JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.48.31.37

80.48.31.37 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 15%: ?

15%

ISP	SAT-KOL
Usage Type	Fixed Line ISP
ASN	AS5617
Domain Name	satkol.pl
Country	🇵🇱 Poland
City	Szczawnica, Lesser Poland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.48.31.37

Whois 80.48.31.37

IP Abuse Reports for 80.48.31.37:

This IP address has been reported a total of 10 times from 6 distinct sources. 80.48.31.37 was first reported on November 24th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-28 10:39:09 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-05-12 16:04:29 (1 month ago)	(xmlrpc) Failed wordpress XMLRPC 80.48.31.37 (PL/Poland/-)	Brute-Force
🇺🇸 WellSpring	2026-05-12 10:24:46 (1 month ago)	xmlrpc exploit on 830.today/xmlrpc.php — WellSpr.ing/NetSentinel civic-AI security layer	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-03 13:44:09 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 80.48.31.37 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 80.48.31.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 09:43:51.984814 2026] [security2:error] [pid 9240:tid 9240] [client 80.48.31.37:54373] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tracytappan.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tracytappan.net"] [uri "/wp-json/wp/v2/users"] [unique_id "afdRFzLR5FGLNQI-DqWjCgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-05-01 10:19:43 (2 months ago)	[FriMay0112:19:30.6710702026][security2:error][pid3581079:tid3581091][client80.48.31.37:0]ModSecurit ... show more [FriMay0112:19:30.6710702026][security2:error][pid3581079:tid3581091][client80.48.31.37:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"life-live.ch\"][uri\"/xmlrpc.php\"][unique_id\"afR-MtmQUzTi1XbmU2lmkQAAAEk\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-01 09:49:14 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 80.48.31.37 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 80.48.31.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 05:49:00.045961 2026] [security2:error] [pid 23892:tid 23892] [client 80.48.31.37:63210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kobraagencies.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kobraagencies.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afR3DI7_SwcumTUGt7--cAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-04-29 15:19:44 (2 months ago)	[WedApr2917:19:29.0921812026][security2:error][pid1647790:tid1647801][client80.48.31.37:0]ModSecurit ... show more [WedApr2917:19:29.0921812026][security2:error][pid1647790:tid1647801][client80.48.31.37:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"hdcadvisory.ch\"][uri\"/xmlrpc.php\"][unique_id\"afIhgUSE9Rn0DxSV7Sc7fAAAAMA\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-04-29 15:01:30 (2 months ago)	[WedApr2917:01:13.3648432026][security2:error][pid2018009:tid2018302][client80.48.31.37:0]ModSecurit ... show more [WedApr2917:01:13.3648432026][security2:error][pid2018009:tid2018302][client80.48.31.37:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gipfelbild.com\"][uri\"/xmlrpc.php\"][unique_id\"afIdOVD4uAJyjlvxdDXtRwAAAIo\"] show less	Hacking Web App Attack
Anonymous	2026-04-28 13:05:36 (2 months ago)	Fail2ban filtered ...	Web App Attack
Anonymous	2024-11-24 19:06:08 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.32.209.254

🇬🇧 45.61.173.86

🇨🇳 14.103.91.55

🇸🇦 212.215.233.38

🇵🇱 194.180.48.41

🇮🇹 185.197.8.234

🇧🇷 179.191.82.115

🇩🇪 167.94.146.55

🇺🇸 150.107.38.213

🇺🇸 144.172.114.132

🇺🇸 138.199.42.156

🇮🇩 118.99.114.224

🇨🇳 117.81.212.152

🇧🇩 103.100.235.101

🇭🇰 45.142.154.110

🇺🇸 20.40.218.197

🇭🇰 8.210.24.94

🇺🇸 3.95.31.42

🇮🇳 2001:4490:4e71:dc22:98e9:c040:c00:fdf4

🇸🇰 217.12.56.107