JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

131.189.93.165

Neutral Activity

Abuse Confidence Score

0% Low Risk

78 reports

61 reporters · latest 5 months ago

ISP: Microsoft Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

131.189.93.165 has been reported 78 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

78 from 61 distinct reporters

First reported

August 23rd 2025

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 UTC · (5 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 157cd6d7-1140-4c75-95c6-4a267aae4754	DDoS Attack
🇹🇷 rtbh.com.tr	2025-08-25 20:08:26 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇭🇺 NyaljBe	2025-08-25 01:09:00 UTC · (1 year ago)	131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:1 ... show more 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/install.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/includes/index.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/includes/header.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/includes/colour.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - - [23/Aug/2025:07:18:42 +0200] "GET /wp-admin/images/moon.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-08-25 00:08:25 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Vegascosmetics	2025-08-24 21:50:49 UTC · (1 year ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇹🇷 rtbh.com.tr	2025-08-24 20:08:24 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇭🇺 DumaNet	2025-08-24 06:00:00 UTC · (1 year ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Aug 23. 11:59:35 Source IP: 131.189.93.165 Portion of the log(s): 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /admin/admin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [2 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Aug 23. 11:59:35 Source IP: 131.189.93.165 Portion of the log(s): 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /admin/admin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /admin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /about/function.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /about.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /87.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /13k.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /12.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /10.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:11:59:31 +0200] "GET /.well-known/radio.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:11:59:30 +0200] "GET /.well-known/index show less	Web App Attack
🇭🇺 DumaNet	2025-08-24 05:28:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Aug 23. 06:24:38 Source IP: 131.189.93.165 Portion of the log(s): 131.189.93.165 - [23/Aug/2025:06:24:35 +0200] "GET /wp.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:35 +0200] " ... show more WordPress plugin attack attempts. Date: 2025 Aug 23. 06:24:38 Source IP: 131.189.93.165 Portion of the log(s): 131.189.93.165 - [23/Aug/2025:06:24:35 +0200] "GET /wp.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:35 +0200] "GET /wp-wso.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:34 +0200] "GET /wp-signin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:34 +0200] "GET /wp-setup.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:34 +0200] "GET /wp-setting.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:34 +0200] "GET /wp-logs.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:34 +0200] "GET /wp-login.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:34 +0200] "GET /wp-l0gin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:34 +0200] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:24:34 +0200] "GET /wp-includes/wp show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-08-24 05:13:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Aug 23. 06:15:40 Source IP: 131.189.93.165 Portion of the log(s): 131.189.93.165 - [23/Aug/2025:06:15:40 +0200] "GET /wp-includes/html-api/about.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Au ... show more WordPress plugin attack attempts. Date: 2025 Aug 23. 06:15:40 Source IP: 131.189.93.165 Portion of the log(s): 131.189.93.165 - [23/Aug/2025:06:15:40 +0200] "GET /wp-includes/html-api/about.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:15:40 +0200] "GET /wp-includes/fonts/index.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:15:40 +0200] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:15:40 +0200] "GET /wp-includes/fonts/admin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:15:40 +0200] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:15:40 +0200] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:15:40 +0200] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:15:40 +0200] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 404 show less	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2025-08-24 05:12:57 UTC · (1 year ago)	2 attacks on Alfa URLs: GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1	Hacking
🇭🇺 DumaNet	2025-08-24 04:55:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Aug 23. 06:06:34 Source IP: 131.189.93.165 Portion of the log(s): 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 153 "-" "-" 131.189.93. ... show more WordPress plugin attack attempts. Date: 2025 Aug 23. 06:06:34 Source IP: 131.189.93.165 Portion of the log(s): 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET /wp-error.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET /wp-content/x.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET /wp-content/wp.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET /wp-content/uploads/json.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET /wp-content/uploads/chosen.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 153 "-" "-" 131.189.93.165 - [23/Aug/2025:06:04:34 +0200] "GET show less	Hacking Web App Attack
🇩🇪 SpaceHost-Server	2025-08-23 22:31:54 UTC · (1 year ago)		Brute-Force Web App Attack
🇬🇧 Buster	2025-08-23 17:59:00 UTC · (1 year ago)	Continual pointless childish script kiddie DOS & DDOS attack attempts on multiple sites from Perm Blocked ASN and country:	DDoS Attack Open Proxy Hacking Bad Web Bot Web App Attack
Anonymous	2025-08-23 16:16:24 UTC · (1 year ago)	[redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:05 +0200] "GET /admin/function.php HTTP/2.0" 404 431229 "-" "-" [redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:05 +0200] "GET /adminfuns.php HTTP/2.0" 404 431229 "-" "-" [redacted]site 131. ... show more [redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:05 +0200] "GET /admin/function.php HTTP/2.0" 404 431229 "-" "-" [redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:05 +0200] "GET /adminfuns.php HTTP/2.0" 404 431229 "-" "-" [redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:13 +0200] "GET /images/admin.php HTTP/2.0" 404 431229 "-" "-" [redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:22 +0200] "GET /wp-admin.php HTTP/2.0" 404 431229 "-" "-" [redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:23 +0200] "GET /wp-admin/classwithtostring.php HTTP/2.0" 404 431229 "-" "-" [redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:23 +0200] "GET /wp-admin/css/colors/blue/ HTTP/2.0" 404 196 "-" "-" [redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:23 +0200] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/2.0" 404 152031 "-" "-" [redacted]site 131.189.93.165 - - [23/Aug/2025:18:16:23 +0200] "GET /wp-admin/css/colors/light/wp-login.php HTTP/2.0" 404 152031 "-" "-" [redacted]site 131.18 ... show less	Hacking Web App Attack
🇩🇪 macrob	2025-08-23 15:19:45 UTC · (1 year ago)	2025/08/23 15:19:44 [error] 1065444#1065444: 119726883 access forbidden by rule, client: 131.189.93.165, server: binixo.es, request: "GET /.alf.php HTTP/2.0", host: "binixo.es" 2025/08/23 15:19:44 [error] 1065444#1065444: 119726883 access forbidden ... show more 2025/08/23 15:19:44 [error] 1065444#1065444: 119726883 access forbidden by rule, client: 131.189.93.165, server: binixo.es, request: "GET /.alf.php HTTP/2.0", host: "binixo.es" 2025/08/23 15:19:44 [error] 1065444#1065444: 119726883 access forbidden by rule, client: 131.189.93.165, server: binixo.es, request: "GET /.bod/.ll/ss.php HTTP/2.0", host: "binixo.es" 2025/08/23 15:19:44 [error] 1065444#1065444: *119726883 access forbidden by rule, client: 131.189.93.165, server: binixo.es, request: "GET /admin.php HTTP/2.0", host: "binixo.es" ... show less	Web App Attack

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.160

🇳🇱 193.176.31.253

🇺🇸 137.184.119.129

🇺🇸 216.25.90.54

🇪🇪 213.232.112.52

🇳🇱 213.152.161.44

🇧🇪 198.235.24.163

🇲🇽 187.147.108.99

🇩🇪 167.94.146.40

🇺🇸 162.216.150.175

🇺🇸 154.83.199.53

🇨🇳 112.27.230.157

🇸🇬 43.245.98.60

🇬🇧 35.203.211.31

🇺🇸 35.202.248.68

🇭🇰 165.154.62.159

🇨🇳 116.172.249.78

🇨🇳 111.113.88.96

🇨🇭 104.244.79.113

🇷🇴 2.57.121.25