JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.80.27.103

Neutral Activity

Abuse Confidence Score

0% Low Risk

59 reports

36 reporters · latest 7 months ago

ISP: HK Kwaifong Group Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS142403
Domain Name: hkkfgroup.com
Country: 🇭🇰 Hong Kong
City: Tung Chung, Islands

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.80.27.103 has been reported 59 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

59 from 36 distinct reporters

First reported

September 22nd 2025

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-04-08 23:08:04 UTC · (7 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01,ice02,wa02]	Brute-Force SSH
🇺🇸 sh97	2025-09-28 16:03:08 UTC · (1 year ago)	US01-CB-WA: SSH Brute Force from 103.80.27.103 at 2025-09-28 21:33:07 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-24 00:08:57 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-23 20:08:57 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-09-23 06:37:16 UTC · (1 year ago)	This IP address carried out 656 port scanning attempts on 22-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Port Scan SSH
🇮🇳 Parth Maniar	2025-09-23 01:05:24 UTC · (1 year ago)	This IP address carried out 93 SSH credential attack (attempts) on 22-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-22 15:40:40 UTC · (1 year ago)	(sshd) Failed SSH login from 103.80.27.103 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 22 10:35:47 16799 sshd[30041]: Invalid user hrm from 103.80.27.103 port 34738 Sep 22 10:35:49 16799 sshd[30041]: ... show more (sshd) Failed SSH login from 103.80.27.103 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 22 10:35:47 16799 sshd[30041]: Invalid user hrm from 103.80.27.103 port 34738 Sep 22 10:35:49 16799 sshd[30041]: Failed password for invalid user hrm from 103.80.27.103 port 34738 ssh2 Sep 22 10:39:23 16799 sshd[32252]: Invalid user igor from 103.80.27.103 port 57256 Sep 22 10:39:25 16799 sshd[32252]: Failed password for invalid user igor from 103.80.27.103 port 57256 ssh2 Sep 22 10:40:34 16799 sshd[407]: Invalid user tuan from 103.80.27.103 port 54046 show less	Brute-Force SSH
🇫🇮 TrafficAnalyser	2025-09-22 15:24:41 UTC · (1 year ago)	Invalid user gituser from 103.80.27.103 port 38984	Brute-Force SSH
🇫🇷 makhal.fr	2025-09-22 14:57:30 UTC · (1 year ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-22 14:54:37 UTC · (1 year ago)	103.80.27.103 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 22 09:54:17 17961 sshd[1043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more 103.80.27.103 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 22 09:54:17 17961 sshd[1043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.27.103 user=root Sep 22 09:17:42 17961 sshd[29934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.54.232 user=root Sep 22 09:17:43 17961 sshd[29934]: Failed password for root from 161.132.54.232 port 34344 ssh2 Sep 22 09:18:53 17961 sshd[30050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.54.232 user=root Sep 22 09:18:16 17961 sshd[30009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.23.196.33 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 g33k.biz	2025-09-22 14:06:08 UTC · (1 year ago)	Sep 22 16:03:01 v22019038103785759 sshd\[10138\]: Invalid user gituser from 103.80.27.103 port 52570 Sep 22 16:03:01 v22019038103785759 sshd\[10138\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.2 ... show more Sep 22 16:03:01 v22019038103785759 sshd\[10138\]: Invalid user gituser from 103.80.27.103 port 52570 Sep 22 16:03:01 v22019038103785759 sshd\[10138\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.27.103 Sep 22 16:03:04 v22019038103785759 sshd\[10138\]: Failed password for invalid user gituser from 103.80.27.103 port 52570 ssh2 Sep 22 16:06:05 v22019038103785759 sshd\[10483\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.27.103 user=root Sep 22 16:06:07 v22019038103785759 sshd\[10483\]: Failed password for root from 103.80.27.103 port 41922 ssh2 ... show less	Brute-Force SSH
🇩🇪 NetWatch	2025-09-22 14:03:59 UTC · (1 year ago)	The IP 103.80.27.103 tried multiple SSH logins	Brute-Force SSH
🇬🇧 NarcTix	2025-09-22 14:02:06 UTC · (1 year ago)	2025-09-22T14:02:05.643321+00:00 sshd[73549]: Invalid user gituser from 103.80.27.103 port 40538 ...	Brute-Force SSH
🇩🇪 Tha_14	2025-09-22 14:01:22 UTC · (1 year ago)	Sep 22 16:01:20 hosting sshd[499585]: Invalid user gituser from 103.80.27.103 port 36772 Sep 22 16:01:20 hosting sshd[499585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.27.103 Sep 22 16:01:22 host ... show more Sep 22 16:01:20 hosting sshd[499585]: Invalid user gituser from 103.80.27.103 port 36772 Sep 22 16:01:20 hosting sshd[499585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.27.103 Sep 22 16:01:22 hosting sshd[499585]: Failed password for invalid user gituser from 103.80.27.103 port 36772 ssh2 show less	Brute-Force SSH
🇺🇸 paradoxnetworks	2025-09-22 13:26:06 UTC · (1 year ago)	2025-09-22T13:21:27.944253+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1658464]: Invalid user david from 103.80.27.103 port 55120 2025-09-22T13:24:55.857750+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1659796]: Invalid user upgrade from 103.80.27.103 port ... show more 2025-09-22T13:21:27.944253+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1658464]: Invalid user david from 103.80.27.103 port 55120 2025-09-22T13:24:55.857750+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1659796]: Invalid user upgrade from 103.80.27.103 port 59066 2025-09-22T13:26:06.083584+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1660356]: Invalid user novinhost from 103.80.27.103 port 55446 ... show less	Brute-Force SSH

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.94

🇧🇷 187.0.235.235

🇺🇸 162.216.149.107

🇺🇸 136.111.70.176

🇳🇱 134.209.95.210

🇺🇸 34.68.180.14

🇺🇸 195.184.76.4

🇫🇷 156.67.31.88

🇺🇸 136.108.208.72

🇺🇸 54.185.182.0

🇺🇸 35.196.16.146

🇺🇸 35.192.246.32

🇺🇸 34.162.235.115

🇸🇬 34.126.130.51

🇺🇸 34.67.208.88

🇺🇸 20.169.84.197

🇺🇸 20.83.178.237

🇹🇭 203.156.108.110

🇻🇪 190.205.122.130

🇨🇴 181.139.255.102