JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 131.163.88.225

131.163.88.225 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 25%: ?

25%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 131.163.88.225

Whois 131.163.88.225

IP Abuse Reports for 131.163.88.225:

This IP address has been reported a total of 31 times from 27 distinct sources. 131.163.88.225 was first reported on April 30th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 D3M0l4yJovr	2026-05-16 16:13:00 (1 month ago)	N4zi	DDoS Attack
🇬🇧 Aetherweb Ark	2026-05-04 16:51:26 (1 month ago)	Port Scan detected from 131.163.88.225 (NO/Norway/-). N in the last X seconds	Port Scan
🇺🇸 trobotham	2026-05-04 16:04:58 (1 month ago)	(cpanel) Failed cPanel login from 131.163.88.225 (NO/Norway/-): 5 in the last 3600 secs; Ports: 2077 ... show more (cpanel) Failed cPanel login from 131.163.88.225 (NO/Norway/-): 5 in the last 3600 secs; Ports: 2077,2078,2079,2080,2082,2083,2086,2087,2095,2096; Direction: in; Trigger: LF_CPANEL; Logs: [2026-05-04 12:03:03 -0400] info [cpaneld] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-04 12:03:03 -0400] info [whostmgrd] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-04 12:03:05 -0400] info [whostmgrd] 131.163.88.225 - root "GET /cpsess3843231959/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-04 12:04:57 -0400] info [cpaneld] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-04 12:04:57 -0400] info [whostmgrd] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect show less	Port Scan
🇫🇮 [email protected]	2026-05-02 18:27:55 (1 month ago)	Attack attempt against Interwebbi servers; Port Scan detected from 131.163.88.225 (NO/Norway/-). 5 ... show more Attack attempt against Interwebbi servers; Port Scan detected from 131.163.88.225 (NO/Norway/-). 5 hits in the last 321 seconds; IP: 131.163.88.225; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇫🇷 Dampen59	2026-05-02 18:03:43 (1 month ago)	(cpanel) Failed cPanel login from 131.163.88.225 (NO/Norway/-): 5 in the last 3600 secs; Ports: ; D ... show more (cpanel) Failed cPanel login from 131.163.88.225 (NO/Norway/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-05-02 20:03:38 +0200] info [cpaneld] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-02 20:03:38 +0200] info [whostmgrd] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-02 20:03:38 +0200] info [whostmgrd] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-02 20:03:38 +0200] info [cpaneld] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-02 20:03:38 +0200] info [cpaneld] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld show less	Port Scan
🇮🇳 evicky2002	2026-05-02 06:00:00 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=91, sources=1)	Hacking Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-01 20:53:39 (1 month ago)	(PERMBLOCK) 131.163.88.225 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Por ... show more (PERMBLOCK) 131.163.88.225 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-05-01 20:10:02 (1 month ago)	CSF brute force detection on cpanel	Brute-Force
Anonymous	2026-05-01 18:54:08 (1 month ago)	(cpanel) Failed cPanel login from 131.163.88.225 (NO/Norway/-): 5 in the last 600 secs; Ports: ; Di ... show more (cpanel) Failed cPanel login from 131.163.88.225 (NO/Norway/-): 5 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [2026-05-01 12:51:34 -0600] info [cpaneld] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 12:51:34 -0600] info [whostmgrd] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 12:51:36 -0600] info [whostmgrd] 131.163.88.225 - root "GET /cpsess7518643962/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 12:54:06 -0600] info [whostmgrd] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 12:54:06 -0600] info [cpaneld] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld show less	Port Scan
🇫🇷 mrcrassi	2026-05-01 18:44:25 (1 month ago)	Triggered Cloudflare WAF (botFight) from NO. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (POS ... show more Triggered Cloudflare WAF (botFight) from NO. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (POST method) Endpoint: /login/ UA: Mozilla/5.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 cg-design.co.uk	2026-05-01 18:42:36 (1 month ago)	Port Scan detected from 131.163.88.225 (NO/Norway/-).	Port Scan
Anonymous	2026-05-01 09:12:53 (1 month ago)	Portscan: TCP/2087 (3x), TCP/2083 (3x)	Port Scan
🇫🇷 masterguru	2026-05-01 01:59:45 (1 month ago)	Port Scan detected from 131.163.88.225 (NO/Norway/-). 11 hits in the last 199 seconds (0-193)	Port Scan
🇫🇷 masterguru	2026-05-01 01:38:41 (2 months ago)	Port Scan detected from 131.163.88.225 (NO/Norway/-). 11 hits in the last 217 seconds (0-201)	Port Scan
🇷🇴 clauss	2026-05-01 01:20:30 (2 months ago)	IP reached maximum auth failures for a one day block	Brute-Force

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.154.42.110

🇮🇩 163.7.3.26

🇭🇰 103.116.75.51

🇺🇸 66.240.223.240

🇨🇱 186.103.169.12

🇳🇱 95.98.59.198

🇳🇱 91.92.241.196

🇳🇱 91.92.40.237

🇨🇴 45.181.188.111

🇺🇸 2607:f8b0:4001:c62::127

🇺🇸 2602:feda:f393:a4e:1a40:654e:23d6:2676

🇺🇸 2602:80d:1008::55

🇹🇼 198.235.24.123

🇫🇷 185.177.72.17

🇵🇭 165.99.250.204

🇺🇸 47.251.122.183

🇫🇷 34.163.179.192

🇸🇬 20.157.117.15

🇻🇪 190.97.246.18

🇨🇳 182.119.226.61