JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.224.131.14

193.224.131.14 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 100%: ?

100%

ISP	Szechenyi Istvan Egyetem E040002
Usage Type	Government
ASN	AS1955
Hostname(s)	sze-nat2.sze.hu
Domain Name	sze.hu
Country	🇭🇺 Hungary
City	Gyor, Gyor-Moson-Sopron

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.224.131.14

Whois 193.224.131.14

IP Abuse Reports for 193.224.131.14:

This IP address has been reported a total of 73 times from 55 distinct sources. 193.224.131.14 was first reported on January 30th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-08 05:45:15 (3 weeks ago)	WordPress HTTP Brute Force Login Attempt.	Brute-Force
🇫🇷 LRob	2026-07-08 05:41:29 (3 weeks ago)	CrowdSec: lrob/wp-login-slow-bf \| req: ["/wp-login.php"] \| UA: ["Mozilla/5.0 (X11; CrOS x86_64 14541 ... show more CrowdSec: lrob/wp-login-slow-bf \| req: ["/wp-login.php"] \| UA: ["Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Ubuntu; Linux x86 show less	Brute-Force Web App Attack
Anonymous	2026-07-08 05:39:18 (3 weeks ago)	193.224.131.14 - - [08/Jul/2026:13:39:17 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 ... show more 193.224.131.14 - - [08/Jul/2026:13:39:17 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 TAY	2026-07-08 05:21:52 (3 weeks ago)	193.224.131.14 - - [08/Jul/2026:13:19:32 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6263 "-" "Mozilla/5. ... show more 193.224.131.14 - - [08/Jul/2026:13:19:32 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6263 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 193.224.131.14 - - [08/Jul/2026:13:21:48 +0800] "POST /wp-login.php HTTP/1.1" 200 2676 "https://mail.littleprairie.com.my/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 193.224.131.14 - - [08/Jul/2026:13:21:51 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Brute-Force
🇫🇷 Yepngo	2026-07-08 05:12:04 (3 weeks ago)	193.224.131.14 - - [08/Jul/2026:07:12:04 +0200] "POST /xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 ... show more 193.224.131.14 - - [08/Jul/2026:07:12:04 +0200] "POST /xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇫🇷 solution.it	2026-07-08 05:03:39 (3 weeks ago)	[Wed Jul 08 07:03:39.475952 2026] [php7:error] [pid 1891515:tid 1891515] [client 193.224.131.14:4352 ... show more [Wed Jul 08 07:03:39.475952 2026] [php7:error] [pid 1891515:tid 1891515] [client 193.224.131.14:4352] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇲🇽 octageeks.com	2026-07-08 04:18:55 (3 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 Mundo Bueno	2026-07-08 03:38:48 (3 weeks ago)	[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: HU \| UA: Mozilla/5.0 (X11; Ubuntu; L ... show more [ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: HU \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 show less	Hacking Web App Attack
🇷🇴 SpamStopper	2026-07-08 03:14:15 (3 weeks ago)	Fail2Ban - WP Spoofing	Port Scan Brute-Force Web App Attack
🇩🇪 F242	2026-07-08 02:54:35 (3 weeks ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇩🇪 tentwentyfour	2026-07-08 02:49:14 (3 weeks ago)	Blocked for brute-forcing WordPress log-in	Brute-Force Web App Attack
🇨🇭 4server	2026-07-08 02:48:48 (3 weeks ago)	[WedJul0804:48:43.1886722026][security2:error][pid2510351:tid2510895][client193.224.131.14:0]ModSecu ... show more [WedJul0804:48:43.1886722026][security2:error][pid2510351:tid2510895][client193.224.131.14:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"whatsdecor.comarcosa.com\"][uri\"/wp-login.php\"][unique_id\"ak26i1of1QdeNF8O-HCQdAAAAMw\"]\,referer:https://whatsdecor.comarcosa.com/wp-login.php show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 02:48:11 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 193.224.131.14 (sze-nat2.sze.hu): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 193.224.131.14 (sze-nat2.sze.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 22:48:04.776385 2026] [security2:error] [pid 15286:tid 15300] [client 193.224.131.14:18382] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cynosureinternetservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosureinternetservices.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ak26ZHykvRP6731dysdvPQAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TAY	2026-07-08 02:38:00 (3 weeks ago)	193.224.131.14 - - [08/Jul/2026:10:36:40 +0800] "POST /wp-login.php HTTP/1.1" 200 2676 "https://mail ... show more 193.224.131.14 - - [08/Jul/2026:10:36:40 +0800] "POST /wp-login.php HTTP/1.1" 200 2676 "https://mail.littleprairie.com.my/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 193.224.131.14 - - [08/Jul/2026:10:37:52 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6263 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 193.224.131.14 - - [08/Jul/2026:10:38:00 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6323 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-07 23:38:20 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 193.224.131.14 (sze-nat2.sze.hu): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 193.224.131.14 (sze-nat2.sze.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 19:38:15.314014 2026] [security2:error] [pid 24813:tid 24813] [client 193.224.131.14:44303] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tenmenband.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tenmenband.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ak2N5zJIBeIak4THlRytBwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.95

🇮🇳 216.10.242.215

🇺🇸 195.184.76.180

🇺🇸 192.210.150.198

🇮🇩 157.10.182.14

🇺🇸 137.184.121.63

🇨🇳 116.181.10.21

🇨🇳 110.229.182.231

🇻🇳 103.172.236.241

🇺🇿 89.126.223.123

🇮🇷 77.77.93.88

🇫🇷 51.159.110.167

🇳🇱 45.148.10.147

🇻🇪 38.196.243.233

🇨🇦 38.35.220.139

🇹🇷 31.57.187.212

🇺🇸 2607:f8b0:4004:c1b::12a

🇺🇸 209.87.169.159

🇺🇸 209.38.157.61

🇧🇪 207.175.50.82