JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.27.200.39

103.27.200.39 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 0%: ?

ISP	Bangmod Enterprise Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS58955
Hostname(s)	103-27-200-39.static.bangmod-idc.com
Domain Name	bangmod.co.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.27.200.39

Whois 103.27.200.39

IP Abuse Reports for 103.27.200.39:

This IP address has been reported a total of 116 times from 62 distinct sources. 103.27.200.39 was first reported on February 28th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-06 06:00:00 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=88, sources=3)	Hacking Brute-Force SSH
🇮🇱 spd.co.il	2026-03-23 00:02:18 (2 months ago)	Port scan detected on multiple ports	Port Scan
🇩🇪 iNetWorker	2026-03-21 07:10:42 (2 months ago)	firewall-block, port(s): 5922/tcp, 5924/tcp, 5929/tcp, 5932/tcp, 5936/tcp, 5939/tcp, 5941/tcp, 5947/ ... show more firewall-block, port(s): 5922/tcp, 5924/tcp, 5929/tcp, 5932/tcp, 5936/tcp, 5939/tcp, 5941/tcp, 5947/tcp, 5954/tcp, 5956/tcp, 5964/tcp, 5967/tcp, 5979/tcp, 5981/tcp, 5984/tcp, 5989/tcp, 5999/tcp show less	Port Scan
🇺🇸 routerjockey	2026-03-21 07:06:47 (2 months ago)	[sensor1] Observed 16 TCP SYN probes in the past 6 hours [Top ports 5905/tcp 5906/tcp 5911/tcp 5913/ ... show more [sensor1] Observed 16 TCP SYN probes in the past 6 hours [Top ports 5905/tcp 5906/tcp 5911/tcp 5913/tcp 5918/tcp 5931/tcp 5944/tcp 5946/tcp 5950/tcp 5951/tcp 5954/tcp 5956/tcp 5982/tcp 5989/tcp 5990/tcp 5997/tcp] show less	Port Scan
🇩🇪 cloudmax	2026-03-21 07:01:51 (2 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇫🇷 Tanados	2026-03-21 06:17:58 (2 months ago)	Blocked by UFW [5900/tcp] Source port: 61234 TTL: 236 Packet length: 44 TOS: 0x00 This report was g ... show more Blocked by UFW [5900/tcp] Source port: 61234 TTL: 236 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 rtbh.com.tr	2026-03-21 04:12:10 (2 months ago)	list.rtbh.com.tr report: tcp/5900, tcp/5902, tcp/5903, tcp/6000	Brute-Force
🇹🇷 Threat.live	2026-03-21 00:55:14 (2 months ago)	Suspicious activity, tcp/5957, tcp/5920, tcp/5958	Port Scan
🇺🇸 baltic-lab.com	2026-03-20 23:13:11 (2 months ago)	Firewall Detection, US2, Either a port scan or continued brute-force attack by a previously blocked ... show more Firewall Detection, US2, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
🇺🇸 mutebot.net	2026-03-20 23:10:45 (2 months ago)	SRC=103.27.200.39, PROTO=TCP, SPT=61234, DPT=5924 SRC=103.27.200.39, PROTO=TCP, SPT=61234, DPT=5935 ... show more SRC=103.27.200.39, PROTO=TCP, SPT=61234, DPT=5924 SRC=103.27.200.39, PROTO=TCP, SPT=61234, DPT=5935 SRC=103.27.200.39, PROTO=TCP, SPT=61234, DPT=5995 SRC=103.27.200.39, PROTO=TCP, SPT=61234, DPT=5936 SRC=103.27.200.39, PROTO=TCP, SPT=61234, DPT=5977 show less	Port Scan
🇹🇷 Threat.live	2026-03-20 21:45:38 (2 months ago)	Suspicious activity, tcp/5965, tcp/5983, tcp/5902	Port Scan
🇬🇧 2048	2026-03-20 19:03:48 (2 months ago)	2026-03-20T20:03:34.030444+01:00 machodeer kernel: [2290233.152302] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-03-20T20:03:34.030444+01:00 machodeer kernel: [2290233.152302] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=103.27.200.39 DST=REDACTED LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=35625 PROTO=TCP SPT=61234 DPT=5908 WINDOW=1025 RES=0x00 SYN URGP=0 2026-03-20T20:03:41.720069+01:00 machodeer kernel: [2290240.842549] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=103.27.200.39 DST=REDACTED LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=57329 PROTO=TCP SPT=61234 DPT=5957 WINDOW=1025 RES=0x00 SYN URGP=0 2026-03-20T20:03:47.423593+01:00 machodeer kernel: [2290246.543753] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=103.27.200.39 DST=REDACTED LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=5114 PROTO=TCP SPT=61234 DPT=5980 WINDOW=1025 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-03-20 16:30:15 (2 months ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 ISPLtd	2026-03-20 15:33:21 (2 months ago)	Mar 20 12:32:06 103.27.200.39 TCP SPT=61234 DPT=5999 SYN Mar 20 12:32:35 103.27.200.39 TCP SPT=61234 ... show more Mar 20 12:32:06 103.27.200.39 TCP SPT=61234 DPT=5999 SYN Mar 20 12:32:35 103.27.200.39 TCP SPT=61234 DPT=5941 SYN Mar 20 12:33:20 103.27.200.39 TCP SPT=61234 DPT=5998 ... show less	Port Scan
🇫🇷 Little Iguana	2026-03-20 15:31:21 (2 months ago)	trying to access non-authorized port	Port Scan

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.100

🇫🇷 185.234.69.227

🇲🇦 102.53.6.220

🇨🇦 85.217.149.67

🇭🇰 43.242.203.160

🇧🇷 205.210.31.182

🇺🇸 195.184.76.219

🇺🇸 195.184.76.143

🇯🇵 183.181.88.121

🇺🇸 172.170.253.165

🇸🇬 68.183.178.130

🇺🇸 23.95.67.200

🇬🇧 2a06:4880:8000::ad

🇳🇱 183.81.169.76

🇸🇬 172.217.44.222

🇭🇰 168.76.131.178

🇧🇷 167.126.6.183

🇩🇪 57.144.248.1

🇯🇵 20.89.43.232

🇷🇴 2.57.121.25