JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.57.248.10

103.57.248.10 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 100%: ?

100%

ISP	EDIS Infrastructure in Hong Kong
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Hostname(s)	10.248.57.103.static.edisglobal.com
Domain Name	edis.at
Country	🇭🇰 Hong Kong
City	Kwai Chung, Kwai Tsing District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.57.248.10

Whois 103.57.248.10

IP Abuse Reports for 103.57.248.10:

This IP address has been reported a total of 148 times from 77 distinct sources. 103.57.248.10 was first reported on April 29th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-27 11:36:07 (1 week ago)	SSH login attempts with user root	Brute-Force
🇺🇸 ShadowWhisperer	2026-05-27 07:55:34 (1 week ago)	SSH fingerprint.	Port Scan
🇺🇸 Floofie	2026-05-27 07:39:37 (1 week ago)	2026-05-26T23:51:19.195734-04:00 site sshd-session[12054]: User root from 103.57.248.10 not allowed ... show more 2026-05-26T23:51:19.195734-04:00 site sshd-session[12054]: User root from 103.57.248.10 not allowed because not listed in AllowUsers 2026-05-26T23:51:19.846449-04:00 site sshd-session[12054]: error: maximum authentication attempts exceeded for invalid user root from 103.57.248.10 port 59408 ssh2 [preauth] 2026-05-27T03:39:36.865177-04:00 site sshd-session[12912]: User root from 103.57.248.10 not allowed because not listed in AllowUsers ... show less	SSH
🇩🇪 dispaisyenterprises	2026-05-27 06:44:50 (1 week ago)	Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: root:undefined ... show more Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: root:undefined • Number of login attempts: 1 • Client: SSH-2.0-libssh2_1.11.0 • SSH key fingerprints: e5:57:cd:5e:3d:5a:1d:c9:86:75:26:99:18:c5:30:7f Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇮🇹 LTM	2026-05-27 06:20:02 (1 week ago)	SSH - Attempt to login using invalid or illegal credential	Port Scan Brute-Force SSH
🇺🇸 blizzard	2026-05-27 05:16:58 (1 week ago)	May 27 05:16:57 uptime-kuma sshd[3184510]: Disconnected from authenticating user root 103.57.248.10 ... show more May 27 05:16:57 uptime-kuma sshd[3184510]: Disconnected from authenticating user root 103.57.248.10 port 51602 [preauth] ... show less	Brute-Force SSH
🇨🇿 lp	2026-05-27 04:48:51 (1 week ago)	SSH Brute force: 2 attempts were recorded from 103.57.248.10 2026-05-27T05:35:31+02:00 Disconnected ... show more SSH Brute force: 2 attempts were recorded from 103.57.248.10 2026-05-27T05:35:31+02:00 Disconnected from authenticating user root 103.57.248.10 port 58508 [preauth] 2026-05-27T05:44:41+02:00 Disconnected from authenticating user root 103.57.248.10 port 58242 [preauth] show less	Brute-Force SSH
🇨🇳 pengpeng	2026-05-27 04:43:18 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 250 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇦🇹 Vey Dron	2026-05-22 03:34:44 (1 week ago)	SSH brute force attack on port <port> (Fail2ban on mmo-at)	Brute-Force SSH
🇩🇪 vps01.feasoftware.it	2026-05-15 14:08:36 (2 weeks ago)	type=USER_AUTH msg=audit(1778854114.705:26468161): pid=3408010 uid=0 auid=4294967295 ses=4294967295 ... show more type=USER_AUTH msg=audit(1778854114.705:26468161): pid=3408010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.57.248.10 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1778854114.896:26468162): pid=3408010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.57.248.10 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1778854115.087:26468163): pid=3408010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.57.248.10 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1778854115.278:26468164): pid=3408010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sb ... show less	Brute-Force SSH
🇨🇦 dpinse	2026-05-15 09:48:09 (2 weeks ago)	Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH • Credential used: root:undefi ... show more Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH • Credential used: root:undefined • Number of login attempts: 1 • Client: SSH-2.0-libssh2_1.11.0 • SSH key fingerprints: 06:b1:f8:77:df:b6:ae:08:4a:80:0d:fb:48:9c:98:09 show less	SSH
Anonymous	2026-05-15 07:48:53 (2 weeks ago)	SSH login attempts with user root	Brute-Force
🇺🇸 rjdefrancisco	2026-05-15 07:05:25 (2 weeks ago)	Unwanted traffic detected by honeypot on May 14, 2026: brute force and hacking attacks (5 over ssh).	Port Scan Brute-Force SSH
🇨🇦 bdonvr	2026-05-15 02:01:12 (2 weeks ago)	2026-05-15T02:01:11.382391+00:00 thelemmy.club sshd-session[1006379]: Received disconnect from 103.5 ... show more 2026-05-15T02:01:11.382391+00:00 thelemmy.club sshd-session[1006379]: Received disconnect from 103.57.248.10 port 56706:11: disconnected by user [preauth] 2026-05-15T02:01:11.382427+00:00 thelemmy.club sshd-session[1006379]: Disconnected from invalid user root 103.57.248.10 port 56706 [preauth] ... show less	Brute-Force SSH
🇩🇪 _ArminS_	2026-05-15 00:58:06 (2 weeks ago)	Bad SSHAUTH 2026.05.15 02:58:06 blocked until 2026.05.18 02:58:06 by HoneyPot US-EAST_ashburn01	SSH Brute-Force Hacking

Showing 31 to 45 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 120.138.6.3

🇨🇳 49.232.26.51

🇵🇱 109.243.148.82

🇮🇩 103.157.26.23

🇭🇰 65.181.88.245

🇯🇵 43.167.198.92

🇸🇬 43.160.250.64

🇳🇱 31.14.32.7

🇨🇳 14.210.130.55

🇦🇪 2.49.144.102

🇸🇬 194.5.82.56

🇦🇷 190.12.114.103

🇧🇬 185.31.121.107

🇺🇸 162.216.149.53

🇵🇭 143.44.165.193

🇨🇳 122.96.28.145

🇪🇸 87.235.201.62

🇩🇪 69.5.169.243

🇩🇪 69.5.169.238

🇩🇪 69.5.169.227