JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

111.91.23.48

Activity Trending Down

Abuse Confidence Score

84% Critical

56 reports

44 reporters · latest 1 week ago

ISP: Huawei-Cloud-SG
Usage Type: Data Center/Web Hosting/Transit
ASN: AS136907
Domain Name: huawei.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

56 from 44 distinct reporters

First reported

November 12th 2025

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇨🇿 Czechia 3 🇺🇸 United States of America 3 🇨🇦 Canada 2

Most common categories SSH 16 Brute-Force 15 Port Scan 2 Web App Attack 1 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-11-04 14:38:10 UTC · (1 week ago)	ICS Labs threat intelligence (ICS Feeds): Port Scan, Brute-Force. Last observed 2026-11-04 UTC.	Port Scan Brute-Force
🇨🇦 SSH-Admin	2026-11-04 04:00:16 UTC · (1 week ago)	Probing for Exploits on ns200	Exploited Host Web App Attack
🇺🇸 yzfdude1	2026-11-04 00:20:08 UTC · (1 week ago)	2026-11-03T17:52:37.076446-06:00 kenworth sshd[126953]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 user=azureuser 2026-11-03T17:52:39.018282-06:00 kenworth sshd[126953]: Failed password for inv ... show more 2026-11-03T17:52:37.076446-06:00 kenworth sshd[126953]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 user=azureuser 2026-11-03T17:52:39.018282-06:00 kenworth sshd[126953]: Failed password for invalid user azureuser from 111.91.23.48 port 7882 ssh2 2026-11-03T18:20:06.948556-06:00 kenworth sshd[127454]: Invalid user build from 111.91.23.48 port 53256 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-11-04 00:16:52 UTC · (1 week ago)	SSH bruteforce [BY]	SSH
🇨🇿 gszasz	2026-11-03 23:59:39 UTC · (1 week ago)	2026-11-04T00:59:36.912075 phoenix sshd-session[778453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 2026-11-04T00:59:38.708553 phoenix sshd-session[778453]: Failed password for invalid user az ... show more 2026-11-04T00:59:36.912075 phoenix sshd-session[778453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 2026-11-04T00:59:38.708553 phoenix sshd-session[778453]: Failed password for invalid user azureuser from 111.91.23.48 port 40042 ssh2 2026-11-04T00:59:39.160974 phoenix sshd-session[778453]: Disconnected from invalid user azureuser 111.91.23.48 port 40042 [preauth] ... show less	Brute-Force SSH
🇺🇸 NeverBehave	2026-11-03 23:09:45 UTC · (1 week ago)	Fail2ban Triggered	Brute-Force SSH
🇺🇸 kosada.com	2026-11-03 23:01:14 UTC · (1 week ago)	Repeated failed login attempts, for example: Disconnected from invalid user ansible 111.91.23.48 port 50312 [preauth] (SSH port 22)	Brute-Force SSH
🇭🇺 Silu	2026-11-03 22:54:50 UTC · (1 week ago)	ssh attack	Brute-Force SSH
🇨🇿 G3NETIC	2026-11-03 22:51:50 UTC · (1 week ago)	2026-11-03T23:48:21.948696+01:00 behemoth sshd[3938827]: Failed password for root from 111.91.23.48 port 52970 ssh2 2026-11-03T23:51:48.412276+01:00 behemoth sshd[3952866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... show more 2026-11-03T23:48:21.948696+01:00 behemoth sshd[3938827]: Failed password for root from 111.91.23.48 port 52970 ssh2 2026-11-03T23:51:48.412276+01:00 behemoth sshd[3952866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 user=root 2026-11-03T23:51:50.410774+01:00 behemoth sshd[3952866]: Failed password for root from 111.91.23.48 port 32194 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-03 22:51:12 UTC · (1 week ago)	(sshd) Failed SSH login from 111.91.23.48 (SG/Singapore/ecs-111-91-23-48.compute.hwclouds-dns.com)	Brute-Force SSH
🇬🇧 CRSSkynet	2026-11-03 21:37:11 UTC · (1 week ago)	fail2ban sshd	Brute-Force SSH
🇧🇬 MazenHost	2026-11-03 20:32:44 UTC · (1 week ago)	Nov 3 22:26:04 Admin sshd[1532958]: Failed password for root from 111.91.23.48 port 25644 ssh2 Nov 3 22:29:31 Admin sshd[1532970]: Invalid user odoo from 111.91.23.48 port 29988 Nov 3 22:29:31 Admin sshd[1532970]: pam_unix(sshd:auth): authenticati ... show more Nov 3 22:26:04 Admin sshd[1532958]: Failed password for root from 111.91.23.48 port 25644 ssh2 Nov 3 22:29:31 Admin sshd[1532970]: Invalid user odoo from 111.91.23.48 port 29988 Nov 3 22:29:31 Admin sshd[1532970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 Nov 3 22:29:33 Admin sshd[1532970]: Failed password for invalid user odoo from 111.91.23.48 port 29988 ssh2 Nov 3 22:32:42 Admin sshd[1532988]: Invalid user kevin from 111.91.23.48 port 64120 Nov 3 22:32:42 Admin sshd[1532988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 Nov 3 22:32:44 Admin sshd[1532988]: Failed password for invalid user kevin from 111.91.23.48 port 64120 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-03 20:28:54 UTC · (1 week ago)	Nov 3 21:25:22 prisma sshd[4472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 user=root Nov 3 21:25:24 prisma sshd[4472]: Failed password for root from 111.91.23.48 port 47580 ssh2 Nov 3 21 ... show more Nov 3 21:25:22 prisma sshd[4472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 user=root Nov 3 21:25:24 prisma sshd[4472]: Failed password for root from 111.91.23.48 port 47580 ssh2 Nov 3 21:28:51 prisma sshd[7052]: Invalid user odoo from 111.91.23.48 port 51754 Nov 3 21:28:51 prisma sshd[7052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 Nov 3 21:28:52 prisma sshd[7052]: Failed password for invalid user odoo from 111.91.23.48 port 51754 ssh2 ... show less	Brute-Force SSH
🇫🇷 Max la Menace	2026-11-03 20:03:19 UTC · (1 week ago)	2026-11-03T21:59:44.961991+02:00 ns3124905 sshd-session[1384867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 user=root 2026-11-03T21:59:47.456376+02:00 ns3124905 sshd-session[1384867]: Failed ... show more 2026-11-03T21:59:44.961991+02:00 ns3124905 sshd-session[1384867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.23.48 user=root 2026-11-03T21:59:47.456376+02:00 ns3124905 sshd-session[1384867]: Failed password for root from 111.91.23.48 port 27468 ssh2 2026-11-03T22:03:18.497647+02:00 ns3124905 sshd-session[1385999]: Invalid user gunicorn from 111.91.23.48 port 14920 ... show less	Brute-Force SSH
🇨🇿 lp	2026-11-03 20:03:16 UTC · (1 week ago)	SSH Brute force: 1 attempts were recorded from 111.91.23.48 2026-11-03T19:50:09+0100 Connection closed by authenticating user root 111.91.23.48 [preauth]	Brute-Force SSH

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.223.235.50

🇩🇪 172.71.148.147

🇭🇰 159.138.39.51

🇨🇳 124.74.97.18

🇻🇳 117.2.125.84

🇸🇬 103.7.11.224

🇭🇰 101.36.118.148

🇰🇷 210.206.95.162

🇩🇪 172.71.148.146

🇰🇷 168.126.36.209

🇭🇰 119.28.24.232

🇨🇳 115.190.248.214

🇺🇸 50.6.193.167

🇺🇸 40.119.41.254

🇬🇧 31.14.254.108

🇳🇱 45.148.10.157

🇧🇪 35.210.219.60

🇹🇷 185.226.94.203

🇸🇪 171.25.193.81

🇺🇸 170.168.98.164