JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.14.40.92

31.14.40.92 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 39%: ?

39%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Data Room SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS19624
Hostname(s)	localhost mail.zkmail.org
Domain Name	serverroom.net
Country	🇷🇴 Romania
City	Voluntari, Ilfov

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.14.40.92

Whois 31.14.40.92

IP Abuse Reports for 31.14.40.92:

This IP address has been reported a total of 9 times from 6 distinct sources. 31.14.40.92 was first reported on July 8th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-16 16:22:34 (4 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 18:42:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 14:42:13.477643 2026] [security2:error] [pid 25201:tid 25201] [client 31.14.40.92:40480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.beckerbrokerage.net"] [uri "/.git/config"] [unique_id "alfUhWx079b0N3CcZ0r1kgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 16:19:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 12:19:21.016627 2026] [security2:error] [pid 22817:tid 22817] [client 31.14.40.92:54144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.terruven.badritual.art"] [uri "/.git/config"] [unique_id "alezCdvKfV04QlDyvQJGBwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Squearex	2026-07-15 08:03:47 (1 day ago)	Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 9200)	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-15 03:31:09 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 31.14.40.92 (localhost): 1 in the last 300 secs ... show more (mod_security) mod_security (id:210831) triggered by 31.14.40.92 (localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 23:31:00.765127 2026] [security2:error] [pid 17265:tid 17268] [client 31.14.40.92:50290] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.geoception.com\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.geoception.com"] [uri "/robots.txt"] [unique_id "alb-9MtEug7Pa6zJ0K_2ZgAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 22:14:16 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 18:14:07.671435 2026] [security2:error] [pid 10034:tid 10034] [client 31.14.40.92:44146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.chickenchristmascards.com"] [uri "/.git/config"] [unique_id "alVjL8wg7elGIblha7ltZwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-13 18:49:58 (3 days ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇮🇳 liveaspankaj	2026-07-13 05:58:04 (3 days ago)	DDoS attack: 110 requests in 5m (GET / or repair.php).	DDoS Attack
Anonymous	2026-07-08 02:00:33 (1 week ago)	2026-07-07 17:00:20,363 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-07 ... show more 2026-07-07 17:00:20,363 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-07 20:00:30,959 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-07 23:00:51,968 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-08 02:00:42,759 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-08 05:00:32,377 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 show less	Brute-Force

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.91

🇳🇱 185.93.89.79

🇫🇮 144.31.156.249

🇮🇳 143.110.247.236

🇫🇷 91.231.89.186

🇩🇪 47.254.156.46

🇺🇸 34.106.248.236

🇮🇳 20.244.18.126

🇨🇳 220.202.112.66

🇺🇸 195.184.76.151

🇲🇽 187.243.52.37

🇺🇸 172.236.228.115

🇫🇮 147.185.133.189

🇰🇷 112.169.8.251

🇳🇱 81.19.216.123

🇺🇸 45.33.84.124

🇬🇧 35.203.211.237

🇨🇳 14.116.172.42

🇮🇳 4.240.126.25

🇺🇸 205.210.31.82