JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

131.189.93.160

Neutral Activity

Abuse Confidence Score

0% Low Risk

72 reports

61 reporters · latest 1 year ago

ISP: Microsoft Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

131.189.93.160 has been reported 72 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

72 from 61 distinct reporters

First reported

August 23rd 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 NyaljBe	2025-08-25 01:15:00 UTC · (1 year ago)	131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-wso.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-signin.php HT ... show more 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-wso.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-signin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-setup.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-setting.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-logs.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-login.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-l0gin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] "GET /wp-includes/wp-class.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - - [23/Aug/2025:22:25:18 +0200] show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-08-24 20:08:24 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇭🇺 DumaNet	2025-08-24 07:33:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Aug 23. 20:52:38 Source IP: 131.189.93.160 Portion of the log(s): 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 153 "-" "-" 131.189.93. ... show more WordPress plugin attack attempts. Date: 2025 Aug 23. 20:52:38 Source IP: 131.189.93.160 Portion of the log(s): 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp-error.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp-content/x.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp-content/wp.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp-content/uploads/json.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp-content/uploads/chosen.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:52:38 +0200] "GET /wp show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-08-24 07:19:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Aug 23. 20:41:20 Source IP: 131.189.93.160 Portion of the log(s): 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-content/autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/ ... show more WordPress plugin attack attempts. Date: 2025 Aug 23. 20:41:20 Source IP: 131.189.93.160 Portion of the log(s): 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-content/autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-content/about.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-content/1.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-comments.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-api.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-files.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-admin/wp.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:41:20 +0200] "GET /wp-admin/wp-login.php HTTP/1.1" 404 153 "-" "-" show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-08-24 06:44:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Aug 23. 20:32:15 Source IP: 131.189.93.160 Portion of the log(s): 131.189.93.160 - [23/Aug/2025:20:31:13 +0200] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug ... show more WordPress plugin attack attempts. Date: 2025 Aug 23. 20:32:15 Source IP: 131.189.93.160 Portion of the log(s): 131.189.93.160 - [23/Aug/2025:20:31:13 +0200] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:31:13 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:31:13 +0200] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:31:13 +0200] "GET /wp-admin/install.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:31:13 +0200] "GET /wp-admin/includes/index.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:31:13 +0200] "GET /wp-admin/includes/header.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:31:13 +0200] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:31:13 +0200] "GET /wp-admin/includes/colour.php HTTP/1.1" 404 153 "-" "-" 131.189.93.160 - [23/Aug/2025:20:31:13 +0200 show less	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2025-08-24 00:08:24 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 Pythagus	2025-08-24 00:00:41 UTC · (1 year ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-08-23 20:08:24 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 Buster	2025-08-23 17:59:00 UTC · (1 year ago)	Continual pointless childish script kiddie DOS & DDOS attack attempts on multiple sites from Perm Blocked ASN and country:	DDoS Attack Open Proxy Hacking Bad Web Bot Web App Attack
🇸🇬 Cloudkul Cloudkul	2025-08-23 17:27:07 UTC · (1 year ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.	Brute-Force Web App Attack
🇪🇸 loadsoporte	2025-08-23 17:09:02 UTC · (1 year ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 uhlhosting	2025-08-23 15:56:26 UTC · (1 year ago)	cp.uhlhosting.ch 131.189.93.160 - - [23/Aug/2025:17:56:26.464916 +0200] "GET /mail//.alf.php HTTP/1.1" 403 199 "-" "-" aKnkqvN8TqxpNPSwy8HPVgAAAJM "-" /apache/20250823/20250823-1756/20250823-175626-aKnkqvN8TqxpNPSwy8HPVgAAAJM 0 899 md5:20f36c0295c471 ... show more cp.uhlhosting.ch 131.189.93.160 - - [23/Aug/2025:17:56:26.464916 +0200] "GET /mail//.alf.php HTTP/1.1" 403 199 "-" "-" aKnkqvN8TqxpNPSwy8HPVgAAAJM "-" /apache/20250823/20250823-1756/20250823-175626-aKnkqvN8TqxpNPSwy8HPVgAAAJM 0 899 md5:20f36c0295c4716b8c7d4469d5087bf1 cp.uhlhosting.ch 131.189.93.160 - - [23/Aug/2025:17:56:26.474535 +0200] "GET /mail//.bod/.ll/ss.php HTTP/1.1" 403 199 "-" "-" aKnkqvN8TqxpNPSwy8HPWAAAAII "-" /apache/20250823/20250823-1756/20250823-175626-aKnkqvN8TqxpNPSwy8HPWAAAAII 0 902 md5:6873b5a62b7f678c7759d6608a1fb484 cp.uhlhosting.ch 131.189.93.160 - - [23/Aug/2025:17:56:26.484198 +0200] "GET /mail//.well-known/about/function.php HTTP/1.1" 403 199 "-" "-" aKnkqvN8TqxpNPSwy8HPWgAAAIo "-" /apache/20250823/20250823-1756/20250823-175626-aKnkqvN8TqxpNPSwy8HPWgAAAIo 0 924 md5:07c01bed6f2e8e3f5892385be5076080 cp.uhlhosting.ch 131.189.93.160 - - [23/Aug/2025:17:56:26.493676 +0200] "GET /mail//.well-known/classwithtostring.php HTTP/1.1" 403 199 "-" "-" aKnkqvN8TqxpNPSwy ... show less	DDoS Attack Brute-Force
🇺🇸 myagent.site	2025-08-23 15:09:11 UTC · (1 year ago)	Blocking for trying to access an exploit file: /install.php	Hacking
🇩🇪 LRob	2025-08-23 15:00:22 UTC · (1 year ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇳🇱 BlueWire Hosting	2025-08-23 14:10:13 UTC · (1 year ago)	Probing for Wordpress vulnerabilities	Bad Web Bot Web App Attack

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 221.231.5.210

🇩🇪 104.252.3.206

🇬🇧 35.203.211.154

🇺🇸 3.166.160.129

🇰🇷 222.111.222.192

🇭🇰 220.246.42.227

🇰🇷 220.89.191.123

🇮🇳 203.145.165.2

🇮🇳 182.76.107.16

🇺🇸 172.56.60.247

🇺🇸 159.223.191.153

🇺🇸 104.222.43.248

🇩🇪 104.165.120.93

🇩🇪 104.165.120.20

🇳🇱 80.82.77.139

🇺🇸 66.132.195.87

🇨🇳 61.184.119.32

🇺🇸 43.159.148.221

🇧🇪 35.210.167.3

🇺🇸 13.68.214.34