AbuseIPDB » 192.34.61.56

192.34.61.56 was found in our database!

This IP was reported 313 times. Confidence of Abuse is 18%: ?

18%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 192.34.61.56

Whois 192.34.61.56

IP Abuse Reports for 192.34.61.56:

This IP address has been reported a total of 313 times from 157 distinct sources. 192.34.61.56 was first reported on October 19th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Cynar & Cinny	2025-02-19 16:22:31 (3 weeks ago)	ufw_block_log	Port Scan
RAP	2025-02-19 06:02:47 (1 month ago)	2025-02-19 06:02:47 UTC Unauthorized activity to TCP port 9200.	Port Scan
MPL	2025-02-16 22:02:58 (1 month ago)	tcp/3306 (2 or more attempts)	Port Scan
MPL	2025-02-16 21:15:45 (1 month ago)	tcp/1244 (2 or more attempts)	Port Scan
MF Network	2025-02-11 07:04:37 (1 month ago)	Bad Calls: Webpage scraping, Web App Attack	Bad Web Bot Exploited Host Web App Attack
MPL	2025-02-11 06:49:20 (1 month ago)	tcp/6000	Port Scan
abusiveIntelligence	2024-09-18 17:00:00 (6 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force
GoodOldTOS	2024-09-18 00:48:15 (6 months ago)	Connection to mysql honeypot	Hacking
JCB	2024-02-11 17:16:18 (1 year ago)	192.34.61.56 - - [11/Feb/2024:05:35:10 +0200] "\x16\x03\x01" 400 438 "-" "-" 192.34.61.56 - - ... show more192.34.61.56 - - [11/Feb/2024:05:35:10 +0200] "\x16\x03\x01" 400 438 "-" "-" 192.34.61.56 - - [11/Feb/2024:05:35:10 +0200] "\x16\x03\x01" 400 438 "-" "-" 192.34.61.56 - - [11/Feb/2024:05:35:11 +0200] "GET /form.html HTTP/1.1" 404 387 "-" "curl/8.1.2" ... show less	Hacking Brute-Force Web App Attack
Block_Steady_Crew	2024-02-11 06:10:21 (1 year ago)	Honeypot snared from 192.34.61.56	Port Scan Web App Attack
WhiteFireOCN1	2024-02-11 04:55:54 (1 year ago)	11 unauthorized connection attempts to port 80 HTTP GET to / from 192[.]34[.]61[.]56:35826 - 2 ... show more11 unauthorized connection attempts to port 80 HTTP GET to / from 192[.]34[.]61[.]56:35826 - 2024-02-11T04:52:47 HTTP GET to /form[.]html from 192[.]34[.]61[.]56:35838 - 2024-02-11T04:52:48 HTTP GET to /upl[.]php from 192[.]34[.]61[.]56:59492 - 2024-02-11T04:52:49 HTTP GET to /geoip/ from 192[.]34[.]61[.]56:59508 - 2024-02-11T04:52:49 HTTP GET to /favicon[.]ico from 192[.]34[.]61[.]56:59514 - 2024-02-11T04:52:49 HTTP GET to /1[.]php from 192[.]34[.]61[.]56:59516 - 2024-02-11T04:52:50 HTTP GET to /bundle[.]js from 192[.]34[.]61[.]56:59530 - 2024-02-11T04:52:50 HTTP GET to /files/ from 192[.]34[.]61[.]56:59544 - 2024-02-11T04:52:51 show less	Port Scan Hacking Web App Attack
archiv-pm	2024-02-11 03:20:40 (1 year ago)	Probing for resource vulnerabilities	Web App Attack
www.blocklist.de	2023-10-22 16:03:47 (1 year ago)	Lines containing failures of 192.34.61.56 (max 1000) Oct 19 07:35:12 v26 sshd[4139482]: AD use ... show moreLines containing failures of 192.34.61.56 (max 1000) Oct 19 07:35:12 v26 sshd[4139482]: AD user Robert from 192.34.61.56 port 44042 Oct 19 07:35:12 v26 sshd[4139482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.34.61.56 Oct 19 07:35:14 v26 sshd[4139482]: Failed password for AD user Robert from 192.34.61.56 port 44042 ssh2 Oct 19 07:35:15 v26 sshd[4139482]: Received disconnect from 192.34.61.56 port 44042:11: Bye Bye [preauth] Oct 19 07:35:15 v26 sshd[4139482]: Disconnected from AD user Robert 192.34.61.56 port 44042 [preauth] Oct 19 07:38:34 v26 sshd[4139649]: AD user user from 192.34.61.56 port 44060 Oct 19 07:38:34 v26 sshd[4139649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.34.61.56 Oct 19 07:38:36 v26 sshd[4139649]: Failed password for AD user user from 192.34.61.56 port 44060 ssh2 Oct 19 07:38:37 v26 sshd[4139649]: Received disconnect from 192.34.61.56 port 44060:11: ........ ------------------------------ show less	FTP Brute-Force Hacking
markk	2023-10-22 15:46:46 (1 year ago)	Oct 22 15:35:33 kepler sshd[827697]: Invalid user postgres from 192.34.61.56 port 45122 Oct 22 ... show moreOct 22 15:35:33 kepler sshd[827697]: Invalid user postgres from 192.34.61.56 port 45122 Oct 22 15:45:26 kepler sshd[828708]: Invalid user public from 192.34.61.56 port 56506 Oct 22 15:46:46 kepler sshd[828894]: Invalid user vps from 192.34.61.56 port 39748 ... show less	Brute-Force SSH
choseh	2023-10-22 15:46:12 (1 year ago)	Oct 22 17:43:26 cho sshd[3448583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreOct 22 17:43:26 cho sshd[3448583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.34.61.56 user=root Oct 22 17:43:28 cho sshd[3448583]: Failed password for root from 192.34.61.56 port 46420 ssh2 Oct 22 17:44:50 cho sshd[3448628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.34.61.56 user=root Oct 22 17:44:52 cho sshd[3448628]: Failed password for root from 192.34.61.56 port 46322 ssh2 Oct 22 17:46:11 cho sshd[3448699]: Invalid user public from 192.34.61.56 port 37376 ... show less	Brute-Force SSH