Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tianjin

Region: Tianjin

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '111.160.0.0 - 111.167.255.255'

% Abuse contact for '111.160.0.0 - 111.167.255.255' is 'zhaoyz3@chinaunicom.cn'

inetnum:        111.160.0.0 - 111.167.255.255
netname:        UNICOM-TJ
descr:          China Unicom Tianjin province network
descr:          China Unicom
country:        CN
admin-c:        CH455-AP
tech-c:         HZ19-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-TJ
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:33:42Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         zhaoyz3@chinaunicom.cn
abuse-mailbox:  zhaoyz3@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        zhaoyz3@chinaunicom.cn was validated on 2026-05-08
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-05-09T04:50:16Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         zhaoyz3@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        zhaoyz3@chinaunicom.cn was validated on 2026-05-08
abuse-mailbox:  zhaoyz3@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-05-08T01:31:32Z
source:         APNIC

role:           CNCGroup Hostmaster
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.156,Fu-Xing-Men-Nei Street,
address:        Beijing,100031,P.R.China
nic-hdl:        CH455-AP
phone:          +86-10-82993155
fax-no:         +86-10-82993102
country:        CN
admin-c:        CH444-AP
tech-c:         CH444-AP
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:15Z
source:         APNIC

person:         huang zheng
nic-hdl:        HZ19-AP
e-mail:         tj-ipaddr3@chinaunicom.cn
address:        76 NO, ShiZiLin Street ,HeBei district of Tianjin,China
phone:          +86-22-24459190
fax-no:         +86-22-24454499
country:        CN
mnt-by:         MAINT-CNCGROUP-TJ
last-modified:  2012-07-13T05:56:27Z
source:         APNIC

% Information related to '111.160.0.0/13AS4837'

route:          111.160.0.0/13
descr:          China Unicom Tianjin Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2009-05-22T06:21:10Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.162.138.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15826
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.162.138.31.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026052401 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 25 06:00:44 CST 2026
;; MSG SIZE  rcvd: 107
Host info
31.138.162.111.in-addr.arpa domain name pointer dns31.online.tj.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
31.138.162.111.in-addr.arpa	name = dns31.online.tj.cn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
175.138.108.78 attackbotsspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-05T12:19:37Z and 2020-07-05T12:22:55Z
2020-07-06 01:36:54
49.235.158.195 attackbots
$f2bV_matches
2020-07-06 02:04:20
46.38.148.2 attack
2020-07-05 17:46:50 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=robin@csmailer.org)
2020-07-05 17:47:18 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=peggy@csmailer.org)
2020-07-05 17:47:47 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=crystal@csmailer.org)
2020-07-05 17:48:16 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=gladys@csmailer.org)
2020-07-05 17:48:41 auth_plain authenticator failed for (User) [46.38.148.2]: 535 Incorrect authentication data (set_id=rita@csmailer.org)
...
2020-07-06 02:00:32
27.147.44.2 attackbots
Honeypot attack, port: 5555, PTR: PTR record not found
2020-07-06 01:25:15
91.89.92.61 attack
SSH brute force attempt
2020-07-06 01:36:11
207.200.8.182 attack
Automated report (2020-07-06T01:44:42+08:00). Misbehaving bot detected at this address.
2020-07-06 02:00:49
116.55.79.153 attackspambots
Honeypot attack, port: 5555, PTR: 153.79.55.116.broad.km.yn.dynamic.163data.com.cn.
2020-07-06 01:51:17
187.114.150.160 attackspambots
Unauthorised access (Jul  5) SRC=187.114.150.160 LEN=52 TOS=0x08 PREC=0x40 TTL=104 ID=26811 DF TCP DPT=445 WINDOW=8192 SYN
2020-07-06 01:30:26
103.145.12.172 attack
[2020-07-05 13:44:42] NOTICE[1197][C-00001cc3] chan_sip.c: Call from '' (103.145.12.172:53117) to extension '00046313113297' rejected because extension not found in context 'public'.
[2020-07-05 13:44:42] SECURITY[1214] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-05T13:44:42.672-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00046313113297",SessionID="0x7f6d28277878",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.172/53117",ACLName="no_extension_match"
[2020-07-05 13:44:43] NOTICE[1197][C-00001cc4] chan_sip.c: Call from '' (103.145.12.172:57296) to extension '00046213724636' rejected because extension not found in context 'public'.
[2020-07-05 13:44:43] SECURITY[1214] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-05T13:44:43.723-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00046213724636",SessionID="0x7f6d288c4af8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1
...
2020-07-06 01:59:43
40.87.107.207 attackbotsspam
(pop3d) Failed POP3 login from 40.87.107.207 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul  5 16:52:53 ir1 dovecot[2885757]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=40.87.107.207, lip=5.63.12.44, session=
2020-07-06 01:36:30
113.252.252.148 attack
Honeypot attack, port: 5555, PTR: 148-252-252-113-on-nets.com.
2020-07-06 01:35:43
173.48.63.144 attackbotsspam
3 failed attempts at connecting to SSH.
2020-07-06 01:27:41
80.255.130.197 attackbotsspam
srv02 SSH BruteForce Attacks 22 ..
2020-07-06 01:35:27
174.219.10.150 attackspam
Brute forcing email accounts
2020-07-06 01:55:58
112.85.42.173 attackbotsspam
Jul  5 17:58:52 rush sshd[18147]: Failed password for root from 112.85.42.173 port 30738 ssh2
Jul  5 17:58:56 rush sshd[18147]: Failed password for root from 112.85.42.173 port 30738 ssh2
Jul  5 17:58:59 rush sshd[18147]: Failed password for root from 112.85.42.173 port 30738 ssh2
Jul  5 17:59:02 rush sshd[18147]: Failed password for root from 112.85.42.173 port 30738 ssh2
...
2020-07-06 02:00:18

Recently Reported IPs

167.88.164.107 147.182.180.47 52.128.231.114 38.100.223.60
202.47.56.15 60.186.126.141 167.88.164.59 172.86.73.246
2.58.172.169 34.156.153.209 135.237.127.116 2606:4700:10::6816:4643
47.74.42.58 8.221.141.105 66.132.172.187 59.52.101.96
43.248.109.217 139.212.71.99 2606:4700:10::6814:4525 2606:4700:10::ac43:129e