JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.14.40.92

31.14.40.92 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 33%: ?

33%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Data Room SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS19624
Hostname(s)	mail.zkmail.org localhost
Domain Name	serverroom.net
Country	🇷🇴 Romania
City	Voluntari, Ilfov

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.14.40.92

Whois 31.14.40.92

IP Abuse Reports for 31.14.40.92:

This IP address has been reported a total of 8 times from 5 distinct sources. 31.14.40.92 was first reported on July 8th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-15 18:42:21 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 14:42:13.477643 2026] [security2:error] [pid 25201:tid 25201] [client 31.14.40.92:40480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.beckerbrokerage.net"] [uri "/.git/config"] [unique_id "alfUhWx079b0N3CcZ0r1kgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 16:19:25 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 12:19:21.016627 2026] [security2:error] [pid 22817:tid 22817] [client 31.14.40.92:54144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.terruven.badritual.art"] [uri "/.git/config"] [unique_id "alezCdvKfV04QlDyvQJGBwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Squearex	2026-07-15 08:03:47 (14 hours ago)	Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 9200)	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-15 03:31:09 (18 hours ago)	(mod_security) mod_security (id:210831) triggered by 31.14.40.92 (localhost): 1 in the last 300 secs ... show more (mod_security) mod_security (id:210831) triggered by 31.14.40.92 (localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 23:31:00.765127 2026] [security2:error] [pid 17265:tid 17268] [client 31.14.40.92:50290] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.geoception.com\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.geoception.com"] [uri "/robots.txt"] [unique_id "alb-9MtEug7Pa6zJ0K_2ZgAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 22:14:16 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 31.14.40.92 (mail.zkmail.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 18:14:07.671435 2026] [security2:error] [pid 10034:tid 10034] [client 31.14.40.92:44146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.chickenchristmascards.com"] [uri "/.git/config"] [unique_id "alVjL8wg7elGIblha7ltZwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-13 18:49:58 (2 days ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇮🇳 liveaspankaj	2026-07-13 05:58:04 (2 days ago)	DDoS attack: 110 requests in 5m (GET / or repair.php).	DDoS Attack
Anonymous	2026-07-08 02:00:33 (1 week ago)	2026-07-07 17:00:20,363 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-07 ... show more 2026-07-07 17:00:20,363 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-07 20:00:30,959 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-07 23:00:51,968 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-08 02:00:42,759 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 2026-07-08 05:00:32,377 fail2ban.actions [3625835]: NOTICE [tor] Ban 31.14.40.92 show less	Brute-Force

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.198

🇮🇳 202.141.94.22

🇹🇳 196.203.63.80

🇮🇷 176.65.182.95

🇺🇸 165.227.209.27

🇿🇦 160.119.248.167

🇸🇬 159.65.128.12

🇸🇬 157.230.47.63

🇧🇬 91.92.47.6

🇺🇸 52.159.228.210

🇮🇩 43.173.1.69

🇺🇸 20.14.74.238

🇬🇧 195.96.139.234

🇧🇷 186.209.3.233

🇳🇱 185.33.154.120

🇩🇪 167.94.146.41

🇺🇸 162.216.149.66

🇯🇵 128.1.48.187

🇹🇭 118.194.250.31

🇦🇺 116.91.221.115