JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.142.31.40

217.142.31.40 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 72%: ?

72%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.sfiabgr1.isp.starlink.com
Domain Name	spacex.com
Country	🇮🇶 Iraq
City	Baghdad, Baghdad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.142.31.40

Whois 217.142.31.40

IP Abuse Reports for 217.142.31.40:

This IP address has been reported a total of 28 times from 20 distinct sources. 217.142.31.40 was first reported on May 21st 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 05:10:11 (2 hours ago)	(mod_security) mod_security (id:210350) triggered by 217.142.31.40 (customer.sfiabgr1.isp.starlink.c ... show more (mod_security) mod_security (id:210350) triggered by 217.142.31.40 (customer.sfiabgr1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 01:10:06.713634 2026] [security2:error] [pid 16370:tid 16370] [client 217.142.31.40:11232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|drjasonkolber.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "drjasonkolber.com"] [uri "/"] [unique_id "aqzHrs0QqfOSH33oV51IBwAAABs"], referer: https://rankingschecker.space/dir/premium-link-building-58931 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-09-17 10:03:58 (21 hours ago)	tcp ports: 23,22 (8 or more attempts)	Port Scan
🇺🇸 IndigoRidge	2026-09-16 11:38:07 (1 day ago)	[16/Sep/2026:07:33:08.723770 --0400] aqp@dJnTYemeKACIsw5rGgAAAAQ 217.142.31.40 60678 205.233.18.17 7 ... show more [16/Sep/2026:07:33:08.723770 --0400] aqp@dJnTYemeKACIsw5rGgAAAAQ 217.142.31.40 60678 205.233.18.17 7081 [16/Sep/2026:07:34:01.566333 --0400] aqp@qcmeqc8Nr9kcpy-M6wAAAFI 217.142.31.40 42148 205.233.18.17 7081 [16/Sep/2026:07:34:22.634284 --0400] aqp@vsmeqc8Nr9kcpy-M@QAAAEk 217.142.31.40 49256 205.233.18.17 7081 [16/Sep/2026:07:35:58.899278 --0400] aqp-HvkOEaML5pm2@1CSwQAAAVI 217.142.31.40 34768 205.233.18.17 7081 [16/Sep/2026:07:38:06.850903 --0400] aqp-nrbgtpkcaiCuXCgAxwAAARU 217.142.31.40 40750 205.233.18.17 7081 ... show less	Hacking
🇺🇸 IndigoRidge	2026-09-16 11:20:59 (1 day ago)	[16/Sep/2026:07:17:07.177904 --0400] aqp6s8meqc8Nr9kcpy-JzQAAAEI 217.142.31.40 45652 205.233.18.17 7 ... show more [16/Sep/2026:07:17:07.177904 --0400] aqp6s8meqc8Nr9kcpy-JzQAAAEI 217.142.31.40 45652 205.233.18.17 7081 [16/Sep/2026:07:19:14.020305 --0400] aqp7MvkOEaML5pm2@1CRAQAAAU4 217.142.31.40 53432 205.233.18.17 7081 [16/Sep/2026:07:19:45.267101 --0400] aqp7UfkOEaML5pm2@1CRFgAAAVc 217.142.31.40 55194 205.233.18.17 7081 [16/Sep/2026:07:20:27.463391 --0400] aqp7e-kOEaML5pm2@1CROgAAAUY 217.142.31.40 39798 205.233.18.17 7081 [16/Sep/2026:07:20:59.209842 --0400] aqp7m7bgtpkcaiCuXCj-xQAAARc 217.142.31.40 33674 205.233.18.17 7081 ... show less	Hacking
🇩🇪 netclix.gr	2026-09-16 10:44:15 (1 day ago)	(wordpress) Failed wordpress login from 217.142.31.40 (IQ/Iraq/customer.sfiabgr1.isp.starlink.com): ... show more (wordpress) Failed wordpress login from 217.142.31.40 (IQ/Iraq/customer.sfiabgr1.isp.starlink.com): (CF_ENABLE) show less	Brute-Force
🇫🇮 mikkopal88	2026-09-15 18:35:12 (2 days ago)	SSH scan or brute-force attempt	Brute-Force SSH
Anonymous	2026-09-15 00:45:36 (3 days ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
Anonymous	2026-09-10 06:13:36 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 kosada.com	2026-09-07 00:04:53 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A320&f%5B1%5D=digest_key_terms%3A341&f%5B2%5D=digest_key_terms%3A518&f%5B3%5D=digest_key_terms%3A522&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B319%5D=319 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-09-04 06:42:40 (2 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after repeated server-error fuzzing. Eviden ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after repeated server-error fuzzing. Evidence: Repeated Server Errors (500) show less	Hacking Exploited Host Web App Attack
🇪🇸 el-brujo	2026-08-27 13:58:39 (3 weeks ago)	[Thu Aug 27 15:51:31.170728 2026] [proxy_fcgi:error] [pid 2770132:tid 2774567] [remote 217.142.31.40 ... show more [Thu Aug 27 15:51:31.170728 2026] [proxy_fcgi:error] [pid 2770132:tid 2774567] [remote 217.142.31.40:0] AH01071: Got error 'Primary script unknown\n', referer: https://elhacker.net/?jLCB=uz560L [Thu Aug 27 15:51:31.172192 2026] [proxy_fcgi:error] [pid 2770132:tid 2773948] [remote 217.142.31.40:0] AH01071: Got error 'Primary script unknown\n', referer: https://elhacker.net/search?q=HCOcgyZK ... show less	Hacking Web App Attack
🇪🇸 el-brujo	2026-08-26 13:01:11 (3 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
Anonymous	2026-08-25 12:21:52 (3 weeks ago)	Unauthorized connection to Telnet port 23	Port Scan
🇺🇸 kosada.com	2026-08-24 23:24:31 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 cwytech	2026-08-23 09:05:24 (3 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.241

🇺🇿 198.163.193.172

🇺🇦 195.26.18.82

🇺🇸 136.107.224.113

🇺🇸 136.107.113.134

🇨🇳 129.28.47.121

🇨🇳 115.191.22.111

🇻🇳 103.63.108.25

🇯🇵 82.108.198.58

🇬🇧 193.163.125.253

🇭🇰 156.225.19.31

🇰🇷 152.32.138.230

🇫🇮 147.185.133.192

🇺🇸 104.194.199.141

🇷🇴 92.118.39.49

🇱🇹 62.60.130.201

🇳🇱 45.148.10.157

🇳🇬 197.253.54.22

🇩🇪 194.187.176.63

🇩🇪 194.187.176.19