JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

46.55.81.219

Recent Activity

Abuse Confidence Score

54% Elevated

21 reports

17 reporters · latest 51 minutes ago

ISP: JSC Moldtelecom S.A.
Usage Type: Fixed Line ISP
ASN: AS8926
Hostname(s): host-static-46-55-81-219.moldtelecom.md
Domain Name: moldtelecom.md
Country: 🇲🇩 Moldova (the Republic of)
City: Chisinau, Chisinau Municipality

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

21 from 17 distinct reporters

First reported

August 19th 2026

Most recent report

51 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 4 🇨🇿 Czechia 2

Most common categories Web App Attack 11 Brute-Force 8 Bad Web Bot 4 Hacking 3 Exploited Host 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-10-29 04:37:49 (51 minutes ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 TPI-Abuse	2026-10-28 10:14:52 (19 hours ago)	(mod_security) mod_security (id:225170) triggered by 46.55.81.219 (host-static-46-55-81-219.moldtelecom.md): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:14:48.109047 2026] [security2:error] [pid 6455:tid 6 ... show more (mod_security) mod_security (id:225170) triggered by 46.55.81.219 (host-static-46-55-81-219.moldtelecom.md): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:14:48.109047 2026] [security2:error] [pid 6455:tid 6455] [client 46.55.81.219:38002] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thenolangroup.llc\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thenolangroup.llc"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auHLGEKgQPgQ1oWCqzInoAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 11:55:37 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 46.55.81.219 (host-static-46-55-81-219.moldtelecom.md): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:55:29.919945 2026] [security2:error] [pid 18968:tid ... show more (mod_security) mod_security (id:225170) triggered by 46.55.81.219 (host-static-46-55-81-219.moldtelecom.md): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:55:29.919945 2026] [security2:error] [pid 18968:tid 18968] [client 46.55.81.219:39166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cienmalos.hodlmoser.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cienmalos.hodlmoser.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "at8_sXp6A0bALlY-MvwoYAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-10-21 02:26:44 (1 week ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-10-20 19:43:57 (1 week ago)	cloudlinux2 fail2ban: 2026-10-20 21:38:59,489 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 35.93.45.59 - 2026-10-20 21:38:59cloudlinux2 fail2ban: 2026-10-20 21:39:00,020 fail2ban.filter [1957]: INFO [plesk-modsecurity] ... show more cloudlinux2 fail2ban: 2026-10-20 21:38:59,489 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 35.93.45.59 - 2026-10-20 21:38:59cloudlinux2 fail2ban: 2026-10-20 21:39:00,020 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 35.93.45.59 - 2026-10-20 21:39:00cloudlinux2 fail2ban: 2026-10-20 21:39:00,355 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 35.93.45.59 - 2026-10-20 21:39:00cloudlinux2 fail2ban: 2026-10-20 21:39:00,185 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 35.93.45.59 - 2026-10-20 21:39:00cloudlinux2 fail2ban: 2026-10-20 21:39:00,367 fail2ban.actions [1957]: NOTICE [plesk-modsecurity] Ban 35.93.45.59cloudlinux2 fail2ban: 2026-10-20 21:38:59,851 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 35.93.45.59 - 2026-10-20 21:38:59cloudlinux2 fail2ban: 2026-10-20 21:39:00,369 fail2ban.filter [1957]: INFO [recidive] Found 35.93.45.59 - 2026-10-20 21:39:00cloudlinux2 fail2ban: 2026-10-20 21:39:48, show less	Web App Attack
🇩🇪 FeG Deutschland	2026-10-16 13:14:01 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
Anonymous	2026-10-14 19:03:00 (2 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇩🇪 Packets-Decreaser.NET	2026-10-11 01:56:23 (2 weeks ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇿 Countryman	2026-09-29 00:10:02 (1 month ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇺🇸 nationaleventpros.com	2026-09-25 05:43:26 (1 month ago)	WordPress login attempt	Brute-Force
🇩🇪 LRob	2026-09-24 19:09:24 (1 month ago)	This address sent web requests that have no legitimate reading: known exploit paths, path traversal, injected payloads, or the signature of a vulnerability scanner. This is an attack on the sites we host, blocked on sight. Please check the machine be ... show more This address sent web requests that have no legitimate reading: known exploit paths, path traversal, injected payloads, or the signature of a vulnerability scanner. This is an attack on the sites we host, blocked on sight. Please check the machine behind it for an attack tool or malware. \| method: GET \| path: /wp-login.php \| 2026-09-24 19:09 UTC show less	Hacking Web App Attack
🇩🇪 maxpower	2026-09-17 14:32:47 (1 month ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 46.55.81.219 (MD/Moldova/host-static-46-55-81-219.moldtelecom.md): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 46.55.81.219 - - [17/Sep/2026:16:32:44 +020 ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 46.55.81.219 (MD/Moldova/host-static-46-55-81-219.moldtelecom.md): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 46.55.81.219 - - [17/Sep/2026:16:32:44 +0200] "GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 200 29 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "-" host=www.comprendoschool.it show less	Port Scan
🇲🇽 octageeks.com	2026-09-17 04:15:24 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 nationaleventpros.com	2026-09-13 08:43:33 (1 month ago)	WordPress login attempt	Brute-Force
🇺🇸 agenciahypelab.com.br	2026-09-12 09:10:27 (1 month ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇯🇵 223.134.89.104

🇺🇸 207.90.244.18

🇧🇴 190.129.122.185

🇧🇷 190.115.84.25

🇧🇷 177.191.117.191

🇺🇸 172.239.64.86

🇷🇴 92.118.39.211

🇷🇺 91.122.53.183

🇧🇬 79.124.49.70

🇳🇱 77.239.124.69

🇺🇸 64.62.197.28

🇯🇵 61.23.231.110

🇮🇹 5.89.75.194

🇰🇷 220.77.86.237

🇦🇷 190.105.115.62

🇲🇽 187.190.229.154

🇪🇨 186.68.83.105

🇵🇭 180.190.238.10

🇨🇦 154.5.130.14

🇺🇸 98.97.69.17