156.232.92.163 Threat Intelligence and Host Information

Oct 27, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 156.232.92.163 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 7/100

Host and Network Information

  • Country: United States
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: SSH
  • Passive DNS Results: zepf028.xyz jztm028.xyz wiad028.xyz tzzx056.xyz ltll056.xyz skem028.xyz hwud056.xyz ccyw028.xyz ysqd056.xyz oznh056.xyz catn028.xyz vfje028.xyz idiq056.xyz iudj056.xyz qidh056.xyz uihf028.xyz ttym028.xyz jhsv010.xyz fwif010.xyz wfrj010.xyz dujk010.xyz qrsm010.xyz gvfu010.xyz fruo010.xyz sioj022.xyz buse022.xyz rdnb009.xyz blrt090.xyz hpdb100.xyz hsed100.xyz suqw100.xyz etof100.xyz lfic100.xyz jhvk100.xyz oicf100.xyz xgnf006.xyz zojq100.xyz orlq044.xyz znrv044.xyz bqgc044.xyz bqvz056.xyz ggdh090.xyz fnkv090.xyz www.amaona20.bar amaona21.bar amaona12.bar amaona8.bar amaona14.bar amaona10.bar amaona20.bar amaona15.bar amaona18.bar amaona16.bar amaona13.bar amaona9.bar amaona17.bar amaona11.bar amaona22.bar amaona1.bar amaona6.bar amaona7.bar amaona3.bar amaona2.bar amaona5.bar amaona4.bar fgfr45678.xyz amazon1133.com amazon2299.com amazon1155.com amazon1166.com amazon1177.com amazon2288.com amazon1199.com 7749e.com

Malware Detected on Host

Count: 2 059d1bf3d48b5d8bd43837b4a562a46591f44c63cad2bee6895b6bb8e441b28f a59347f40aa2427a490680f07f8350cea0b232e00106d37779c059e443ce0c4c

Map

Whois Information

  • NetRange: 156.232.0.0 - 156.232.255.255
  • CIDR: 156.232.0.0/16
  • NetName: AFRINIC-ERX-156-232-0-0
  • NetHandle: NET-156-232-0-0-1
  • Parent: NET156 (NET-156-0-0-0-0)
  • NetType: Transferred to AfriNIC
  • OriginAS:
  • Organization: African Network Information Center (AFRINIC)
  • RegDate: 2010-11-03
  • Updated: 2010-11-17
  • Comment: This IP address range is under AFRINIC responsibility.
  • Comment: Please see http://www.afrinic.net/ for further details,
  • Ref: https://rdap.arin.net/registry/ip/156.232.0.0
  • OrgName: African Network Information Center
  • OrgId: AFRINIC
  • Address: Level 11ABC
  • Address: Raffles Tower
  • Address: Lot 19, Cybercity
  • City: Ebene
  • StateProv:
  • PostalCode:
  • Country: MU
  • RegDate: 2004-05-17
  • Updated: 2015-05-04
  • Comment: AfriNIC - http://www.afrinic.net
  • Comment: The African & Indian Ocean Internet Registry
  • Ref: https://rdap.arin.net/registry/entity/AFRINIC
  • OrgAbuseHandle: GENER11-ARIN
  • OrgAbuseName: Generic POC
  • OrgAbusePhone: +230 4666616
  • OrgAbuseEmail: abusepoc@afrinic.net
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
  • OrgTechHandle: GENER11-ARIN
  • OrgTechName: Generic POC
  • OrgTechPhone: +230 4666616
  • OrgTechEmail: abusepoc@afrinic.net
  • OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
  • inetnum: 156.232.92.0 - 156.232.92.255
  • netname: UCLOUD_INFORMATION_TECHNOLOGY_HK_LIMITEDIMITED
  • descr: UCLOUD INFORMATION TECHNOLOGY HK LIMITEDIMITED
  • country: GB
  • admin-c: CIS1-AFRINIC
  • tech-c: CIS1-AFRINIC
  • status: ASSIGNED PA
  • mnt-by: CIL1-MNT
  • mnt-by: LARUS-SERVICE-MNT
  • parent: 156.224.0.0 - 156.255.255.255
  • person: Cloud Innovation Support
  • address: Ebene
  • address: MU
  • address: Mahe
  • address: Seychelles
  • phone: tel:+248-4-610-795
  • nic-hdl: CIS1-AFRINIC
  • abuse-mailbox: abuse@cloudinnovation.org
  • mnt-by: CIL1-MNT
  • route: 156.232.92.0/24
  • origin: AS135377
  • descr: Ucloud
  • mnt-by: LARUS-SERVICE-MNT

Links to attack logs

****** ****** ******

Share on: