Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tianjin

Region: Tianjin

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '111.160.0.0 - 111.167.255.255'

% Abuse contact for '111.160.0.0 - 111.167.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        111.160.0.0 - 111.167.255.255
netname:        UNICOM-TJ
descr:          China Unicom Tianjin province network
descr:          China Unicom
country:        CN
admin-c:        CH455-AP
tech-c:         HZ19-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-TJ
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:33:42Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

role:           CNCGroup Hostmaster
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.156,Fu-Xing-Men-Nei Street,
address:        Beijing,100031,P.R.China
nic-hdl:        CH455-AP
phone:          +86-10-82993155
fax-no:         +86-10-82993102
country:        CN
admin-c:        CH444-AP
tech-c:         CH444-AP
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:15Z
source:         APNIC

person:         huang zheng
nic-hdl:        HZ19-AP
e-mail:         tj-ipaddr3@chinaunicom.cn
address:        76 NO, ShiZiLin Street ,HeBei district of Tianjin,China
phone:          +86-22-24459190
fax-no:         +86-22-24454499
country:        CN
mnt-by:         MAINT-CNCGROUP-TJ
last-modified:  2012-07-13T05:56:27Z
source:         APNIC

% Information related to '111.160.0.0/13AS4837'

route:          111.160.0.0/13
descr:          China Unicom Tianjin Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2009-05-22T06:21:10Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.163.145.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19505
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.163.145.104.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026090201 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 03 02:30:50 CST 2026
;; MSG SIZE  rcvd: 108
Host info
104.145.163.111.in-addr.arpa domain name pointer dns104.online.tj.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.145.163.111.in-addr.arpa	name = dns104.online.tj.cn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
106.54.23.83 attackspam
Fail2Ban Ban Triggered
2019-11-04 06:13:49
62.234.180.200 attack
Failed password for root from 62.234.180.200 port 52428 ssh2
2019-11-04 05:47:16
106.13.119.163 attackspam
sshd jail - ssh hack attempt
2019-11-04 05:51:19
88.100.250.223 attack
From IP send fake orders.
2019-11-04 05:57:57
209.59.160.192 attack
Nov  3 22:28:03 heissa sshd\[18240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host.farlateal.com  user=root
Nov  3 22:28:06 heissa sshd\[18240\]: Failed password for root from 209.59.160.192 port 52726 ssh2
Nov  3 22:31:50 heissa sshd\[18834\]: Invalid user com from 209.59.160.192 port 43520
Nov  3 22:31:50 heissa sshd\[18834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host.farlateal.com
Nov  3 22:31:51 heissa sshd\[18834\]: Failed password for invalid user com from 209.59.160.192 port 43520 ssh2
2019-11-04 05:47:31
27.193.51.7 attack
3389BruteforceFW21
2019-11-04 05:48:57
52.151.20.147 attackbotsspam
2019-11-03T21:51:07.189885hub.schaetter.us sshd\[5575\]: Invalid user google from 52.151.20.147 port 33506
2019-11-03T21:51:07.195892hub.schaetter.us sshd\[5575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.151.20.147
2019-11-03T21:51:08.750604hub.schaetter.us sshd\[5575\]: Failed password for invalid user google from 52.151.20.147 port 33506 ssh2
2019-11-03T21:56:00.315822hub.schaetter.us sshd\[5631\]: Invalid user fa from 52.151.20.147 port 44408
2019-11-03T21:56:00.324664hub.schaetter.us sshd\[5631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.151.20.147
...
2019-11-04 05:57:29
197.54.1.200 spamattacknormal
197.54.1.200
2019-11-04 05:58:53
93.5.195.169 attack
Nov  3 20:20:55 thevastnessof sshd[15370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.5.195.169
...
2019-11-04 05:47:56
122.118.0.203 attackspam
19/11/3@09:27:47: FAIL: Alarm-Intrusion address from=122.118.0.203
...
2019-11-04 06:09:19
192.241.246.50 attackspambots
Nov  3 20:26:03 mail sshd[3274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.246.50  user=root
Nov  3 20:26:05 mail sshd[3274]: Failed password for root from 192.241.246.50 port 50367 ssh2
Nov  3 20:41:15 mail sshd[26595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.246.50  user=root
Nov  3 20:41:17 mail sshd[26595]: Failed password for root from 192.241.246.50 port 41075 ssh2
Nov  3 20:47:17 mail sshd[3412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.246.50  user=root
Nov  3 20:47:19 mail sshd[3412]: Failed password for root from 192.241.246.50 port 60390 ssh2
...
2019-11-04 05:39:42
125.227.249.88 attackspam
Unauthorised access (Nov  3) SRC=125.227.249.88 LEN=40 PREC=0x20 TTL=51 ID=14907 TCP DPT=23 WINDOW=43537 SYN
2019-11-04 05:44:11
157.230.119.200 attackspam
Nov  3 21:12:58 vps666546 sshd\[24902\]: Invalid user virginie from 157.230.119.200 port 57394
Nov  3 21:12:58 vps666546 sshd\[24902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.119.200
Nov  3 21:13:01 vps666546 sshd\[24902\]: Failed password for invalid user virginie from 157.230.119.200 port 57394 ssh2
Nov  3 21:16:27 vps666546 sshd\[25038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.119.200  user=root
Nov  3 21:16:30 vps666546 sshd\[25038\]: Failed password for root from 157.230.119.200 port 39602 ssh2
...
2019-11-04 06:15:04
129.28.165.178 attack
$f2bV_matches
2019-11-04 05:52:45
192.185.130.216 attackspambots
Automatic report - XMLRPC Attack
2019-11-04 06:03:42

Recently Reported IPs

116.77.5.187 103.189.25.68 42.236.219.133 39.163.30.45
39.162.191.216 223.101.37.229 20.38.34.38 183.197.44.143
175.44.152.213 117.174.77.1 112.5.44.187 116.76.192.104
107.170.31.92 42.238.181.26 39.154.25.44 39.154.11.183
39.154.11.11 36.159.136.100 223.91.15.63 223.88.80.203