Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tianjin

Region: Tianjin

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '111.160.0.0 - 111.167.255.255'

% Abuse contact for '111.160.0.0 - 111.167.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        111.160.0.0 - 111.167.255.255
netname:        UNICOM-TJ
descr:          China Unicom Tianjin province network
descr:          China Unicom
country:        CN
admin-c:        CH455-AP
tech-c:         HZ19-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-TJ
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:33:42Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

role:           CNCGroup Hostmaster
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.156,Fu-Xing-Men-Nei Street,
address:        Beijing,100031,P.R.China
nic-hdl:        CH455-AP
phone:          +86-10-82993155
fax-no:         +86-10-82993102
country:        CN
admin-c:        CH444-AP
tech-c:         CH444-AP
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:15Z
source:         APNIC

person:         huang zheng
nic-hdl:        HZ19-AP
e-mail:         tj-ipaddr3@chinaunicom.cn
address:        76 NO, ShiZiLin Street ,HeBei district of Tianjin,China
phone:          +86-22-24459190
fax-no:         +86-22-24454499
country:        CN
mnt-by:         MAINT-CNCGROUP-TJ
last-modified:  2012-07-13T05:56:27Z
source:         APNIC

% Information related to '111.160.0.0/13AS4837'

route:          111.160.0.0/13
descr:          China Unicom Tianjin Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2009-05-22T06:21:10Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.166.154.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8036
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.166.154.138.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026090201 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 03 12:02:54 CST 2026
;; MSG SIZE  rcvd: 108
Host info
138.154.166.111.in-addr.arpa domain name pointer dns138.online.tj.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.154.166.111.in-addr.arpa	name = dns138.online.tj.cn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
185.220.100.243 attackbotsspam
Malicious Traffic/Form Submission
2020-02-18 01:00:22
139.170.150.254 attack
SSH bruteforce
2020-02-18 00:55:25
134.209.228.253 attackbots
Invalid user debby from 134.209.228.253 port 39444
2020-02-18 01:24:53
178.176.58.76 attack
Feb 17 16:39:59 *** sshd[10969]: Invalid user fofserver from 178.176.58.76
2020-02-18 00:55:02
213.5.189.210 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-18 01:24:40
103.66.96.254 attack
$f2bV_matches
2020-02-18 00:46:22
222.186.190.92 attackspam
$f2bV_matches
2020-02-18 00:53:11
111.40.160.218 attackspam
$f2bV_matches
2020-02-18 01:31:38
103.207.0.150 attackspambots
1581946639 - 02/17/2020 14:37:19 Host: 103.207.0.150/103.207.0.150 Port: 445 TCP Blocked
2020-02-18 00:52:12
159.203.161.38 attack
Feb 17 15:29:43 legacy sshd[5337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.161.38
Feb 17 15:29:46 legacy sshd[5337]: Failed password for invalid user isriordan from 159.203.161.38 port 35034 ssh2
Feb 17 15:33:16 legacy sshd[5540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.161.38
...
2020-02-18 01:08:18
201.184.65.170 attackspambots
1581946620 - 02/17/2020 14:37:00 Host: 201.184.65.170/201.184.65.170 Port: 445 TCP Blocked
2020-02-18 01:18:00
54.39.163.64 attackbotsspam
Feb 17 14:34:38 markkoudstaal sshd[26290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.163.64
Feb 17 14:34:40 markkoudstaal sshd[26290]: Failed password for invalid user bf2 from 54.39.163.64 port 52562 ssh2
Feb 17 14:37:12 markkoudstaal sshd[26715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.163.64
2020-02-18 01:04:43
213.5.188.123 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-18 01:27:49
79.107.134.253 attackbotsspam
23/tcp
[2020-02-17]1pkt
2020-02-18 01:00:00
112.198.43.130 attackbotsspam
Feb 17 14:02:54 game-panel sshd[599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.198.43.130
Feb 17 14:02:57 game-panel sshd[599]: Failed password for invalid user meteor from 112.198.43.130 port 33235 ssh2
Feb 17 14:05:22 game-panel sshd[698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.198.43.130
2020-02-18 01:09:40

Recently Reported IPs

124.133.59.46 121.24.3.115 2606:4700:10::6814:8535 14.207.194.182
119.250.130.152 115.54.175.216 112.111.128.170 111.35.241.67
110.241.45.14 110.17.2.181 101.26.28.72 60.255.229.211
58.242.108.82 42.239.54.161 120.82.85.97 115.60.65.15
115.54.41.120 101.16.5.228 2606:4700:10::ac43:942 2606:4700:10::6814:8508