Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 34.52.197.52:
This IP address has been reported a total of
126
times from
116 distinct
sources.
34.52.197.52 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 26
reports;
Germany
with 22
reports;
France
with 12
reports.
The most common categories in these recent reports were:
SSH
113
times;
Brute-Force
106
times;
Port Scan
20
times;
Hacking
8
times;
Exploited Host
3
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-15T02:38:39.170839-05:00 whangaparaoa.com sshd-session[435039]: pam_unix(sshd:auth): authent ...
show more2026-09-15T02:38:39.170839-05:00 whangaparaoa.com sshd-session[435039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.52.197.52
2026-09-15T02:38:40.908153-05:00 whangaparaoa.com sshd-session[435039]: Failed password for invalid user admin from 34.52.197.52 port 25274 ssh2
2026-09-15T02:38:44.670604-05:00 whangaparaoa.com sshd-session[435039]: error: PAM: Authentication failure for illegal user admin from 34.52.197.52
2026-09-15T02:38:44.672439-05:00 whangaparaoa.com sshd-session[435039]: Failed keyboard-interactive/pam for invalid user admin from 34.52.197.52 port 25274 ssh2
...
show less
SSH authentication attack detected by honeypot [Vlux-Sensor-09] on port 22
• Observed: 2026-09-15T07 ...
show moreSSH authentication attack detected by honeypot [Vlux-Sensor-09] on port 22
• Observed: 2026-09-15T07:36:39.650Z
• Number of login attempts: 1
• Source ports: 62732, 62738
• Client: SSH-2.0-Fingerprintx-SSH2
• HASSH: dde267e50f82fcc16a7e1e7b59b8af71
• Submitted by Vlux-Sensor-09
show less
2026-09-15T15:35:18.595350+08:00 vmi996132.contaboserver.net sshd[1467637]: Invalid user oyzmd from ...
show more2026-09-15T15:35:18.595350+08:00 vmi996132.contaboserver.net sshd[1467637]: Invalid user oyzmd from 34.52.197.52 port 41436
2026-09-15T15:35:18.792435+08:00 vmi996132.contaboserver.net sshd[1467637]: Connection closed by invalid user oyzmd 34.52.197.52 port 41436 [preauth]
2026-09-15T15:35:19.759742+08:00 vmi996132.contaboserver.net sshd[1467660]: Unable to negotiate with 34.52.197.52 port 41450: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
...
show less
Cowrie SSH/telnet honeypot detected 37 events from this IP. Automated brute-force / credential-stuff ...
show moreCowrie SSH/telnet honeypot detected 37 events from this IP. Automated brute-force / credential-stuffing activity observed.
show less
2026-09-15 07:13:58: Port scan detected from 34.52.197.52 on port 22 of racknerd-e7e1a9
Port Scan
SSH
Anonymous
SSH Brute Force (3 attempts). Evidence: sshd[217531]: Invalid user admin from 34.52.197.52 port 8032 ...
show moreSSH Brute Force (3 attempts). Evidence: sshd[217531]: Invalid user admin from 34.52.197.52 port 8032;sshd[217531]: Connection closed by invalid user admin 34.52.197.52 port 8032 [preauth]
show less
2026-09-15T08:03:47.160381+01:00 naomi sshd[399152]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-09-15T08:03:47.160381+01:00 naomi sshd[399152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.52.197.52
2026-09-15T08:03:49.176896+01:00 naomi sshd[399152]: Failed password for invalid user admin from 34.52.197.52 port 62548 ssh2
2026-09-15T08:03:50.069692+01:00 naomi sshd[399152]: Connection closed by invalid user admin 34.52.197.52 port 62548 [preauth]
...
show less
2026-09-15T07:51:10.796857+01:00 akvorado sshd-session[1903681]: Unable to negotiate with 34.52.197. ...
show more2026-09-15T07:51:10.796857+01:00 akvorado sshd-session[1903681]: Unable to negotiate with 34.52.197.52 port 19530: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-09-15T07:51:11.050022+01:00 akvorado sshd-session[1903683]: Unable to negotiate with 34.52.197.52 port 19544: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-09-15T07:51:11.304518+01:00 akvorado sshd-session[1903685]: Unable to negotiate with 34.52.197.52 port 19546: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group
...
show less
