Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Mexico

Internet Service Provider: Planeta Local Mexico SA de CV

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
Sep 27 22:41:26 ajax sshd[26402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34 
Sep 27 22:41:29 ajax sshd[26402]: Failed password for invalid user student8 from 200.52.80.34 port 39824 ssh2
2020-09-28 07:05:03
attackspambots
Invalid user admin from 200.52.80.34 port 35086
2020-09-27 23:32:53
attack
$f2bV_matches
2020-09-27 15:34:15
attackspam
Sep 17 23:44:47 ns3033917 sshd[24459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Sep 17 23:44:47 ns3033917 sshd[24459]: Invalid user chef from 200.52.80.34 port 56562
Sep 17 23:44:50 ns3033917 sshd[24459]: Failed password for invalid user chef from 200.52.80.34 port 56562 ssh2
...
2020-09-18 20:35:14
attackbotsspam
Sep 17 23:44:47 ns3033917 sshd[24459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Sep 17 23:44:47 ns3033917 sshd[24459]: Invalid user chef from 200.52.80.34 port 56562
Sep 17 23:44:50 ns3033917 sshd[24459]: Failed password for invalid user chef from 200.52.80.34 port 56562 ssh2
...
2020-09-18 12:53:41
attack
2020-09-18T00:52:28.873063billing sshd[22326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-09-18T00:52:28.861870billing sshd[22326]: Invalid user vmail from 200.52.80.34 port 46166
2020-09-18T00:52:30.658972billing sshd[22326]: Failed password for invalid user vmail from 200.52.80.34 port 46166 ssh2
...
2020-09-18 03:09:01
attack
Sep 14 15:18:45 ip106 sshd[23721]: Failed password for root from 200.52.80.34 port 37052 ssh2
...
2020-09-14 21:34:11
attackspambots
(sshd) Failed SSH login from 200.52.80.34 (MX/Mexico/Mexico City/Mexico City (Jardines del Pedregal)/34.80.52.200.in-addr.arpa): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 14 00:43:33 atlas sshd[22638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
Sep 14 00:43:35 atlas sshd[22638]: Failed password for root from 200.52.80.34 port 50264 ssh2
Sep 14 00:51:15 atlas sshd[24688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
Sep 14 00:51:16 atlas sshd[24688]: Failed password for root from 200.52.80.34 port 46544 ssh2
Sep 14 00:55:30 atlas sshd[25695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
2020-09-14 13:27:38
attack
Sep  9 14:45:27 Ubuntu-1404-trusty-64-minimal sshd\[32510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
Sep  9 14:45:29 Ubuntu-1404-trusty-64-minimal sshd\[32510\]: Failed password for root from 200.52.80.34 port 38106 ssh2
Sep  9 14:58:02 Ubuntu-1404-trusty-64-minimal sshd\[7801\]: Invalid user invite from 200.52.80.34
Sep  9 14:58:02 Ubuntu-1404-trusty-64-minimal sshd\[7801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Sep  9 14:58:04 Ubuntu-1404-trusty-64-minimal sshd\[7801\]: Failed password for invalid user invite from 200.52.80.34 port 48376 ssh2
2020-09-14 05:26:41
attackspambots
Aug 25 23:01:42 nuernberg-4g-01 sshd[31487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34 
Aug 25 23:01:44 nuernberg-4g-01 sshd[31487]: Failed password for invalid user zf from 200.52.80.34 port 47804 ssh2
Aug 25 23:05:43 nuernberg-4g-01 sshd[32762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-08-26 05:19:52
attackspam
Aug 24 10:07:58 ip40 sshd[13217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34 
Aug 24 10:08:00 ip40 sshd[13217]: Failed password for invalid user dev from 200.52.80.34 port 51052 ssh2
...
2020-08-24 17:21:33
attackspambots
Invalid user felix from 200.52.80.34 port 43344
2020-08-19 15:05:21
attackbots
Aug 15 01:40:59 cosmoit sshd[3185]: Failed password for root from 200.52.80.34 port 52320 ssh2
2020-08-15 08:05:11
attack
Aug  1 14:24:46 lnxded64 sshd[10555]: Failed password for root from 200.52.80.34 port 37032 ssh2
Aug  1 14:29:00 lnxded64 sshd[11657]: Failed password for root from 200.52.80.34 port 44064 ssh2
2020-08-01 21:30:02
attack
Invalid user test from 200.52.80.34 port 45640
2020-07-31 18:26:13
attack
2020-07-29T19:03:36.373264sd-86998 sshd[44425]: Invalid user liukaili from 200.52.80.34 port 47728
2020-07-29T19:03:36.376582sd-86998 sshd[44425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-07-29T19:03:36.373264sd-86998 sshd[44425]: Invalid user liukaili from 200.52.80.34 port 47728
2020-07-29T19:03:38.225432sd-86998 sshd[44425]: Failed password for invalid user liukaili from 200.52.80.34 port 47728 ssh2
2020-07-29T19:06:38.660598sd-86998 sshd[44823]: Invalid user yeqian from 200.52.80.34 port 55470
...
2020-07-30 01:54:37
attackspambots
2020-07-10T12:44:00.759451lavrinenko.info sshd[11049]: Invalid user rufina from 200.52.80.34 port 45322
2020-07-10T12:44:00.767089lavrinenko.info sshd[11049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-07-10T12:44:00.759451lavrinenko.info sshd[11049]: Invalid user rufina from 200.52.80.34 port 45322
2020-07-10T12:44:03.227594lavrinenko.info sshd[11049]: Failed password for invalid user rufina from 200.52.80.34 port 45322 ssh2
2020-07-10T12:45:44.902068lavrinenko.info sshd[11124]: Invalid user scott from 200.52.80.34 port 39932
...
2020-07-10 17:56:25
attack
srv02 SSH BruteForce Attacks 22 ..
2020-06-30 01:25:49
attackspambots
Invalid user techuser from 200.52.80.34 port 35174
2020-06-24 14:39:12
attack
2020-06-22T13:10:24.438837randservbullet-proofcloud-66.localdomain sshd[16518]: Invalid user haiyan from 200.52.80.34 port 41586
2020-06-22T13:10:24.444726randservbullet-proofcloud-66.localdomain sshd[16518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-06-22T13:10:24.438837randservbullet-proofcloud-66.localdomain sshd[16518]: Invalid user haiyan from 200.52.80.34 port 41586
2020-06-22T13:10:25.804652randservbullet-proofcloud-66.localdomain sshd[16518]: Failed password for invalid user haiyan from 200.52.80.34 port 41586 ssh2
...
2020-06-23 00:36:15
attackbotsspam
Jun 20 06:10:36 lnxweb61 sshd[2680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-06-20 12:11:30
attackbots
Jun 18 08:40:53 NPSTNNYC01T sshd[13023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Jun 18 08:40:54 NPSTNNYC01T sshd[13023]: Failed password for invalid user postgres from 200.52.80.34 port 50816 ssh2
Jun 18 08:44:24 NPSTNNYC01T sshd[13368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
...
2020-06-19 00:17:12
attackbots
Jun 13 21:49:21 php1 sshd\[16863\]: Invalid user kfs from 200.52.80.34
Jun 13 21:49:21 php1 sshd\[16863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
Jun 13 21:49:23 php1 sshd\[16863\]: Failed password for invalid user kfs from 200.52.80.34 port 57354 ssh2
Jun 13 21:51:13 php1 sshd\[17003\]: Invalid user kunakorn from 200.52.80.34
Jun 13 21:51:13 php1 sshd\[17003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-06-14 16:33:28
attackbots
$f2bV_matches
2020-06-13 15:56:38
attackbotsspam
May 29 08:27:10 Tower sshd[3915]: Connection from 43.227.67.215 port 44382 on 192.168.10.220 port 22 rdomain ""
May 29 08:27:14 Tower sshd[3915]: Failed password for root from 43.227.67.215 port 44382 ssh2
May 29 08:27:15 Tower sshd[3915]: Received disconnect from 43.227.67.215 port 44382:11: Bye Bye [preauth]
May 29 08:27:15 Tower sshd[3915]: Disconnected from authenticating user root 43.227.67.215 port 44382 [preauth]
May 30 03:07:57 Tower sshd[3915]: Connection from 200.52.80.34 port 47084 on 192.168.10.220 port 22 rdomain ""
May 30 03:07:58 Tower sshd[3915]: Failed password for root from 200.52.80.34 port 47084 ssh2
May 30 03:07:58 Tower sshd[3915]: Received disconnect from 200.52.80.34 port 47084:11: Bye Bye [preauth]
May 30 03:07:58 Tower sshd[3915]: Disconnected from authenticating user root 200.52.80.34 port 47084 [preauth]
2020-05-30 15:42:38
attack
2020-05-16T11:52:38.669503vivaldi2.tree2.info sshd[25522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-05-16T11:52:38.657953vivaldi2.tree2.info sshd[25522]: Invalid user noc from 200.52.80.34
2020-05-16T11:52:40.552490vivaldi2.tree2.info sshd[25522]: Failed password for invalid user noc from 200.52.80.34 port 43690 ssh2
2020-05-16T11:55:30.925000vivaldi2.tree2.info sshd[25657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=root
2020-05-16T11:55:32.421046vivaldi2.tree2.info sshd[25657]: Failed password for root from 200.52.80.34 port 47054 ssh2
...
2020-05-16 12:37:30
attackspam
$f2bV_matches
2020-05-03 04:04:12
attackbotsspam
2020-04-29T04:33:15.994674vivaldi2.tree2.info sshd[16213]: Invalid user hermit from 200.52.80.34
2020-04-29T04:33:16.009660vivaldi2.tree2.info sshd[16213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-04-29T04:33:15.994674vivaldi2.tree2.info sshd[16213]: Invalid user hermit from 200.52.80.34
2020-04-29T04:33:18.529495vivaldi2.tree2.info sshd[16213]: Failed password for invalid user hermit from 200.52.80.34 port 51434 ssh2
2020-04-29T04:37:20.582732vivaldi2.tree2.info sshd[16357]: Invalid user administrador from 200.52.80.34
...
2020-04-29 03:44:49
attack
(sshd) Failed SSH login from 200.52.80.34 (MX/Mexico/34.80.52.200.in-addr.arpa): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 28 08:47:55 amsweb01 sshd[30125]: User steam from 200.52.80.34 not allowed because not listed in AllowUsers
Apr 28 08:47:55 amsweb01 sshd[30125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34  user=steam
Apr 28 08:47:56 amsweb01 sshd[30125]: Failed password for invalid user steam from 200.52.80.34 port 53158 ssh2
Apr 28 08:52:27 amsweb01 sshd[30650]: Invalid user jj from 200.52.80.34 port 47284
Apr 28 08:52:28 amsweb01 sshd[30650]: Failed password for invalid user jj from 200.52.80.34 port 47284 ssh2
2020-04-28 17:34:32
attackspam
SSH Bruteforce attack
2020-04-28 02:54:27
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.52.80.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17846
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.52.80.34.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072500 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 18:56:54 CST 2019
;; MSG SIZE  rcvd: 116
Host info
34.80.52.200.in-addr.arpa domain name pointer 34.80.52.200.in-addr.arpa.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
34.80.52.200.in-addr.arpa	name = 34.80.52.200.in-addr.arpa.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
115.84.112.98 attackspambots
Invalid user nextcloud from 115.84.112.98 port 42274
2019-09-15 01:30:51
58.65.136.170 attackspam
Sep 14 11:21:36 sshgateway sshd\[3917\]: Invalid user ec2-user from 58.65.136.170
Sep 14 11:21:36 sshgateway sshd\[3917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.65.136.170
Sep 14 11:21:38 sshgateway sshd\[3917\]: Failed password for invalid user ec2-user from 58.65.136.170 port 39121 ssh2
2019-09-15 01:16:51
193.112.23.129 attack
Sep 14 10:00:37 ny01 sshd[28234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.23.129
Sep 14 10:00:40 ny01 sshd[28234]: Failed password for invalid user shoutcast from 193.112.23.129 port 34444 ssh2
Sep 14 10:06:49 ny01 sshd[29251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.23.129
2019-09-15 01:31:26
62.110.66.66 attack
Sep 13 21:21:38 lcprod sshd\[19248\]: Invalid user testftp from 62.110.66.66
Sep 13 21:21:38 lcprod sshd\[19248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host66-66-static.110-62-b.business.telecomitalia.it
Sep 13 21:21:39 lcprod sshd\[19248\]: Failed password for invalid user testftp from 62.110.66.66 port 60300 ssh2
Sep 13 21:27:10 lcprod sshd\[19708\]: Invalid user jz from 62.110.66.66
Sep 13 21:27:10 lcprod sshd\[19708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host66-66-static.110-62-b.business.telecomitalia.it
2019-09-15 01:30:18
203.218.144.44 attack
HK - 1H : (27)  Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : HK 
 NAME ASN : ASN4760 
 
 IP : 203.218.144.44 
 
 CIDR : 203.218.128.0/19 
 
 PREFIX COUNT : 283 
 
 UNIQUE IP COUNT : 1705728 
 
 
 WYKRYTE ATAKI Z ASN4760 :  
  1H - 1 
  3H - 2 
  6H - 3 
 12H - 5 
 24H - 10 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery 
  https://help-dysk.pl
2019-09-15 02:03:35
123.207.142.31 attackspam
Sep 14 10:16:09 ny01 sshd[30778]: Failed password for root from 123.207.142.31 port 37494 ssh2
Sep 14 10:23:06 ny01 sshd[31964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.142.31
Sep 14 10:23:08 ny01 sshd[31964]: Failed password for invalid user amax from 123.207.142.31 port 58938 ssh2
2019-09-15 01:34:02
59.166.206.208 attack
port scan and connect, tcp 23 (telnet)
2019-09-15 01:53:44
203.110.166.51 attack
Invalid user git from 203.110.166.51 port 60547
2019-09-15 01:13:39
185.195.237.118 attackbots
Automatic report - Banned IP Access
2019-09-15 01:55:05
172.68.141.8 attackspambots
Sep 14 08:42:34 lenivpn01 kernel: \[676149.175015\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=172.68.141.8 DST=195.201.121.15 LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=57698 DF PROTO=TCP SPT=37510 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 
Sep 14 08:42:35 lenivpn01 kernel: \[676150.202556\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=172.68.141.8 DST=195.201.121.15 LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=57699 DF PROTO=TCP SPT=37510 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 
Sep 14 08:42:37 lenivpn01 kernel: \[676152.250571\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=172.68.141.8 DST=195.201.121.15 LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=57700 DF PROTO=TCP SPT=37510 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 
...
2019-09-15 02:07:37
85.219.185.50 attackspambots
Sep 13 21:10:00 web1 sshd\[23129\]: Invalid user profile from 85.219.185.50
Sep 13 21:10:00 web1 sshd\[23129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.219.185.50
Sep 13 21:10:02 web1 sshd\[23129\]: Failed password for invalid user profile from 85.219.185.50 port 57492 ssh2
Sep 13 21:14:00 web1 sshd\[23497\]: Invalid user user from 85.219.185.50
Sep 13 21:14:00 web1 sshd\[23497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.219.185.50
2019-09-15 02:14:07
77.246.101.46 attack
Sep 14 14:19:01 anodpoucpklekan sshd[31617]: Invalid user polkituser from 77.246.101.46 port 61332
...
2019-09-15 01:37:15
54.36.126.81 attackbotsspam
Sep 14 19:44:21 dedicated sshd[14231]: Invalid user md from 54.36.126.81 port 30820
2019-09-15 01:51:58
36.224.103.8 attack
port 23 attempt blocked
2019-09-15 02:14:52
112.85.42.238 attackspambots
$f2bV_matches
2019-09-15 02:08:48

Recently Reported IPs

36.82.5.47 85.97.189.115 103.57.9.131 189.73.176.43
177.44.17.181 108.172.169.45 45.40.243.225 34.239.94.61
86.14.118.227 201.183.225.114 37.205.8.166 167.86.121.132
112.104.29.193 195.201.218.173 112.222.83.89 74.67.236.187
102.165.50.123 93.142.14.113 150.245.107.249 103.159.66.42