Is 49.64.85.138 malicious?
Checked against 1.5M+ indicators of compromise from honeypots, blocklists and OSINT feeds.
MALICIOUS
This indicator is flagged as hostile. Consider blocking it.
Public Record
Type
ip
Country
CN
First Seen
5 Jun 2026
Status
ACTIVE
Source
IPsum Aggregated
reputationp0fssh-attackipsumhoneypotcowrietpotsuricata
Full report is free — sign in to unlock
Confidence score, last-seen date, abuse reports, open CVEs (Shodan), attack context and API access.