JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.11.218.84

103.11.218.84 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 72%: ?

72%

ISP	M.A.T Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS132080
Domain Name	monorom.com.kh
Country	🇰🇭 Cambodia
City	Paoy Paet, Banteay Meanchey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.11.218.84

Whois 103.11.218.84

IP Abuse Reports for 103.11.218.84:

This IP address has been reported a total of 137 times from 42 distinct sources. 103.11.218.84 was first reported on January 7th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Saec	2026-09-02 22:44:41 (1 hour ago)	Jarvis auto-ban: Honeypot /administrator/ via weblate.saec.me [KH] ASN:M.A.T Co., Ltd.	Port Scan Web App Attack
🇮🇩 RasyiidWho	2026-08-31 03:43:35 (2 days ago)	ip112.20 . 103.11.218.84 - - [31/Aug/2026:10:43:35 +0700] "POST /wp-admin/admin-ajax.php HTTP/1.1" 4 ... show more ip112.20 . 103.11.218.84 - - [31/Aug/2026:10:43:35 +0700] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" ... show less	DDoS Attack Brute-Force Port Scan Bad Web Bot Web App Attack SSH
🇳🇱 JCB	2026-08-30 21:10:00 (3 days ago)	103.11.218.84 - - [30/Aug/2026:13:41:39 +0300] "GET /media/com_jce/editor/js/editor.min.js HTTP/1.1" ... show more 103.11.218.84 - - [30/Aug/2026:13:41:39 +0300] "GET /media/com_jce/editor/js/editor.min.js HTTP/1.1" 404 511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.11.218.84 - - [30/Aug/2026:13:41:39 +0300] "GET /media/com_jce/js/editor.min.js HTTP/1.1" 404 511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
Anonymous	2026-08-24 02:50:14 (1 week ago)	\| [Dangerous/Cambodia] Aggressive IP 103.11.218.84 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Cambodia] Aggressive IP 103.11.218.84 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇩🇪 Trueforce Threat Report	2026-08-23 11:06:49 (1 week ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇫🇷 largo-it.net	2026-08-21 21:41:44 (1 week ago)	Aug 21 23:41:39 vps-9f3cdc33 haproxy[3079141]: 103.11.218.84:49887 [21/Aug/2026:23:41:39.141] www_fr ... show more Aug 21 23:41:39 vps-9f3cdc33 haproxy[3079141]: 103.11.218.84:49887 [21/Aug/2026:23:41:39.141] www_frontend~ sav_largo_cluster/sav_https 0/0/11/117/128 404 7536 - - ---- 54/6/0/0/0 0/0 "GET /administrator/index.php HTTP/1.1" Aug 21 23:41:40 vps-9f3cdc33 haproxy[3079141]: 103.11.218.84:49887 [21/Aug/2026:23:41:40.088] www_frontend~ sav_largo_cluster/sav_https 0/0/11/127/138 404 7536 - - ---- 54/6/0/0/0 0/0 "GET /media/jui/ HTTP/1.1" Aug 21 23:41:40 vps-9f3cdc33 haproxy[3079141]: 103.11.218.84:49887 [21/Aug/2026:23:41:40.652] www_frontend~ sav_largo_cluster/sav_https 0/0/11/115/126 404 7536 - - ---- 53/5/0/0/0 0/0 "GET /media/system/ HTTP/1.1" Aug 21 23:41:41 vps-9f3cdc33 haproxy[3079141]: 103.11.218.84:49887 [21/Aug/2026:23:41:41.194] www_frontend~ sav_largo_cluster/sav_https 0/0/10/88/98 404 7536 - - ---- 53/5/0/0/0 0/0 "GET /administrator/ HTTP/1.1" Aug 21 23:41:41 vps-9f3cdc33 haproxy[3079141]: 103.11.218.84:49887 [21/Aug/2026:23:41:41.702] www_frontend~ sav_largo_cluster/sav_https 0/ ... show less	Hacking Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-08-20 18:37:34 (1 week ago)	[redacted] 103.11.218.84 - - [20/Aug/2026:19:37:32 +0100] "POST /wp-admin/[redacted] HTTP/1.1" 405 6 ... show more [redacted] 103.11.218.84 - - [20/Aug/2026:19:37:32 +0100] "POST /wp-admin/[redacted] HTTP/1.1" 405 6392 0/266663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" [redacted] 103.11.218.84 - - [20/Aug/2026:19:37:33 +0100] "POST /wp-admin/[redacted] HTTP/1.1" 301 620 0/452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" show less	Bad Web Bot Web App Attack
🇮🇪 Coolnagour	2026-08-18 13:13:29 (2 weeks ago)	http-probing: /wp-admin/admin-ajax.php	Web App Attack
🇩🇪 Séfora Srl	2026-08-18 05:09:29 (2 weeks ago)	crowdsecurity/http-admin-interface-probing detected by CrowdSec	Web App Attack
🇮🇩 bps-statistics	2026-08-17 17:37:43 (2 weeks ago)	WP Admin Scan Activities: "2026-08-18T00:37:43.030+07:00" "/wp-admin/admin-ajax.php" "103.11.218.84" ... show more WP Admin Scan Activities: "2026-08-18T00:37:43.030+07:00" "/wp-admin/admin-ajax.php" "103.11.218.84" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" show less	Web App Attack
Anonymous	2026-08-17 07:48:37 (2 weeks ago)	"POST /wp-admin/admin-ajax.php HTTP/1.1"	Hacking Web App Attack
🇮🇩 bps-statistics	2026-08-17 07:43:26 (2 weeks ago)	WP Admin Scan Activities: "2026-08-17T14:43:26.587+07:00" "/wp-admin/admin-ajax.php" "103.11.218.84" ... show more WP Admin Scan Activities: "2026-08-17T14:43:26.587+07:00" "/wp-admin/admin-ajax.php" "103.11.218.84" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" show less	Web App Attack
🇩🇪 MusicLibrary	2026-08-15 08:33:28 (2 weeks ago)	Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-08-14 14:01:23 (2 weeks ago)	IM360 WAF: Unauthenticated front-end JCE editor-profile import in Joomla Content Editor before 2.9.9 ... show more IM360 WAF: Unauthenticated front-end JCE editor-profile import in Joomla Content Editor before 2.9.99.5 (CVE-2026-48907) MV:/index.php show less	Web App Attack
🇱🇻 garmtech.com	2026-08-14 14:01:18 (2 weeks ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.63.202.16

🇨🇷 186.159.179.156

🇮🇳 182.79.218.164

🇩🇪 69.5.169.187

🇬🇧 35.203.211.124

🇦🇷 201.179.183.99

🇺🇸 195.184.76.65

🇬🇧 193.32.209.248

🇦🇷 190.92.98.250

🇧🇷 179.48.246.245

🇰🇷 175.207.209.8

🇺🇸 165.154.172.69

🇨🇳 125.91.35.169

🇿🇦 102.215.242.87

🇺🇸 91.193.232.170

🇺🇸 45.148.124.222

🇳🇱 45.148.10.13

🇹🇼 34.80.214.15

🇬🇧 31.14.254.110

🇬🇧 31.14.254.67