JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.203.34.112

159.203.34.112 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.203.34.112

Whois 159.203.34.112

IP Abuse Reports for 159.203.34.112:

This IP address has been reported a total of 63 times from 42 distinct sources. 159.203.34.112 was first reported on August 17th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 hostopya.com	2026-09-30 14:50:47 (2 hours ago)	[plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:17:40:32 +0300] "POST / ... show more [plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:17:40:32 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:17:40:32 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:17:40:32 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:17:40:33 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome show less	Brute-Force Web App Attack
🇹🇷 hostopya.com	2026-09-30 14:30:21 (2 hours ago)	[plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:17:20:07 +0300] "POST / ... show more [plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:17:20:07 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:17:20:08 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:17:20:08 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:17:20:08 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome show less	Brute-Force Web App Attack
🇹🇷 hostopya.com	2026-09-30 14:09:56 (2 hours ago)	[plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:16:59:43 +0300] "POST / ... show more [plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:16:59:43 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:59:43 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:59:44 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:59:44 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome show less	Brute-Force Web App Attack
🇹🇷 hostopya.com	2026-09-30 13:49:32 (3 hours ago)	[plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:16:39:17 +0300] "POST / ... show more [plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:16:39:17 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:39:18 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:39:18 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:39:18 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome show less	Brute-Force Web App Attack
🇹🇷 hostopya.com	2026-09-30 13:29:07 (3 hours ago)	[plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:16:18:52 +0300] "POST / ... show more [plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:16:18:52 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:18:52 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:18:53 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:18:53 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome show less	Brute-Force Web App Attack
🇹🇷 hostopya.com	2026-09-30 13:08:40 (3 hours ago)	[plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:16:08:38 +0300] "POST / ... show more [plesk-wordpress] 30 failed attempt(s). Log: 159.203.34.112 - - [30/Sep/2026:16:08:38 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:08:38 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:08:39 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"\|159.203.34.112 - - [30/Sep/2026:16:08:39 +0300] "POST //wp-login.php HTTP/1.1" 200 10164 "https://classmans.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome show less	Brute-Force Web App Attack
🇩🇪 4server	2026-09-30 09:18:39 (7 hours ago)	[WedSep3011:18:37.0235432026][security2:error][pid3524356:tid3524423][client159.203.34.112:0]ModSecu ... show more [WedSep3011:18:37.0235432026][security2:error][pid3524356:tid3524423][client159.203.34.112:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"arzT7ZEPmZDyyzT0jXhuFgAAAIM\"] show less	Port Scan Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-09-30 08:39:36 (8 hours ago)	[30/Sep/2026:11:39:36 +0300] -- 159.203.34.112 Ban reason: Scanner [CMS_GENERIC] \| Request: GET //wp ... show more [30/Sep/2026:11:39:36 +0300] -- 159.203.34.112 Ban reason: Scanner [CMS_GENERIC] \| Request: GET //wp-includes/wlwmanifest.xml HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 maxasp.net	2026-09-30 08:04:28 (8 hours ago)	Failed WP Login Attempts 5 DDoS Count 5	Brute-Force
🇩🇪 Lino Project	2026-09-30 05:21:12 (11 hours ago)	159.203.34.112 - - [30/Sep/2026:07:21:08 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 403 428 "-" "Mozilla ... show more 159.203.34.112 - - [30/Sep/2026:07:21:08 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 403 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-30 03:54:51 (13 hours ago)	(wordpress) Apache: Failed WordPress login from 159.203.34.112 (CA/Canada/-): 10 in the last 3600 se ... show more (wordpress) Apache: Failed WordPress login from 159.203.34.112 (CA/Canada/-): 10 in the last 3600 secs (0-196) show less	Hacking
🇸🇪 nekopavel	2026-09-30 01:34:29 (15 hours ago)	159.203.34.112 - - [30/Sep/2026:03:34:26 +0200]"GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 12421 ... show more 159.203.34.112 - - [30/Sep/2026:03:34:26 +0200]"GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 124218"-" mishashto.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36""0.531" "0.000""Toronto" "CA" 159.203.34.112 - - [30/Sep/2026:03:34:26 +0200]"GET /xmlrpc.php?rsd HTTP/1.1" 404 124179"-" mishashto.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36""0.133" "0.000""Toronto" "CA" 159.203.34.112 - - [30/Sep/2026:03:34:27 +0200]"GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 124233"-" mishashto.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36""0.114" "0.001""Toronto" "CA" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 PlexLads	2026-09-30 01:11:09 (15 hours ago)	159.203.34.112 - - [29/Sep/2026:18:11:07 -0700] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 867 ... show more 159.203.34.112 - - [29/Sep/2026:18:11:07 -0700] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 8678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 159.203.34.112 - - [29/Sep/2026:18:11:07 -0700] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 8678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 159.203.34.112 - - [29/Sep/2026:18:11:07 -0700] "GET //xmlrpc.php?rsd HTTP/1.1" 404 8678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 159.203.34.112 - - [29/Sep/2026:18:11:07 -0700] "GET //xmlrpc.php?rsd HTTP/1.1" 404 8678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 159.203.34.112 - - [29/Sep/2026:18:11:08 -0700] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 8678 "-" "Mozilla/5.0 (Windo ... show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-09-29 23:38:47 (17 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 applemooz	2026-09-29 19:57:41 (21 hours ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.157

🇬🇧 185.249.68.112

🇦🇹 185.119.119.192

🇧🇷 177.137.224.135

🇧🇷 177.10.203.106

🇳🇱 157.245.72.120

🇰🇷 220.117.241.220

🇧🇷 205.210.31.196

🇬🇧 193.8.186.31

🇳🇱 109.160.32.178

🇺🇸 108.59.244.5

🇧🇩 103.122.249.87

🇳🇱 89.124.123.208

🇺🇸 72.215.44.103

🇩🇪 64.89.163.164

🇳🇱 45.128.157.201

🇵🇪 38.253.145.151

🇺🇸 20.127.210.132

🇺🇸 18.204.152.114

🇺🇸 3.94.186.181