Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '39.64.0.0 - 39.95.255.255'

% Abuse contact for '39.64.0.0 - 39.95.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        39.64.0.0 - 39.95.255.255
netname:        UNICOM-SD
descr:          China Unicom Shandong province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         XZ14-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP
mnt-lower:      MAINT-CNCGROUP-SD
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:20:18Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         XIAOFENG ZHANG
nic-hdl:        XZ14-AP
e-mail:         ip@pub.sd.cninfo.net
address:        Jinan,Shandong P.R China
phone:          +86-531-6666666
fax-no:         +86-531-6666666
country:        CN
mnt-by:         MAINT-ZXF
last-modified:  2008-09-04T07:29:35Z
source:         APNIC

% Information related to '39.64.0.0/11AS4837'

route:          39.64.0.0/11
descr:          China Unicom Shandong Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2011-04-22T06:46:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.91.113.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19568
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;39.91.113.243.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026092701 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 28 07:30:11 CST 2026
;; MSG SIZE  rcvd: 106
Host info
Host 243.113.91.39.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 243.113.91.39.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
180.148.1.218 attackbots
Oct 14 10:19:22 dedicated sshd[18924]: Invalid user $RFV%TGB from 180.148.1.218 port 47758
2019-10-14 18:24:26
80.82.77.245 attackbots
10/14/2019-05:49:43.738507 80.82.77.245 Protocol: 17 ET DROP Dshield Block Listed Source group 1
2019-10-14 18:09:42
187.189.63.198 attackbotsspam
Oct 14 06:59:40 www5 sshd\[11645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.63.198  user=root
Oct 14 06:59:41 www5 sshd\[11645\]: Failed password for root from 187.189.63.198 port 33624 ssh2
Oct 14 07:03:50 www5 sshd\[12750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.63.198  user=root
Oct 14 07:03:51 www5 sshd\[12750\]: Failed password for root from 187.189.63.198 port 44688 ssh2
...
2019-10-14 18:23:21
158.140.138.168 attackspambots
Oct 13 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=158.140.138.168, lip=**REMOVED**, TLS: Disconnected, session=\
Oct 14 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=158.140.138.168, lip=**REMOVED**, TLS: Disconnected, session=\
Oct 14 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=158.140.138.168, lip=**REMOVED**, TLS, session=\
2019-10-14 18:17:10
77.199.87.64 attack
$f2bV_matches
2019-10-14 18:11:57
210.221.220.68 attack
Oct 14 10:42:16 herz-der-gamer sshd[2564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.221.220.68  user=root
Oct 14 10:42:18 herz-der-gamer sshd[2564]: Failed password for root from 210.221.220.68 port 41614 ssh2
...
2019-10-14 18:14:27
45.59.17.118 attackspam
Someone from this IP tries to hack my Telegram account. I think this IP rented by security forces of Iran.
2019-10-14 18:01:49
85.132.100.24 attack
$f2bV_matches
2019-10-14 18:27:34
59.48.153.231 attack
Oct 13 23:38:34 wbs sshd\[27818\]: Invalid user !@\#\$ABCD from 59.48.153.231
Oct 13 23:38:34 wbs sshd\[27818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.48.153.231
Oct 13 23:38:35 wbs sshd\[27818\]: Failed password for invalid user !@\#\$ABCD from 59.48.153.231 port 37067 ssh2
Oct 13 23:43:17 wbs sshd\[28351\]: Invalid user !@\#\$ABCD from 59.48.153.231
Oct 13 23:43:17 wbs sshd\[28351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.48.153.231
2019-10-14 17:59:27
185.90.118.82 attackbots
10/14/2019-06:03:43.748373 185.90.118.82 Protocol: 6 ET SCAN Potential SSH Scan
2019-10-14 18:06:11
123.207.231.63 attackbotsspam
SSH bruteforce (Triggered fail2ban)
2019-10-14 18:31:38
106.75.141.91 attackbotsspam
$f2bV_matches
2019-10-14 18:24:49
58.240.2.38 attackspambots
Automatic report - Banned IP Access
2019-10-14 18:20:12
42.157.128.188 attackbotsspam
Lines containing failures of 42.157.128.188 (max 1000)
Oct 14 02:33:45 localhost sshd[5707]: Invalid user claire from 42.157.128.188 port 50542
Oct 14 02:33:45 localhost sshd[5707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.128.188 
Oct 14 02:33:47 localhost sshd[5707]: Failed password for invalid user claire from 42.157.128.188 port 50542 ssh2
Oct 14 02:33:48 localhost sshd[5707]: Received disconnect from 42.157.128.188 port 50542:11: Bye Bye [preauth]
Oct 14 02:33:48 localhost sshd[5707]: Disconnected from invalid user claire 42.157.128.188 port 50542 [preauth]
Oct 14 02:54:39 localhost sshd[3600]: Invalid user bot2 from 42.157.128.188 port 49012
Oct 14 02:54:39 localhost sshd[3600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.128.188 
Oct 14 02:54:41 localhost sshd[3600]: Failed password for invalid user bot2 from 42.157.128.188 port 49012 ssh2
Oct 14 02:54:42 local........
------------------------------
2019-10-14 18:23:59
49.204.76.142 attackspam
Oct 14 11:50:47 lnxded64 sshd[32185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.204.76.142
Oct 14 11:50:47 lnxded64 sshd[32185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.204.76.142
2019-10-14 18:15:47

Recently Reported IPs

103.176.16.132 177.136.231.47 20.169.84.217 87.250.224.106
49.82.87.31 165.245.197.19 188.166.95.62 2400:b800:1:1::553
229.102.64.23 223.73.178.9 39.128.95.157 87.236.176.115
64.89.160.91 205.193.121.1 206.228.203.11 203.22.229.36
203.122.6.58 213.180.203.117 202.182.127.230 202.141.96.115