Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tianjin

Region: Tianjin

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '111.160.0.0 - 111.167.255.255'

% Abuse contact for '111.160.0.0 - 111.167.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        111.160.0.0 - 111.167.255.255
netname:        UNICOM-TJ
descr:          China Unicom Tianjin province network
descr:          China Unicom
country:        CN
admin-c:        CH455-AP
tech-c:         HZ19-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-TJ
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:33:42Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

role:           CNCGroup Hostmaster
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.156,Fu-Xing-Men-Nei Street,
address:        Beijing,100031,P.R.China
nic-hdl:        CH455-AP
phone:          +86-10-82993155
fax-no:         +86-10-82993102
country:        CN
admin-c:        CH444-AP
tech-c:         CH444-AP
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:15Z
source:         APNIC

person:         huang zheng
nic-hdl:        HZ19-AP
e-mail:         tj-ipaddr3@chinaunicom.cn
address:        76 NO, ShiZiLin Street ,HeBei district of Tianjin,China
phone:          +86-22-24459190
fax-no:         +86-22-24454499
country:        CN
mnt-by:         MAINT-CNCGROUP-TJ
last-modified:  2012-07-13T05:56:27Z
source:         APNIC

% Information related to '111.160.0.0/13AS4837'

route:          111.160.0.0/13
descr:          China Unicom Tianjin Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2009-05-22T06:21:10Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.166.153.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18662
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.166.153.19.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026082900 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 29 22:34:05 CST 2026
;; MSG SIZE  rcvd: 107
Host info
19.153.166.111.in-addr.arpa domain name pointer dns19.online.tj.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
19.153.166.111.in-addr.arpa	name = dns19.online.tj.cn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
14.236.36.69 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 08-01-2020 04:50:11.
2020-01-08 17:05:43
106.12.21.212 attackspambots
" "
2020-01-08 17:25:42
222.186.190.92 attackbotsspam
Jan  8 09:50:04 sd-53420 sshd\[26584\]: User root from 222.186.190.92 not allowed because none of user's groups are listed in AllowGroups
Jan  8 09:50:04 sd-53420 sshd\[26584\]: Failed none for invalid user root from 222.186.190.92 port 40722 ssh2
Jan  8 09:50:04 sd-53420 sshd\[26584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92  user=root
Jan  8 09:50:06 sd-53420 sshd\[26584\]: Failed password for invalid user root from 222.186.190.92 port 40722 ssh2
Jan  8 09:50:22 sd-53420 sshd\[26651\]: User root from 222.186.190.92 not allowed because none of user's groups are listed in AllowGroups
...
2020-01-08 16:59:22
190.202.41.194 attack
445/tcp 445/tcp
[2019-11-08/2020-01-08]2pkt
2020-01-08 16:57:03
94.240.163.102 attack
Unauthorised access (Jan  8) SRC=94.240.163.102 LEN=52 PREC=0x20 TTL=121 ID=14485 DF TCP DPT=445 WINDOW=8192 SYN
2020-01-08 17:24:03
79.13.46.65 attackspambots
Unauthorized connection attempt detected from IP address 79.13.46.65 to port 8000
2020-01-08 17:11:33
49.88.112.76 attackbots
Jan  8 15:30:46 webhost01 sshd[19601]: Failed password for root from 49.88.112.76 port 14763 ssh2
...
2020-01-08 16:56:05
51.38.235.100 attack
Jan  8 07:56:21 [host] sshd[22737]: Invalid user yokohama from 51.38.235.100
Jan  8 07:56:21 [host] sshd[22737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.235.100
Jan  8 07:56:23 [host] sshd[22737]: Failed password for invalid user yokohama from 51.38.235.100 port 38338 ssh2
2020-01-08 16:55:43
117.50.38.246 attackspam
Jan  8 01:17:50 mail sshd\[46733\]: Invalid user csgo from 117.50.38.246
Jan  8 01:17:50 mail sshd\[46733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.38.246
...
2020-01-08 16:51:18
222.186.175.148 attackspam
$f2bV_matches
2020-01-08 16:50:23
114.113.146.57 attack
Bruteforce on smtp
2020-01-08 16:51:32
134.175.68.129 attack
Jan  8 13:26:16 gw1 sshd[9562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.68.129
Jan  8 13:26:18 gw1 sshd[9562]: Failed password for invalid user lu from 134.175.68.129 port 46362 ssh2
...
2020-01-08 17:28:24
123.206.45.16 attackspambots
Repeated brute force against a port
2020-01-08 16:48:34
192.0.103.4 attackspambots
Automatic report generated by Wazuh
2020-01-08 17:27:00
106.13.138.225 attackspambots
Jan  8 06:58:24 legacy sshd[31091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.225
Jan  8 06:58:26 legacy sshd[31091]: Failed password for invalid user user from 106.13.138.225 port 35478 ssh2
Jan  8 07:01:54 legacy sshd[31285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.225
...
2020-01-08 16:48:48

Recently Reported IPs

175.42.160.23 171.35.86.255 125.40.9.190 120.231.139.64
120.229.27.131 120.226.201.138 119.44.45.49 119.176.95.108
117.179.174.128 112.51.196.219 112.49.176.71 111.22.206.157
2606:4700:10::6814:5755 2606:4700:10::6816:4745 110.53.42.114 39.69.197.197
220.200.38.55 116.147.144.128 106.117.109.60 113.173.85.118