The fist time, a couple of hours ago, when I checked the IP it was an Indian(Delhi) IP address showing on top at http://whois.domaintools.com/122.156.234.148 document which now has changed. Information below was the same as it is now.

Someone's playing nasty I guess and even access the ICANN data perhaps.

But Indian hackers possible?

The part below was showing India and Delhi

**** IP Location: China Harbin China Unicom Heilongjiang Province Network
ASN: AS4837
IP Address: 122.156.234.148 see more ****