JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

131.189.93.156

Neutral Activity

Abuse Confidence Score

0% Low Risk

72 reports

64 reporters · latest 1 year ago

ISP: Microsoft Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

131.189.93.156 has been reported 72 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

72 from 64 distinct reporters

First reported

August 23rd 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 NyaljBe	2025-08-25 01:14:00 UTC · (1 year ago)	131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /file.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /f35.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /edit.php HTTP/1.1 ... show more 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /file.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /f35.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /edit.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /dropdown.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /css.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /composer.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /classwithtostring.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /class.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /chosen.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /cc.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - - [23/Aug/2025:16:22:38 +0200] "GET /byp.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇺🇸 Tom USA	2025-08-24 11:39:00 UTC · (1 year ago)	Massive attack from multiple angles.	Hacking Brute-Force
🇭🇺 DumaNet	2025-08-24 06:31:00 UTC · (1 year ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Aug 23. 14:48:38 Source IP: 131.189.93.156 Portion of the log(s): 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /autoload_classmap/function.php HTTP/1.1" 404 153 "-" "-" 131. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Aug 23. 14:48:38 Source IP: 131.189.93.156 Portion of the log(s): 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /autoload_classmap/function.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /auth.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /atomlib.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /assets/images/doc.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /asasx.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /as.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /alfa.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:48:38 +0200] "GET /al.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:48:38 +0200 show less	Web App Attack
🇭🇺 DumaNet	2025-08-24 06:11:00 UTC · (1 year ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Aug 23. 14:38:40 Source IP: 131.189.93.156 Portion of the log(s): 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /admin/admin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [2 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Aug 23. 14:38:40 Source IP: 131.189.93.156 Portion of the log(s): 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /admin/admin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /admin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /about/function.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /about.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /87.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /13k.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /12.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /10.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /.well-known/radio.php HTTP/1.1" 404 153 "-" "-" 131.189.93.156 - [23/Aug/2025:14:38:37 +0200] "GET /.well-known/index show less	Web App Attack
🇺🇸 octageeks.com	2025-08-24 04:06:09 UTC · (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇩🇪 bescared	2025-08-23 18:30:00 UTC · (1 year ago)		Bad Web Bot Web App Attack
🇬🇧 findlab	2025-08-23 18:10:01 UTC · (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇫🇮 YF	2025-08-23 18:00:47 UTC · (1 year ago)	404 errors (Vulnerability scan)	Brute-Force Web App Attack
🇩🇪 todix	2025-08-23 17:53:23 UTC · (1 year ago)	WebAttack or semilar from 131.189.93.156	Web App Attack
🇦🇺 paulshipley.com.au	2025-08-23 17:50:30 UTC · (1 year ago)	paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:06 +1000] "GET /.alf.php HTTP/1.1" 404 71750 "-" "-" paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:09 +1000] "GET /.bod/.ll/ss.php HTTP/1.1" 404 70153 "-" "-" paulshipley.com ... show more paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:06 +1000] "GET /.alf.php HTTP/1.1" 404 71750 "-" "-" paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:09 +1000] "GET /.bod/.ll/ss.php HTTP/1.1" 404 70153 "-" "-" paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:12 +1000] "GET /.well-known/about/function.php HTTP/1.1" 404 70102 "-" "-" paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:14 +1000] "GET /.well-known/classwithtostring.php HTTP/1.1" 404 69056 "-" "-" paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:18 +1000] "GET /.well-known/ HTTP/1.1" 403 747 "-" "-" paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:19 +1000] "GET /.well-known/radio.php HTTP/1.1" 404 69044 "-" "-" paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:21 +1000] "GET /10.php HTTP/1.1" 404 69028 "-" "-" paulshipley.com.au:443 131.189.93.156 - - [24/Aug/2025:03:49:24 +1000] "GET /12.php HTTP/1.1" 404 69028 "-" "-" paulshipley.com.au:443 ... show less	Web App Attack
🇬🇧 djboddington	2025-08-23 17:49:50 UTC · (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
🇩🇪 Blexyel	2025-08-23 17:31:18 UTC · (1 year ago)	131.189.93.156 - - [23/Aug/2025:19:31:18 +0200] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 169 "-" "-" ...	Brute-Force Web App Attack
🇩🇪 on-com	2025-08-23 17:25:20 UTC · (1 year ago)	URL scan	Brute-Force Web App Attack
🇺🇸 antlac1	2025-08-23 17:25:13 UTC · (1 year ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
Anonymous	2025-08-23 17:24:25 UTC · (1 year ago)	[Sat Aug 23 17:24:24.086841 2025] [proxy_fcgi:error] [pid 1302311:tid 1302311] [client 131.189.93.156:16228] AH01071: Got error 'Primary script unknown' [Sat Aug 23 17:24:24.165153 2025] [proxy_fcgi:error] [pid 1302311:tid 1302311] [client 131.189.93 ... show more [Sat Aug 23 17:24:24.086841 2025] [proxy_fcgi:error] [pid 1302311:tid 1302311] [client 131.189.93.156:16228] AH01071: Got error 'Primary script unknown' [Sat Aug 23 17:24:24.165153 2025] [proxy_fcgi:error] [pid 1302311:tid 1302311] [client 131.189.93.156:16228] AH01071: Got error 'Primary script unknown' [Sat Aug 23 17:24:24.178301 2025] [proxy_fcgi:error] [pid 1302311:tid 1302311] [client 131.189.93.156:16228] AH01071: Got error 'Primary script unknown' [Sat Aug 23 17:24:24.191066 2025] [proxy_fcgi:error] [pid 1302311:tid 1302311] [client 131.189.93.156:16228] AH01071: Got error 'Primary script unknown' [Sat Aug 23 17:24:24.204078 2025] [proxy_fcgi:error] [pid 1302311:tid 1302311] [client 131.189.93.156:16228] AH01071: Got error 'Primary script unknown' ... show less	Hacking

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 118.145.107.219

🇵🇰 39.61.57.81

🇺🇸 207.241.173.236

🇩🇪 194.88.98.86

🇵🇭 180.193.181.195

🇨🇭 179.43.153.2

🇨🇳 106.13.124.241

🇵🇱 95.214.53.196

🇫🇷 91.231.89.199

🇩🇴 45.172.152.74

🇺🇸 45.132.115.158

🇺🇸 20.118.235.131

🇨🇳 14.153.244.106

🇷🇴 2.57.121.112

🇸🇬 178.128.118.82

🇰🇷 125.142.37.91

🇵🇱 87.251.64.41

🇧🇬 78.128.114.118

🇧🇷 45.229.91.2

🇺🇸 18.190.15.50