Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Shanghai

Region: Shanghai

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '49.64.0.0 - 49.95.255.255'

% Abuse contact for '49.64.0.0 - 49.95.255.255' is 'anti-spam@chinatelecom.cn'

inetnum:        49.64.0.0 - 49.95.255.255
netname:        CHINANET-JS
descr:          CHINANET jiangsu province network
descr:          China Telecom
descr:          260 Zhongyang Road,Nanjing 210037
country:        CN
admin-c:        CH360-AP
tech-c:         CS306-AP
tech-c:         CN142-AP
abuse-c:        AC1573-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
notify:         jsipmanager@163.com
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CHINANET-JS
mnt-routes:     MAINT-CHINANET-JS
mnt-irt:        IRT-CHINANET-CN
last-modified:  2022-04-26T07:40:27Z
source:         APNIC

irt:            IRT-CHINANET-CN
address:        No.31 ,jingrong street,beijing
address:        100032
e-mail:         anti-spam@chinatelecom.cn
abuse-mailbox:  anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
auth:           # Filtered
remarks:        anti-spam@chinatelecom.cn was validated on 2026-05-21
mnt-by:         MAINT-CHINANET
last-modified:  2026-05-21T01:31:36Z
source:         APNIC

role:           ABUSE CHINANETCN
country:        ZZ
address:        No.31 ,jingrong street,beijing
address:        100032
phone:          +000000000
e-mail:         anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
nic-hdl:        AC1573-AP
remarks:        Generated from irt object IRT-CHINANET-CN
remarks:        anti-spam@chinatelecom.cn was validated on 2026-05-21
abuse-mailbox:  anti-spam@chinatelecom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-05-21T01:32:00Z
source:         APNIC

person:         CHINANET-JS Hostmaster
nic-hdl:        CH360-AP
e-mail:         jsipmanager@163.com
address:        Room 1001#, 260 Zhongyang Road, Nanjing,Jiangsu Province
phone:          +86-25-87799222
country:        CN
mnt-by:         MAINT-CHINANET-JS
last-modified:  2026-03-17T06:28:18Z
source:         APNIC

person:         CHINANET-JS Network Operations
nic-hdl:        CN142-AP
e-mail:         jsipmanager@163.com
address:        Room 1001#, 260 Zhongyang Road, Nanjing,Jiangsu Province
phone:          +86-25-86588721
phone:          +86-25-86788130
phone:          +86-25-86788122
phone:          +86-25-86588787
fax-no:         +86-25-86588104
country:        CN
mnt-by:         MAINT-CHINANET-JS
last-modified:  2022-03-15T07:09:00Z
source:         APNIC

person:         CHINANET-JS Security Administrater
nic-hdl:        CS306-AP
e-mail:         jsipmanager@163.com
address:        Room 1001#, 260 Zhongyang Road, Nanjing,Jiangsu Province
phone:          +86-25-87799222
country:        CN
mnt-by:         MAINT-CHINANET-JS
last-modified:  2026-03-17T06:29:04Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.67.89.15
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47522
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.67.89.15.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026061200 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 12 17:01:04 CST 2026
;; MSG SIZE  rcvd: 104
Host info
Host 15.89.67.49.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 15.89.67.49.in-addr.arpa: NXDOMAIN
Related IP info:
49.67.89.87
49.67.89.54
49.67.89.98
49.67.89.133
49.67.89.167
49.67.89.5
49.67.89.140
49.67.89.205
49.67.89.186
49.67.89.178
49.67.89.80
49.67.89.253
49.67.89.47
49.67.89.17
49.67.89.215
49.67.89.129
49.67.89.132
49.67.89.147
49.67.89.249
49.67.89.64
49.67.89.144
49.67.89.19
49.67.89.179
49.67.89.31
49.67.89.137
49.67.89.62
49.67.89.91
49.67.89.226
49.67.89.12
49.67.89.119
49.67.89.209
49.67.89.117
49.67.89.3
49.67.89.130
49.67.89.189
49.67.89.49
49.67.89.242
49.67.89.218
49.67.89.136
49.67.89.78
49.67.89.57
49.67.89.28
49.67.89.11
49.67.89.77
49.67.89.33
49.67.89.237
49.67.89.225
49.67.89.122
49.67.89.97
49.67.89.29
49.67.89.66
49.67.89.234
49.67.89.233
49.67.89.68
49.67.89.216
49.67.89.188
49.67.89.106
49.67.89.79
49.67.89.9
49.67.89.153
49.67.89.199
49.67.89.71
49.67.89.35
49.67.89.210
49.67.89.56
49.67.89.223
49.67.89.38
49.67.89.152
49.67.89.227
49.67.89.204
49.67.89.18
49.67.89.196
49.67.89.14
49.67.89.24
49.67.89.183
49.67.89.173
49.67.89.51
49.67.89.158
49.67.89.41
49.67.89.162
49.67.89.39
49.67.89.207
49.67.89.163
49.67.89.94
49.67.89.23
49.67.89.231
49.67.89.113
49.67.89.95
49.67.89.187
49.67.89.190
49.67.89.44
49.67.89.195
49.67.89.90
49.67.89.243
49.67.89.67
49.67.89.22
49.67.89.76
49.67.89.45
49.67.89.42
49.67.89.220
49.67.89.131
49.67.89.65
49.67.89.16
49.67.89.219
49.67.89.61
49.67.89.25
49.67.89.146
49.67.89.150
49.67.89.236
49.67.89.203
49.67.89.2
49.67.89.145
49.67.89.81
49.67.89.110
49.67.89.230
49.67.89.176
49.67.89.20
49.67.89.105
49.67.89.224
49.67.89.36
49.67.89.165
49.67.89.100
49.67.89.107
49.67.89.74
49.67.89.73
49.67.89.251
49.67.89.85
49.67.89.198
49.67.89.142
49.67.89.141
49.67.89.43
49.67.89.221
49.67.89.245
49.67.89.96
49.67.89.169
49.67.89.69
49.67.89.228
49.67.89.194
49.67.89.116
49.67.89.135
49.67.89.92
49.67.89.59
49.67.89.157
49.67.89.200
49.67.89.21
49.67.89.151
49.67.89.175
49.67.89.202
49.67.89.160
49.67.89.126
49.67.89.120
49.67.89.109
49.67.89.174
49.67.89.13
49.67.89.172
49.67.89.213
49.67.89.182
49.67.89.26
49.67.89.170
49.67.89.27
49.67.89.52
49.67.89.6
49.67.89.1
49.67.89.246
49.67.89.232
49.67.89.32
49.67.89.30
49.67.89.125
49.67.89.115
49.67.89.240
49.67.89.127
49.67.89.50
49.67.89.89
49.67.89.37
49.67.89.112
49.67.89.235
49.67.89.121
49.67.89.134
49.67.89.161
49.67.89.206
49.67.89.88
49.67.89.212
49.67.89.63
49.67.89.72
49.67.89.217
49.67.89.197
49.67.89.164
49.67.89.111
49.67.89.222
49.67.89.101
49.67.89.171
49.67.89.159
49.67.89.128
49.67.89.10
49.67.89.155
49.67.89.118
49.67.89.86
49.67.89.58
49.67.89.40
49.67.89.99
49.67.89.15
49.67.89.180
49.67.89.83
49.67.89.70
49.67.89.168
49.67.89.7
49.67.89.238
49.67.89.149
49.67.89.191
49.67.89.4
49.67.89.114
49.67.89.103
49.67.89.181
49.67.89.252
49.67.89.250
49.67.89.93
49.67.89.34
49.67.89.53
49.67.89.48
49.67.89.104
49.67.89.8
49.67.89.184
49.67.89.143
49.67.89.102
49.67.89.248
49.67.89.208
49.67.89.123
49.67.89.254
49.67.89.192
49.67.89.201
49.67.89.156
49.67.89.55
49.67.89.139
49.67.89.82
49.67.89.239
49.67.89.193
49.67.89.241
49.67.89.214
49.67.89.247
49.67.89.177
49.67.89.154
49.67.89.124
49.67.89.60
49.67.89.108
49.67.89.185
49.67.89.166
49.67.89.75
49.67.89.244
49.67.89.138
49.67.89.229
49.67.89.211
49.67.89.46
49.67.89.148
49.67.89.84
Related comments:
IP Type Details Datetime
27.34.251.60 attackbotsspam 
Apr 10 17:33:39 srv01 sshd[12929]: Invalid user ubuntu from 27.34.251.60 port 40480
Apr 10 17:33:39 srv01 sshd[12929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.34.251.60
Apr 10 17:33:39 srv01 sshd[12929]: Invalid user ubuntu from 27.34.251.60 port 40480
Apr 10 17:33:42 srv01 sshd[12929]: Failed password for invalid user ubuntu from 27.34.251.60 port 40480 ssh2
Apr 10 17:38:03 srv01 sshd[13276]: Invalid user username from 27.34.251.60 port 49700
...
 2020-04-11 00:11:41
49.88.112.55 attackspam 
$f2bV_matches
 2020-04-10 23:44:50
39.129.23.23 attack 
$f2bV_matches
 2020-04-11 00:09:55
128.199.192.125 attackspam 
128.199.192.125 - - [10/Apr/2020:14:08:08 +0200] "GET /wp-login.php HTTP/1.1" 200 5821 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
128.199.192.125 - - [10/Apr/2020:14:08:10 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
128.199.192.125 - - [10/Apr/2020:14:08:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
 2020-04-11 00:14:37
73.253.70.51 attackspam 
Apr 10 14:40:29 ns381471 sshd[15004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.253.70.51
Apr 10 14:40:31 ns381471 sshd[15004]: Failed password for invalid user castis from 73.253.70.51 port 36549 ssh2
 2020-04-10 23:49:54
192.3.177.213 attack 
Apr 10 13:07:38 firewall sshd[1445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.177.213
Apr 10 13:07:38 firewall sshd[1445]: Invalid user user from 192.3.177.213
Apr 10 13:07:39 firewall sshd[1445]: Failed password for invalid user user from 192.3.177.213 port 40202 ssh2
...
 2020-04-11 00:15:26
46.38.145.5 attackbots 
Apr 10 17:51:01 srv01 postfix/smtpd\[8380\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 10 17:51:31 srv01 postfix/smtpd\[20907\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 10 17:52:01 srv01 postfix/smtpd\[8380\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 10 17:52:31 srv01 postfix/smtpd\[8380\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 10 17:53:01 srv01 postfix/smtpd\[8380\]: warning: unknown\[46.38.145.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
 2020-04-10 23:55:41
185.147.215.8 attack 
[2020-04-10 11:40:56] NOTICE[12114] chan_sip.c: Registration from '' failed for '185.147.215.8:50305' - Wrong password
[2020-04-10 11:40:56] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-10T11:40:56.251-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4073",SessionID="0x7f020c08adb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/50305",Challenge="5c4d7bc8",ReceivedChallenge="5c4d7bc8",ReceivedHash="c33568d98d46d641920b1b382fac6321"
[2020-04-10 11:41:20] NOTICE[12114] chan_sip.c: Registration from '' failed for '185.147.215.8:58498' - Wrong password
[2020-04-10 11:41:20] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-10T11:41:20.006-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2799",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.2
...
 2020-04-10 23:50:22
192.99.212.132 attackspam 
Apr 10 15:26:27 localhost sshd\[11186\]: Invalid user admin from 192.99.212.132 port 44744
Apr 10 15:26:27 localhost sshd\[11186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.212.132
Apr 10 15:26:29 localhost sshd\[11186\]: Failed password for invalid user admin from 192.99.212.132 port 44744 ssh2
...
 2020-04-10 23:37:20
190.128.118.185 attack 
Apr 10 18:12:59 cvbnet sshd[22612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.118.185 
Apr 10 18:13:01 cvbnet sshd[22612]: Failed password for invalid user web from 190.128.118.185 port 54259 ssh2
...
 2020-04-11 00:21:33
148.70.242.55 attack 
Apr 10 15:29:48 marvibiene sshd[51700]: Invalid user demo1 from 148.70.242.55 port 49184
Apr 10 15:29:48 marvibiene sshd[51700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.242.55
Apr 10 15:29:48 marvibiene sshd[51700]: Invalid user demo1 from 148.70.242.55 port 49184
Apr 10 15:29:50 marvibiene sshd[51700]: Failed password for invalid user demo1 from 148.70.242.55 port 49184 ssh2
...
 2020-04-10 23:50:50
223.241.247.214 attackspambots 
2020-04-10T12:07:03.568409shield sshd\[27984\]: Invalid user test from 223.241.247.214 port 51227
2020-04-10T12:07:03.571323shield sshd\[27984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.241.247.214
2020-04-10T12:07:06.080582shield sshd\[27984\]: Failed password for invalid user test from 223.241.247.214 port 51227 ssh2
2020-04-10T12:08:38.188898shield sshd\[28234\]: Invalid user tocayo from 223.241.247.214 port 60646
2020-04-10T12:08:38.193826shield sshd\[28234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.241.247.214
 2020-04-10 23:52:44
112.197.35.42 attack 
1586520489 - 04/10/2020 14:08:09 Host: 112.197.35.42/112.197.35.42 Port: 445 TCP Blocked
 2020-04-11 00:17:01
192.99.34.42 attack 
192.99.34.42 - - [10/Apr/2020:17:29:39 +0200] "POST /wp-login.php HTTP/1.1" 200 5338 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.34.42 - - [10/Apr/2020:17:30:27 +0200] "POST /wp-login.php HTTP/1.1" 200 5338 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.34.42 - - [10/Apr/2020:17:31:16 +0200] "POST /wp-login.php HTTP/1.1" 200 5338 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.34.42 - - [10/Apr/2020:17:32:05 +0200] "POST /wp-login.php HTTP/1.1" 200 5338 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.34.42 - - [10/Apr/2020:17:33:31 +0200] "POST /wp-login.php HTTP/1.1" 200 5338 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537
...
 2020-04-10 23:53:00
122.238.128.124 attackspambots 
1586520478 - 04/10/2020 14:07:58 Host: 122.238.128.124/122.238.128.124 Port: 445 TCP Blocked
 2020-04-11 00:20:49

Recently Reported IPs

49.87.172.113 3.249.136.231 180.125.208.40 171.213.187.232
125.123.137.81 123.185.100.94 121.232.73.18 117.95.7.61
117.86.121.237 117.60.232.171 115.239.26.71 115.237.43.202
114.232.254.117 113.95.135.240 113.247.95.54 106.119.251.240
106.110.45.38 2606:4700:10::6814:8187 109.167.82.48 211.173.69.109