JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

111.91.16.47

Neutral Activity

Abuse Confidence Score

0% Low Risk

139 reports

90 reporters · latest 8 months ago

ISP: Huawei-Cloud-SG
Usage Type: Data Center/Web Hosting/Transit
ASN: AS136907
Domain Name: huawei.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

111.91.16.47 has been reported 139 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

139 from 90 distinct reporters

First reported

December 17th 2025

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iamimmanuelraj	2026-03-12 11:39:29 UTC · (8 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1767074976	Brute-Force SSH
🇩🇪 iamimmanuelraj	2026-03-11 02:11:12 UTC · (8 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1767074976	Brute-Force SSH
🇩🇪 iamimmanuelraj	2026-02-22 01:04:32 UTC · (8 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1767074976	Brute-Force SSH
🇩🇪 iamimmanuelraj	2026-02-18 02:06:39 UTC · (8 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1767074976	Brute-Force SSH
🇩🇪 iamimmanuelraj	2026-02-07 02:05:08 UTC · (9 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1767074976	Brute-Force SSH
🇩🇪 iamimmanuelraj	2026-02-04 02:05:39 UTC · (9 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1767074976	Brute-Force SSH
🇩🇪 iamimmanuelraj	2026-01-29 02:04:54 UTC · (9 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1767074976	Brute-Force SSH
🇩🇪 iamimmanuelraj	2026-01-13 02:03:54 UTC · (10 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1767074976	Brute-Force SSH
🇫🇷 SpaceHost-Server	2025-12-31 23:27:48 UTC · (10 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2025-12-30 23:27:27 UTC · (10 months ago)		Brute-Force Web App Attack
🇩🇪 ipcop.net	2025-12-30 09:36:33 UTC · (10 months ago)	Dec 30 10:34:10 phonebook-lb01.phonebook.srvfarm.net sshd[226586]: Disconnected from authenticating user root 111.91.16.47 port 50748 [preauth] Dec 30 10:35:13 phonebook-lb01.phonebook.srvfarm.net sshd[226795]: Invalid user ftpuser from 111.91.16.47 ... show more Dec 30 10:34:10 phonebook-lb01.phonebook.srvfarm.net sshd[226586]: Disconnected from authenticating user root 111.91.16.47 port 50748 [preauth] Dec 30 10:35:13 phonebook-lb01.phonebook.srvfarm.net sshd[226795]: Invalid user ftpuser from 111.91.16.47 port 51222 Dec 30 10:35:13 phonebook-lb01.phonebook.srvfarm.net sshd[226795]: Disconnected from invalid user ftpuser 111.91.16.47 port 51222 [preauth] Dec 30 10:35:53 phonebook-lb01.phonebook.srvfarm.net sshd[226882]: Disconnected from authenticating user root 111.91.16.47 port 43008 [preauth] Dec 30 10:36:32 phonebook-lb01.phonebook.srvfarm.net sshd[227059]: Invalid user testftp from 111.91.16.47 port 43586 show less	Brute-Force
🇺🇸 bigscoots.com	2025-12-30 09:35:52 UTC · (10 months ago)	111.91.16.47 (SG/Singapore/ecs-111-91-16-47.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 30 03:34:14 17545 sshd[18921]: pam_unix(sshd:auth): a ... show more 111.91.16.47 (SG/Singapore/ecs-111-91-16-47.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 30 03:34:14 17545 sshd[18921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.191.8.27 user=root Dec 30 03:34:17 17545 sshd[18921]: Failed password for root from 176.191.8.27 port 56656 ssh2 Dec 30 03:32:36 17545 sshd[18672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.16.47 user=root Dec 30 03:32:38 17545 sshd[18672]: Failed password for root from 111.91.16.47 port 46336 ssh2 Dec 30 03:35:41 17545 sshd[19069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.191.8.27 user=root IP Addresses Blocked: 176.191.8.27 (FR/France/-) show less	Brute-Force SSH
🇨🇿 gszasz	2025-12-30 09:34:47 UTC · (10 months ago)	2025-12-30T10:29:56.008056 phoenix sshd[2222402]: Failed password for root from 111.91.16.47 port 35906 ssh2 2025-12-30T10:29:57.569381 phoenix sshd[2222402]: Disconnected from authenticating user root 111.91.16.47 port 35906 [preauth] 2025-12-30T10: ... show more 2025-12-30T10:29:56.008056 phoenix sshd[2222402]: Failed password for root from 111.91.16.47 port 35906 ssh2 2025-12-30T10:29:57.569381 phoenix sshd[2222402]: Disconnected from authenticating user root 111.91.16.47 port 35906 [preauth] 2025-12-30T10:34:46.915572 phoenix sshd[2224385]: Invalid user ftpuser from 111.91.16.47 port 41280 ... show less	Brute-Force SSH
🇬🇧 sc user	2025-12-30 09:08:28 UTC · (10 months ago)	Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-30 09:02:33 UTC · (10 months ago)	111.91.16.47 (SG/Singapore/ecs-111-91-16-47.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 30 03:02:14 14772 sshd[15368]: pam_unix(sshd:auth): a ... show more 111.91.16.47 (SG/Singapore/ecs-111-91-16-47.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 30 03:02:14 14772 sshd[15368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.126.11.137 user=root Dec 30 03:01:12 14772 sshd[15266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.16.47 user=root Dec 30 03:01:14 14772 sshd[15266]: Failed password for root from 111.91.16.47 port 56494 ssh2 Dec 30 02:40:20 14772 sshd[12566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.135.8.252 user=root Dec 30 02:40:22 14772 sshd[12566]: Failed password for root from 74.135.8.252 port 41716 ssh2 IP Addresses Blocked: 101.126.11.137 (CN/China/-) show less	Brute-Force SSH

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2604:a880:4:1d0:0:3:d93f:4000

🇳🇱 193.47.62.69

🇮🇳 168.220.253.106

🇺🇸 157.22.17.171

🇲🇦 154.146.240.123

🇭🇰 119.28.24.232

🇳🇱 77.91.71.90

🇺🇸 20.171.10.118

🇷🇴 2.57.122.150

🇨🇳 202.112.237.201

🇧🇩 163.61.156.21

🇺🇸 45.145.130.122

🇺🇸 2a03:2880:f302:5:face:b00c:0:79f4

🇵🇱 2400:cb00:923:1000:3339:1a84:b31b:c64c

🇩🇪 193.104.126.250

🇺🇸 192.177.138.183

🇸🇪 171.25.158.87

🇺🇸 156.232.13.218

🇳🇵 113.199.222.2

🇺🇸 73.184.233.52