Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Multiple SSH authentication failures from 52.254.85.5
2020-08-09 04:28:12
attackspam
Icarus honeypot on github
2020-07-22 00:38:33
attackbotsspam
Jul 16 19:20:54 ncomp sshd[31883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.254.85.5  user=root
Jul 16 19:20:56 ncomp sshd[31883]: Failed password for root from 52.254.85.5 port 57064 ssh2
Jul 16 19:57:33 ncomp sshd[32601]: Invalid user admin from 52.254.85.5
2020-07-17 05:37:06
attackbotsspam
Invalid user admin from 52.254.85.5 port 40862
2020-07-16 07:08:46
attackspam
SSH Invalid Login
2020-07-16 06:01:04
attackbots
Jul 14 16:49:20 www sshd\[38002\]: Invalid user zerowaste.fi from 52.254.85.5
Jul 14 16:49:20 www sshd\[38002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.254.85.5
Jul 14 16:49:20 www sshd\[38003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.254.85.5  user=zerowaste
...
2020-07-14 23:43:34
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.254.85.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25783
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.254.85.5.			IN	A

;; AUTHORITY SECTION:
.			429	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071400 1800 900 604800 86400

;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 14 23:43:25 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 5.85.254.52.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.85.254.52.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.91.159.152 attackspam
Feb  7 16:33:14 legacy sshd[29176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.159.152
Feb  7 16:33:16 legacy sshd[29176]: Failed password for invalid user kuo from 51.91.159.152 port 46732 ssh2
Feb  7 16:36:17 legacy sshd[29366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.159.152
...
2020-02-08 03:02:07
77.247.181.163 attackspam
ET COMPROMISED Known Compromised or Hostile Host Traffic group 21 - port: 2791 proto: UDP cat: Misc Attack
2020-02-08 02:46:14
138.68.243.208 attackspam
Unauthorized connection attempt detected from IP address 138.68.243.208 to port 22
2020-02-08 03:12:39
185.175.93.19 attackspambots
Feb  7 19:50:23 debian-2gb-nbg1-2 kernel: \[3360664.823334\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.19 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=7227 PROTO=TCP SPT=59061 DPT=5922 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-08 02:55:18
107.181.174.74 attackspam
Automatic report - SSH Brute-Force Attack
2020-02-08 02:45:16
187.167.64.13 attackbots
Automatic report - Port Scan Attack
2020-02-08 02:44:31
69.94.158.109 attackspambots
Feb  7 15:04:32 grey postfix/smtpd\[21917\]: NOQUEUE: reject: RCPT from queue.swingthelamp.com\[69.94.158.109\]: 554 5.7.1 Service unavailable\; Client host \[69.94.158.109\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.158.109\]\; from=\ to=\ proto=ESMTP helo=\Feb  7 15:04:32 grey postfix/smtpd\[22902\]: NOQUEUE: reject: RCPT from queue.swingthelamp.com\[69.94.158.109\]: 554 5.7.1 Service unavailable\; Client host \[69.94.158.109\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.158.109\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-08 02:59:57
1.160.198.226 attack
Unauthorized connection attempt from IP address 1.160.198.226 on Port 445(SMB)
2020-02-08 03:28:37
80.82.77.245 attackbots
80.82.77.245 was recorded 29 times by 12 hosts attempting to connect to the following ports: 1718,1794,1154. Incident counter (4h, 24h, all-time): 29, 148, 20136
2020-02-08 02:52:59
200.48.163.185 attackbotsspam
Honeypot attack, port: 81, PTR: PTR record not found
2020-02-08 03:07:28
61.238.143.138 attackbots
Honeypot attack, port: 445, PTR: 061238143138.ctinets.com.
2020-02-08 03:04:08
69.94.158.104 attackspambots
Feb  7 15:04:30 grey postfix/smtpd\[21917\]: NOQUEUE: reject: RCPT from shock.swingthelamp.com\[69.94.158.104\]: 554 5.7.1 Service unavailable\; Client host \[69.94.158.104\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.158.104\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-08 03:01:46
118.232.97.255 attackbotsspam
Honeypot attack, port: 81, PTR: PTR record not found
2020-02-08 03:13:46
51.77.112.53 attackspam
$f2bV_matches
2020-02-08 03:14:21
205.185.115.126 attack
20/2/7@09:04:42: FAIL: Alarm-Network address from=205.185.115.126
...
2020-02-08 02:50:25

Recently Reported IPs

144.250.128.26 165.175.249.184 6.11.127.218 84.238.112.177
160.216.219.14 252.236.187.241 233.5.120.187 45.132.227.40
114.70.229.30 85.228.151.172 13.66.23.211 114.33.194.221
104.227.121.35 104.211.183.42 211.192.73.233 104.41.48.168
223.205.219.208 20.185.69.153 41.40.135.109 20.48.49.119