Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Mexico

Internet Service Provider: Planeta Local Mexico SA de CV

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
Sep 27 22:41:26 ajax sshd[26402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34 
Sep 27 22:41:29 ajax sshd[26402]: Failed password for invalid user student8 from 200.52.80.34 port 39824 ssh2
2020-09-28 07:05:03
attackspambots
Invalid user admin from 200.52.80.34 port 35086
2020-09-27 23:32:53
attack
$f2bV_matches
2020-09-27 15:34:15
attackspam
Sep 17 23:44:47 ns3033917 sshd[24459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Sep 17 23:44:47 ns3033917 sshd[24459]: Invalid user chef from 200.52.80.34 port 56562
Sep 17 23:44:50 ns3033917 sshd[24459]: Failed password for invalid user chef from 200.52.80.34 port 56562 ssh2
...
2020-09-18 20:35:14
attackbotsspam
Sep 17 23:44:47 ns3033917 sshd[24459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Sep 17 23:44:47 ns3033917 sshd[24459]: Invalid user chef from 200.52.80.34 port 56562
Sep 17 23:44:50 ns3033917 sshd[24459]: Failed password for invalid user chef from 200.52.80.34 port 56562 ssh2
...
2020-09-18 12:53:41
attack
2020-09-18T00:52:28.873063billing sshd[22326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-09-18T00:52:28.861870billing sshd[22326]: Invalid user vmail from 200.52.80.34 port 46166
2020-09-18T00:52:30.658972billing sshd[22326]: Failed password for invalid user vmail from 200.52.80.34 port 46166 ssh2
...
2020-09-18 03:09:01
attack
Sep 14 15:18:45 ip106 sshd[23721]: Failed password for root from 200.52.80.34 port 37052 ssh2
...
2020-09-14 21:34:11
attackspambots
(sshd) Failed SSH login from 200.52.80.34 (MX/Mexico/Mexico City/Mexico City (Jardines del Pedregal)/34.80.52.200.in-addr.arpa): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 14 00:43:33 atlas sshd[22638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
Sep 14 00:43:35 atlas sshd[22638]: Failed password for root from 200.52.80.34 port 50264 ssh2
Sep 14 00:51:15 atlas sshd[24688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
Sep 14 00:51:16 atlas sshd[24688]: Failed password for root from 200.52.80.34 port 46544 ssh2
Sep 14 00:55:30 atlas sshd[25695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
2020-09-14 13:27:38
attack
Sep  9 14:45:27 Ubuntu-1404-trusty-64-minimal sshd\[32510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
Sep  9 14:45:29 Ubuntu-1404-trusty-64-minimal sshd\[32510\]: Failed password for root from 200.52.80.34 port 38106 ssh2
Sep  9 14:58:02 Ubuntu-1404-trusty-64-minimal sshd\[7801\]: Invalid user invite from 200.52.80.34
Sep  9 14:58:02 Ubuntu-1404-trusty-64-minimal sshd\[7801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Sep  9 14:58:04 Ubuntu-1404-trusty-64-minimal sshd\[7801\]: Failed password for invalid user invite from 200.52.80.34 port 48376 ssh2
2020-09-14 05:26:41
attackspambots
Aug 25 23:01:42 nuernberg-4g-01 sshd[31487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34 
Aug 25 23:01:44 nuernberg-4g-01 sshd[31487]: Failed password for invalid user zf from 200.52.80.34 port 47804 ssh2
Aug 25 23:05:43 nuernberg-4g-01 sshd[32762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-08-26 05:19:52
attackspam
Aug 24 10:07:58 ip40 sshd[13217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34 
Aug 24 10:08:00 ip40 sshd[13217]: Failed password for invalid user dev from 200.52.80.34 port 51052 ssh2
...
2020-08-24 17:21:33
attackspambots
Invalid user felix from 200.52.80.34 port 43344
2020-08-19 15:05:21
attackbots
Aug 15 01:40:59 cosmoit sshd[3185]: Failed password for root from 200.52.80.34 port 52320 ssh2
2020-08-15 08:05:11
attack
Aug  1 14:24:46 lnxded64 sshd[10555]: Failed password for root from 200.52.80.34 port 37032 ssh2
Aug  1 14:29:00 lnxded64 sshd[11657]: Failed password for root from 200.52.80.34 port 44064 ssh2
2020-08-01 21:30:02
attack
Invalid user test from 200.52.80.34 port 45640
2020-07-31 18:26:13
attack
2020-07-29T19:03:36.373264sd-86998 sshd[44425]: Invalid user liukaili from 200.52.80.34 port 47728
2020-07-29T19:03:36.376582sd-86998 sshd[44425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-07-29T19:03:36.373264sd-86998 sshd[44425]: Invalid user liukaili from 200.52.80.34 port 47728
2020-07-29T19:03:38.225432sd-86998 sshd[44425]: Failed password for invalid user liukaili from 200.52.80.34 port 47728 ssh2
2020-07-29T19:06:38.660598sd-86998 sshd[44823]: Invalid user yeqian from 200.52.80.34 port 55470
...
2020-07-30 01:54:37
attackspambots
2020-07-10T12:44:00.759451lavrinenko.info sshd[11049]: Invalid user rufina from 200.52.80.34 port 45322
2020-07-10T12:44:00.767089lavrinenko.info sshd[11049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-07-10T12:44:00.759451lavrinenko.info sshd[11049]: Invalid user rufina from 200.52.80.34 port 45322
2020-07-10T12:44:03.227594lavrinenko.info sshd[11049]: Failed password for invalid user rufina from 200.52.80.34 port 45322 ssh2
2020-07-10T12:45:44.902068lavrinenko.info sshd[11124]: Invalid user scott from 200.52.80.34 port 39932
...
2020-07-10 17:56:25
attack
srv02 SSH BruteForce Attacks 22 ..
2020-06-30 01:25:49
attackspambots
Invalid user techuser from 200.52.80.34 port 35174
2020-06-24 14:39:12
attack
2020-06-22T13:10:24.438837randservbullet-proofcloud-66.localdomain sshd[16518]: Invalid user haiyan from 200.52.80.34 port 41586
2020-06-22T13:10:24.444726randservbullet-proofcloud-66.localdomain sshd[16518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-06-22T13:10:24.438837randservbullet-proofcloud-66.localdomain sshd[16518]: Invalid user haiyan from 200.52.80.34 port 41586
2020-06-22T13:10:25.804652randservbullet-proofcloud-66.localdomain sshd[16518]: Failed password for invalid user haiyan from 200.52.80.34 port 41586 ssh2
...
2020-06-23 00:36:15
attackbotsspam
Jun 20 06:10:36 lnxweb61 sshd[2680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-06-20 12:11:30
attackbots
Jun 18 08:40:53 NPSTNNYC01T sshd[13023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Jun 18 08:40:54 NPSTNNYC01T sshd[13023]: Failed password for invalid user postgres from 200.52.80.34 port 50816 ssh2
Jun 18 08:44:24 NPSTNNYC01T sshd[13368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
...
2020-06-19 00:17:12
attackbots
Jun 13 21:49:21 php1 sshd\[16863\]: Invalid user kfs from 200.52.80.34
Jun 13 21:49:21 php1 sshd\[16863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Jun 13 21:49:23 php1 sshd\[16863\]: Failed password for invalid user kfs from 200.52.80.34 port 57354 ssh2
Jun 13 21:51:13 php1 sshd\[17003\]: Invalid user kunakorn from 200.52.80.34
Jun 13 21:51:13 php1 sshd\[17003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-06-14 16:33:28
attackbots
$f2bV_matches
2020-06-13 15:56:38
attackbotsspam
May 29 08:27:10 Tower sshd[3915]: Connection from 43.227.67.215 port 44382 on 192.168.10.220 port 22 rdomain ""
May 29 08:27:14 Tower sshd[3915]: Failed password for root from 43.227.67.215 port 44382 ssh2
May 29 08:27:15 Tower sshd[3915]: Received disconnect from 43.227.67.215 port 44382:11: Bye Bye [preauth]
May 29 08:27:15 Tower sshd[3915]: Disconnected from authenticating user root 43.227.67.215 port 44382 [preauth]
May 30 03:07:57 Tower sshd[3915]: Connection from 200.52.80.34 port 47084 on 192.168.10.220 port 22 rdomain ""
May 30 03:07:58 Tower sshd[3915]: Failed password for root from 200.52.80.34 port 47084 ssh2
May 30 03:07:58 Tower sshd[3915]: Received disconnect from 200.52.80.34 port 47084:11: Bye Bye [preauth]
May 30 03:07:58 Tower sshd[3915]: Disconnected from authenticating user root 200.52.80.34 port 47084 [preauth]
2020-05-30 15:42:38
attack
2020-05-16T11:52:38.669503vivaldi2.tree2.info sshd[25522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-05-16T11:52:38.657953vivaldi2.tree2.info sshd[25522]: Invalid user noc from 200.52.80.34
2020-05-16T11:52:40.552490vivaldi2.tree2.info sshd[25522]: Failed password for invalid user noc from 200.52.80.34 port 43690 ssh2
2020-05-16T11:55:30.925000vivaldi2.tree2.info sshd[25657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
2020-05-16T11:55:32.421046vivaldi2.tree2.info sshd[25657]: Failed password for root from 200.52.80.34 port 47054 ssh2
...
2020-05-16 12:37:30
attackspam
$f2bV_matches
2020-05-03 04:04:12
attackbotsspam
2020-04-29T04:33:15.994674vivaldi2.tree2.info sshd[16213]: Invalid user hermit from 200.52.80.34
2020-04-29T04:33:16.009660vivaldi2.tree2.info sshd[16213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-04-29T04:33:15.994674vivaldi2.tree2.info sshd[16213]: Invalid user hermit from 200.52.80.34
2020-04-29T04:33:18.529495vivaldi2.tree2.info sshd[16213]: Failed password for invalid user hermit from 200.52.80.34 port 51434 ssh2
2020-04-29T04:37:20.582732vivaldi2.tree2.info sshd[16357]: Invalid user administrador from 200.52.80.34
...
2020-04-29 03:44:49
attack
(sshd) Failed SSH login from 200.52.80.34 (MX/Mexico/34.80.52.200.in-addr.arpa): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 28 08:47:55 amsweb01 sshd[30125]: User steam from 200.52.80.34 not allowed because not listed in AllowUsers
Apr 28 08:47:55 amsweb01 sshd[30125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=steam
Apr 28 08:47:56 amsweb01 sshd[30125]: Failed password for invalid user steam from 200.52.80.34 port 53158 ssh2
Apr 28 08:52:27 amsweb01 sshd[30650]: Invalid user jj from 200.52.80.34 port 47284
Apr 28 08:52:28 amsweb01 sshd[30650]: Failed password for invalid user jj from 200.52.80.34 port 47284 ssh2
2020-04-28 17:34:32
attackspam
SSH Bruteforce attack
2020-04-28 02:54:27
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.52.80.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17846
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.52.80.34.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072500 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 18:56:54 CST 2019
;; MSG SIZE  rcvd: 116
Host info
34.80.52.200.in-addr.arpa domain name pointer 34.80.52.200.in-addr.arpa.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
34.80.52.200.in-addr.arpa	name = 34.80.52.200.in-addr.arpa.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
163.172.192.210 attack
\[2019-08-09 13:55:41\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-09T13:55:41.735-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="09011972592277524",SessionID="0x7ff4d0160998",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.192.210/64997",ACLName="no_extension_match"
\[2019-08-09 13:59:55\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-09T13:59:55.852-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="08011972592277524",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.192.210/53072",ACLName="no_extension_match"
\[2019-08-09 14:03:59\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-09T14:03:59.226-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="07011972592277524",SessionID="0x7ff4d0160998",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.192.210/61606",ACL
2019-08-10 02:20:37
27.209.95.45 attack
Fail2Ban Ban Triggered
HTTP Exploit Attempt
2019-08-10 02:11:29
138.68.185.126 attackbots
Brute force SMTP login attempted.
...
2019-08-10 02:40:19
207.154.204.124 attackspam
Aug  9 14:06:29 xtremcommunity sshd\[26962\]: Invalid user user from 207.154.204.124 port 58882
Aug  9 14:06:29 xtremcommunity sshd\[26962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.204.124
Aug  9 14:06:31 xtremcommunity sshd\[26962\]: Failed password for invalid user user from 207.154.204.124 port 58882 ssh2
Aug  9 14:10:50 xtremcommunity sshd\[27156\]: Invalid user gpadmin from 207.154.204.124 port 53744
Aug  9 14:10:50 xtremcommunity sshd\[27156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.204.124
...
2019-08-10 02:21:36
122.195.200.148 attackbotsspam
Aug  9 14:46:58 TORMINT sshd\[10954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.195.200.148  user=root
Aug  9 14:46:59 TORMINT sshd\[10954\]: Failed password for root from 122.195.200.148 port 19852 ssh2
Aug  9 14:47:06 TORMINT sshd\[10961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.195.200.148  user=root
...
2019-08-10 02:50:33
62.97.242.146 attackbots
Automatic report - Port Scan Attack
2019-08-10 02:30:17
71.66.168.146 attackspambots
Automatic report - Banned IP Access
2019-08-10 02:05:36
106.12.125.139 attackspam
2019-08-09T17:36:38.419929abusebot-6.cloudsearch.cf sshd\[31075\]: Invalid user dong from 106.12.125.139 port 59348
2019-08-10 02:36:53
165.227.83.124 attack
Aug  9 20:33:38 mout sshd[21261]: Invalid user itmuser from 165.227.83.124 port 56392
2019-08-10 02:40:58
128.199.202.206 attackbots
$f2bV_matches
2019-08-10 02:27:14
165.22.98.112 attackspam
Aug 10 01:08:25 webhost01 sshd[8007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.98.112
Aug 10 01:08:27 webhost01 sshd[8007]: Failed password for invalid user tomcat from 165.22.98.112 port 39146 ssh2
...
2019-08-10 02:32:41
138.68.4.8 attackbots
Brute force SMTP login attempted.
...
2019-08-10 02:27:59
162.247.74.204 attackbotsspam
2019-08-09T18:15:22.684992abusebot-8.cloudsearch.cf sshd\[17984\]: Invalid user Administrator from 162.247.74.204 port 48978
2019-08-10 02:23:36
163.172.218.246 attackbotsspam
Automatic report - Banned IP Access
2019-08-10 02:31:56
138.68.3.141 attackspambots
Aug  9 17:43:01 MK-Soft-VM4 sshd\[13082\]: Invalid user gc from 138.68.3.141 port 59852
Aug  9 17:43:01 MK-Soft-VM4 sshd\[13082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.3.141
Aug  9 17:43:02 MK-Soft-VM4 sshd\[13082\]: Failed password for invalid user gc from 138.68.3.141 port 59852 ssh2
...
2019-08-10 02:29:30

Recently Reported IPs

36.82.5.47 85.97.189.115 103.57.9.131 189.73.176.43
177.44.17.181 108.172.169.45 45.40.243.225 34.239.94.61
86.14.118.227 201.183.225.114 37.205.8.166 167.86.121.132
112.104.29.193 195.201.218.173 112.222.83.89 74.67.236.187
102.165.50.123 93.142.14.113 150.245.107.249 103.159.66.42