Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 85.203.54.48
This IP address has been reported a total of
7
times from
5 distinct
sources.
85.203.54.48 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Australia
with 2
reports;
Czechia
with 2
reports;
Spain
with 1
report.
The most common categories in these recent reports were:
Brute-Force
4
times;
Web App Attack
4
times;
Hacking
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unauthorized VPN login attempts: 1 attempts were recorded from 85.203.54.48
2026-09-20T20:44:10+02:0 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 85.203.54.48
2026-09-20T20:44:10+02:00 vpn Access-Reject 'cyril' station: 85.203.54.48 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Honeypot detection: Cisco ASA exploit attempt. 2 events observed. Reported automatically from a hone ...
show moreHoneypot detection: Cisco ASA exploit attempt. 2 events observed. Reported automatically from a honeypot sensor.
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 85.203.54.48
2026-09-20T14:00:55+02:0 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 85.203.54.48
2026-09-20T14:00:55+02:00 vpn Access-Reject 'doris' station: 85.203.54.48 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Sophos XGS VPN portal credential stuffing: 18 failed authentication attempts across 13 distinct user ...
show moreSophos XGS VPN portal credential stuffing: 18 failed authentication attempts across 13 distinct usernames over 6 separate days since 2026-09-09. Low-and-slow distributed attack.
show less
Blocked by UFW (TCP on 27278)
Source port: 63873
TTL: 117
Packet length: 52
TOS: 0x08
This report ( ...
show moreBlocked by UFW (TCP on 27278)
Source port: 63873
TTL: 117
Packet length: 52
TOS: 0x08
This report (for 85.203.54.48) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
