JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.70.51.23

111.70.51.23 was found in our database!

This IP was reported 915 times. Confidence of Abuse is 24%: ?

24%

ISP	CHT-Mobile business Group,Chunghwa
Usage Type	Commercial
ASN	AS17421
Hostname(s)	111-70-51-23.emome-ip.hinet.net
Domain Name	cht.com.tw
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.70.51.23

Whois 111.70.51.23

IP Abuse Reports for 111.70.51.23:

This IP address has been reported a total of 915 times from 225 distinct sources. 111.70.51.23 was first reported on December 13th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 eskilbrun	2026-06-10 08:39:03 (2 weeks ago)	2026-06-10T10:39:02.256732+02:00 linode1.eskil.net postfix/smtpd[80356]: warning: 111-70-51-23.emome ... show more 2026-06-10T10:39:02.256732+02:00 linode1.eskil.net postfix/smtpd[80356]: warning: 111-70-51-23.emome-ip.hinet.net[111.70.51.23]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-06-10T10:39:02.845127+02:00 linode1.eskil.net postfix/smtpd[80356]: lost connection after AUTH from 111-70-51-23.emome-ip.hinet.net[111.70.51.23] 2026-06-10T10:39:02.845475+02:00 linode1.eskil.net postfix/smtpd[80356]: disconnect from 111-70-51-23.emome-ip.hinet.net[111.70.51.23] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇩🇪 Paul Smith	2026-06-10 08:26:57 (2 weeks ago)	Email Auth Brute force attack 1/1 in last day	Brute-Force
🇩🇪 ghostwarriors	2026-06-10 08:11:52 (2 weeks ago)	Attempts against SMTP/SSMTP	Brute-Force Web App Attack
🇮🇳 evicky2002	2026-05-23 06:15:15 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 ICS Labs	2026-05-15 15:45:36 (1 month ago)	ICS Labs identified 111.70.51.23 as a malicious indicator from threat intelligence.	Hacking
🇩🇪 FeG Deutschland	2026-04-25 07:14:02 (2 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 Brian Minton	2026-04-25 06:21:55 (2 months ago)	2026-04-23 07:49:01 login_saslauthd_server authenticator failed for 111-70-51-23.emome-ip.hinet.net ... show more 2026-04-23 07:49:01 login_saslauthd_server authenticator failed for 111-70-51-23.emome-ip.hinet.net ([183.237.33.162]) [111.70.51.23]: 535 Incorrect authentication data (set_id=hostmaster) 2026-04-24 04:37:05 login_saslauthd_server authenticator failed for 111-70-51-23.emome-ip.hinet.net ([142.112.89.138]) [111.70.51.23]: 535 Incorrect authentication data (set_id=abuse) 2026-04-25 01:21:55 login_saslauthd_server authenticator failed for 111-70-51-23.emome-ip.hinet.net (sigma.com.ru) [111.70.51.23]: 535 Incorrect authentication data (set_id=daemon) ... show less	Brute-Force
🇺🇦 MakselPr	2026-04-25 05:28:37 (2 months ago)	Apr 25 06:33:12 mail postfix/smtps/smtpd[113946]: warning: 111-70-51-23.emome-ip.hinet.net[111.70.51 ... show more Apr 25 06:33:12 mail postfix/smtps/smtpd[113946]: warning: 111-70-51-23.emome-ip.hinet.net[111.70.51.23]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Apr 25 08:28:36 mail postfix/smtps/smtpd[119013]: warning: 111-70-51-23.emome-ip.hinet.net[111.70.51.23]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇩🇪 Paul Smith	2026-04-25 04:28:33 (2 months ago)	Email Auth Brute force attack 8/7 in last day	Brute-Force
🇰🇷 Woodie	2026-04-25 03:44:25 (2 months ago)	2026-04-24T23:44:09.240997-04:00 debian sshd[1528279]: pam_unix(sshd:auth): authentication failure; ... show more 2026-04-24T23:44:09.240997-04:00 debian sshd[1528279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.70.51.23 user=root 2026-04-24T23:44:11.111926-04:00 debian sshd[1528279]: Failed password for root from 111.70.51.23 port 50167 ssh2 2026-04-24T23:44:22.590081-04:00 debian sshd[1528379]: Invalid user unknown from 111.70.51.23 port 35228 2026-04-24T23:44:22.593393-04:00 debian sshd[1528379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.70.51.23 2026-04-24T23:44:24.915950-04:00 debian sshd[1528379]: Failed password for invalid user unknown from 111.70.51.23 port 35228 ssh2 ... show less	Brute-Force SSH
🇰🇷 Woodie	2026-04-25 02:04:44 (2 months ago)	2026-04-24T21:57:42.047602-04:00 debian sshd[1472488]: Failed password for invalid user blank from 1 ... show more 2026-04-24T21:57:42.047602-04:00 debian sshd[1472488]: Failed password for invalid user blank from 111.70.51.23 port 34933 ssh2 2026-04-24T22:00:41.925361-04:00 debian sshd[1474000]: Invalid user blank from 111.70.51.23 port 38833 2026-04-24T22:00:41.959743-04:00 debian sshd[1474000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.70.51.23 2026-04-24T22:00:43.911878-04:00 debian sshd[1474000]: Failed password for invalid user blank from 111.70.51.23 port 38833 ssh2 2026-04-24T22:04:44.101338-04:00 debian sshd[1476112]: Invalid user admin from 111.70.51.23 port 37463 ... show less	Brute-Force SSH
🇷🇴 iulianh	2026-04-25 01:13:39 (2 months ago)	25,465,587	Brute-Force SSH
🇺🇸 TheCluePhone	2026-04-25 00:04:58 (2 months ago)	2026-04-25T00:04:58.122768ip-172-30-0-137.ec2.internal auth[3376]: pam_unix(dovecot:auth): authentic ... show more 2026-04-25T00:04:58.122768ip-172-30-0-137.ec2.internal auth[3376]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=111.70.51.23 ... show less	Brute-Force Exploited Host
🇨🇳 ThreatBook.io	2026-04-24 22:17:36 (2 months ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/111.70.51.23	Brute-Force
🇩🇪 mnpx	2026-04-24 20:42:40 (2 months ago)	SMTP brute forcing (2× over 2h:22m); first seen here 2026-02-21T21:27Z	Brute-Force

Showing 1 to 15 of 915 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.56.109.15

🇺🇸 161.35.63.214

🇻🇳 123.31.20.162

🇺🇸 16.58.56.214

🇮🇳 4.240.96.30

🇧🇷 191.186.20.29

🇷🇴 92.118.39.71

🇨🇳 49.116.25.62

🇸🇬 45.78.198.199

🇯🇵 8.216.4.64

🇺🇸 216.25.89.146

🇺🇸 142.251.150.119

🇩🇪 142.251.13.132

🇨🇳 112.235.40.36

🇫🇷 92.103.134.183

🇫🇮 85.192.31.14

🇮🇹 83.224.138.61

🇬🇭 80.87.83.229

🇬🇧 195.96.139.232

🇳🇱 194.120.230.72