AS10103 Hong Kong Broadband Network Limited

Abuse reported against IP addresses announced by autonomous system 10103. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 8 IP addresses in AS10103 Hong Kong Broadband Network Limited were reported for abuse, in 28 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Web Spam, Command & Control and Web App Attack. Most of them are in Hong Kong.

8addresses reported, 30 days

0on the default blocklist (75+)

28reports against them

1 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇭🇰210.209.70.188	61	8	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	1 h
🇭🇰210.209.125.123	57	5	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇭🇰123.1.194.216	47	5	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇭🇰61.244.37.196	39	3	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	10 h
🇭🇰123.1.147.204	32	2	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	10 h
🇭🇰210.245.152.200	27	1	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	1 h
🇭🇰61.238.145.84	27	3	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	2 d
🇭🇰113.10.158.122	17	1	Web Spam Port Scan Bad Web Bot	20 h

What they were reported for

Where they are

🇭🇰 Hong Kong8

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 48 minutes ago.