Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Multiple SSH authentication failures from 52.254.85.5
2020-08-09 04:28:12
attackspam
Icarus honeypot on github
2020-07-22 00:38:33
attackbotsspam
Jul 16 19:20:54 ncomp sshd[31883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.254.85.5  user=root
Jul 16 19:20:56 ncomp sshd[31883]: Failed password for root from 52.254.85.5 port 57064 ssh2
Jul 16 19:57:33 ncomp sshd[32601]: Invalid user admin from 52.254.85.5
2020-07-17 05:37:06
attackbotsspam
Invalid user admin from 52.254.85.5 port 40862
2020-07-16 07:08:46
attackspam
SSH Invalid Login
2020-07-16 06:01:04
attackbots
Jul 14 16:49:20 www sshd\[38002\]: Invalid user zerowaste.fi from 52.254.85.5
Jul 14 16:49:20 www sshd\[38002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.254.85.5
Jul 14 16:49:20 www sshd\[38003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.254.85.5  user=zerowaste
...
2020-07-14 23:43:34
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.254.85.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25783
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.254.85.5.			IN	A

;; AUTHORITY SECTION:
.			429	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071400 1800 900 604800 86400

;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 14 23:43:25 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 5.85.254.52.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.85.254.52.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
193.194.77.194 attack
2019-12-08T18:41:36.155071abusebot-4.cloudsearch.cf sshd\[17179\]: Invalid user ssh from 193.194.77.194 port 51802
2019-12-09 02:49:03
148.70.159.181 attackspam
Dec  8 19:59:23 sauna sshd[25285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.159.181
Dec  8 19:59:26 sauna sshd[25285]: Failed password for invalid user wigand from 148.70.159.181 port 40252 ssh2
...
2019-12-09 02:08:22
218.234.206.107 attackspambots
Dec  8 08:18:51 hanapaa sshd\[12967\]: Invalid user wiker from 218.234.206.107
Dec  8 08:18:51 hanapaa sshd\[12967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.234.206.107
Dec  8 08:18:53 hanapaa sshd\[12967\]: Failed password for invalid user wiker from 218.234.206.107 port 40166 ssh2
Dec  8 08:26:16 hanapaa sshd\[13732\]: Invalid user tolya from 218.234.206.107
Dec  8 08:26:16 hanapaa sshd\[13732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.234.206.107
2019-12-09 02:26:21
113.53.202.146 attackbots
Unauthorised access (Dec  8) SRC=113.53.202.146 LEN=48 TTL=116 ID=27066 DF TCP DPT=445 WINDOW=8192 SYN
2019-12-09 02:06:55
202.91.9.10 attack
Dec  7 22:04:58 lvps92-51-164-246 sshd[9530]: Invalid user francisco from 202.91.9.10
Dec  7 22:04:58 lvps92-51-164-246 sshd[9530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.91.9.10 
Dec  7 22:04:59 lvps92-51-164-246 sshd[9530]: Failed password for invalid user francisco from 202.91.9.10 port 42634 ssh2
Dec  7 22:04:59 lvps92-51-164-246 sshd[9530]: Received disconnect from 202.91.9.10: 11: Bye Bye [preauth]
Dec  7 22:16:32 lvps92-51-164-246 sshd[9847]: Invalid user lisa from 202.91.9.10
Dec  7 22:16:32 lvps92-51-164-246 sshd[9847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.91.9.10 
Dec  7 22:16:33 lvps92-51-164-246 sshd[9847]: Failed password for invalid user lisa from 202.91.9.10 port 59472 ssh2
Dec  7 22:16:33 lvps92-51-164-246 sshd[9847]: Received disconnect from 202.91.9.10: 11: Bye Bye [preauth]
Dec  7 22:22:58 lvps92-51-164-246 sshd[10018]: Invalid user user from 20........
-------------------------------
2019-12-09 02:12:21
191.241.242.10 attackbotsspam
Unauthorized connection attempt detected from IP address 191.241.242.10 to port 445
2019-12-09 02:35:23
103.54.28.244 attackspambots
Dec  8 17:38:39 server sshd\[27135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.54.28.244  user=mysql
Dec  8 17:38:41 server sshd\[27135\]: Failed password for mysql from 103.54.28.244 port 37822 ssh2
Dec  8 17:53:41 server sshd\[31208\]: Invalid user news from 103.54.28.244
Dec  8 17:53:41 server sshd\[31208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.54.28.244 
Dec  8 17:53:43 server sshd\[31208\]: Failed password for invalid user news from 103.54.28.244 port 41916 ssh2
...
2019-12-09 02:42:02
129.226.188.41 attack
SSH invalid-user multiple login attempts
2019-12-09 02:43:19
118.97.67.114 attackspam
Dec  8 19:35:05 sauna sshd[24408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.97.67.114
Dec  8 19:35:08 sauna sshd[24408]: Failed password for invalid user asterisk from 118.97.67.114 port 47758 ssh2
...
2019-12-09 02:30:43
46.101.72.145 attackspambots
Dec  8 12:41:41 ny01 sshd[2622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.72.145
Dec  8 12:41:43 ny01 sshd[2622]: Failed password for invalid user garrik from 46.101.72.145 port 52892 ssh2
Dec  8 12:47:16 ny01 sshd[3198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.72.145
2019-12-09 02:26:09
49.88.112.112 attack
Dec  8 18:59:26 MK-Soft-Root2 sshd[15338]: Failed password for root from 49.88.112.112 port 37045 ssh2
Dec  8 18:59:30 MK-Soft-Root2 sshd[15338]: Failed password for root from 49.88.112.112 port 37045 ssh2
...
2019-12-09 02:31:49
54.39.51.31 attack
$f2bV_matches
2019-12-09 02:37:46
112.85.42.179 attackspam
Dec  8 19:28:32 ks10 sshd[5459]: Failed password for root from 112.85.42.179 port 59791 ssh2
Dec  8 19:28:35 ks10 sshd[5459]: Failed password for root from 112.85.42.179 port 59791 ssh2
...
2019-12-09 02:32:56
103.250.36.113 attackbots
Dec  8 13:05:41 plusreed sshd[30910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.250.36.113  user=root
Dec  8 13:05:43 plusreed sshd[30910]: Failed password for root from 103.250.36.113 port 34369 ssh2
...
2019-12-09 02:22:18
134.209.75.77 attack
Dec  8 13:34:37 plusreed sshd[6081]: Invalid user watte from 134.209.75.77
...
2019-12-09 02:45:57

Recently Reported IPs

144.250.128.26 165.175.249.184 6.11.127.218 84.238.112.177
160.216.219.14 252.236.187.241 233.5.120.187 45.132.227.40
114.70.229.30 85.228.151.172 13.66.23.211 114.33.194.221
104.227.121.35 104.211.183.42 211.192.73.233 104.41.48.168
223.205.219.208 20.185.69.153 41.40.135.109 20.48.49.119