity/AFRINIC

ReferralServer:  whois://whois.afrinic.net
ResourceLink:  http://afrinic.net/en/services/whois-query

OrgAbuseHandle: GENER11-ARIN
OrgAbuseName:   Generic POC
OrgAbusePhone:  +230 4666616 
OrgAbuseEmail:  abusepoc@afrinic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/GENER11-ARIN

OrgTechHandle: GENER11-ARIN
OrgTechName:   Generic POC
OrgTechPhone:  +230 4666616 
OrgTechEmail:  abusepoc@afrinic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/GENER11-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.afrinic.net.

% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to  the following terms of Use. See https://afrinic.net/whois/terms

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '156.245.207.0 - 156.245.207.255'

% No abuse contact registered for 156.245.207.0 - 156.245.207.255

inetnum:        156.245.207.0 - 156.245.207.255
netname:        Zillion_Network_Inc
descr:          Zillion Network Inc.
country:        HK
admin-c:        CIS1-AFRINIC
tech-c:         CIS1-AFRINIC
status:         ASSIGNED PA
mnt-by:         CIL1-MNT
mnt-by:         LARUS-SERVICE-MNT
source:         AFRINIC # Filtered
parent:         156.224.0.0 - 156.255.255.255

person:         Cloud Innovation Support
address:        Ebene
address:        MU
address:        Mahe
address:        Seychelles
phone:          tel:+248-4-610-795
nic-hdl:        CIS1-AFRINIC
abuse-mailbox:  abuse@cloudinnovation.org
mnt-by:         CIL1-MNT
source:         AFRINIC # Filtered

% Information related to '156.245.204.0/22AS54801'

route:          156.245.204.0/22
origin:         AS54801
descr:          Hong Kong megalayer
mnt-by:         LARUS-SERVICE-MNT
source:         AFRINIC # Filtered
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 156.245.207.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5599
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;156.245.207.80.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026052200 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 22 22:31:47 CST 2026
;; MSG SIZE  rcvd: 107
Host info
Host 80.207.245.156.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.207.245.156.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
112.94.32.49 attackbotsspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-08T06:44:42Z and 2020-09-08T06:52:43Z
2020-09-08 17:14:10
197.159.215.249 attackspambots
Lines containing failures of 197.159.215.249
Sep  7 17:30:12 shared02 sshd[4155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.159.215.249  user=r.r
Sep  7 17:30:14 shared02 sshd[4155]: Failed password for r.r from 197.159.215.249 port 56501 ssh2
Sep  7 17:30:15 shared02 sshd[4155]: Received disconnect from 197.159.215.249 port 56501:11: Bye Bye [preauth]
Sep  7 17:30:15 shared02 sshd[4155]: Disconnected from authenticating user r.r 197.159.215.249 port 56501 [preauth]
Sep  7 17:51:02 shared02 sshd[12864]: Connection closed by 197.159.215.249 port 51161 [preauth]
Sep  7 18:01:10 shared02 sshd[16264]: Invalid user sk from 197.159.215.249 port 39792
Sep  7 18:01:10 shared02 sshd[16264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.159.215.249
Sep  7 18:01:12 shared02 sshd[16264]: Failed password for invalid user sk from 197.159.215.249 port 39792 ssh2
Sep  7 18:01:13 shared02 sshd........
------------------------------
2020-09-08 17:13:26
41.188.47.82 attackbotsspam
Port Scan
...
2020-09-08 17:06:47
218.88.46.192 attackbotsspam
Icarus honeypot on github
2020-09-08 17:26:43
158.69.199.225 attackbotsspam
Sep  8 09:24:19 marvibiene sshd[14844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.199.225  user=root
Sep  8 09:24:21 marvibiene sshd[14844]: Failed password for root from 158.69.199.225 port 37822 ssh2
Sep  8 09:34:09 marvibiene sshd[14976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.199.225  user=root
Sep  8 09:34:11 marvibiene sshd[14976]: Failed password for root from 158.69.199.225 port 59149 ssh2
2020-09-08 17:36:49
45.125.65.44 attack
35 VoIP Fraud Attacks in last 24 hours
2020-09-08 17:10:03
49.35.94.38 attack
Unauthorised access (Sep  7) SRC=49.35.94.38 LEN=52 TOS=0x12 PREC=0x40 TTL=112 ID=30034 DF TCP DPT=445 WINDOW=8192 SYN
2020-09-08 17:30:56
49.235.99.209 attackspambots
Lines containing failures of 49.235.99.209 (max 1000)
Sep  7 03:53:33 archiv sshd[6557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.99.209  user=r.r
Sep  7 03:53:36 archiv sshd[6557]: Failed password for r.r from 49.235.99.209 port 56642 ssh2
Sep  7 03:53:36 archiv sshd[6557]: Received disconnect from 49.235.99.209 port 56642:11: Bye Bye [preauth]
Sep  7 03:53:36 archiv sshd[6557]: Disconnected from 49.235.99.209 port 56642 [preauth]
Sep  7 04:05:51 archiv sshd[6699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.99.209  user=r.r
Sep  7 04:05:53 archiv sshd[6699]: Failed password for r.r from 49.235.99.209 port 52180 ssh2
Sep  7 04:05:53 archiv sshd[6699]: Received disconnect from 49.235.99.209 port 52180:11: Bye Bye [preauth]
Sep  7 04:05:53 archiv sshd[6699]: Disconnected from 49.235.99.209 port 52180 [preauth]
Sep  7 04:08:49 archiv sshd[6741]: pam_unix(sshd:auth): aut........
------------------------------
2020-09-08 17:37:29
91.134.242.199 attackbots
$f2bV_matches
2020-09-08 17:11:00
183.92.214.38 attackspambots
183.92.214.38 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  8 02:59:29 server2 sshd[23806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.222.178.22  user=root
Sep  8 02:59:31 server2 sshd[23806]: Failed password for root from 222.222.178.22 port 37444 ssh2
Sep  8 02:59:33 server2 sshd[23814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.92.214.38  user=root
Sep  8 03:01:46 server2 sshd[25379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.165.40.168  user=root
Sep  8 02:59:34 server2 sshd[23814]: Failed password for root from 183.92.214.38 port 50624 ssh2
Sep  8 03:00:31 server2 sshd[24791]: Failed password for root from 170.80.68.242 port 42996 ssh2

IP Addresses Blocked:

222.222.178.22 (CN/China/-)
2020-09-08 17:03:05
198.71.231.39 attackbotsspam
Automatic report - XMLRPC Attack
2020-09-08 17:41:31
156.218.150.24 attack
trying to access non-authorized port
2020-09-08 17:31:59
114.32.57.16 attackbots
port scan and connect, tcp 23 (telnet)
2020-09-08 17:16:31
109.132.116.56 attackbotsspam
Sep  8 10:47:06 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=<4fcZYcmuaulthHQ4>
Sep  8 10:47:12 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=<14c3YcmubulthHQ4>
Sep  8 10:47:12 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=
Sep  8 10:47:23 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=<7cDfYcmud+lthHQ4>
Sep  8 10:47:25 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.14
...
2020-09-08 17:23:27
183.97.39.5 attack
$f2bV_matches
2020-09-08 17:40:05

Recently Reported IPs

66.249.76.65 2606:4700:10::6816:2983 2606:4700:10::6816:216 2606:4700:10::6816:1278
159.183.101.134 101.91.136.16 39.100.83.238 2606:4700:10::6816:2645
2606:4700:10::ac43:595 2606:4700:10::ac43:2620 124.162.193.59 34.133.170.169
185.126.117.24 2606:4700:10::6816:493 2606:4700:10::ac43:1580 160.119.76.46
121.41.167.149 3.85.134.131 2606:4700:10::6816:230 2606:4700:10::ac43:1995