JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

89.34.68.5

Recent Activity

Abuse Confidence Score

55% Elevated

25 reports

15 reporters · latest 2 days ago

ISP: JSC Moldtelecom S.A.
Usage Type: Fixed Line ISP
ASN: AS8926
Hostname(s): host-static-89-34-68-5.moldtelecom.md
Domain Name: moldtelecom.md
Country: 🇲🇩 Moldova (the Republic of)
City: Chisinau, Chisinau Municipality

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

25 from 15 distinct reporters

First reported

August 18th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇲🇽 Mexico 5 🇫🇷 France 3

Most common categories Web App Attack 17 Brute-Force 8 Bad Web Bot 3 Exploited Host 2 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-11-09 15:16:17 UTC · (2 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 agenciahypelab.com.br	2026-11-06 11:26:26 UTC · (5 days ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-11-01 23:25:59 UTC · (1 week ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-10-31 23:25:08 UTC · (1 week ago)		Brute-Force Web App Attack
🇩🇪 stinpriza	2026-10-31 12:53:12 UTC · (1 week ago)	WP Authentication attempt for unknown user	Brute-Force Web App Attack
🇨🇿 lp	2026-10-31 11:33:10 UTC · (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 89.34.68.5 2026-10-31T12:21:48+0100 vpn Access-Reject station: 89.34.68.5	Brute-Force Web App Attack
🇬🇧 gigatech	2026-10-31 11:05:16 UTC · (1 week ago)	Webserver Probing	Web App Attack
🇩🇪 LRob	2026-10-29 15:19:08 UTC · (1 week ago)	Web exploit attempt \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| 2026-10-29 15:19 UTC	Hacking Web App Attack
🇺🇸 dtorrer	2026-10-17 16:08:41 UTC · (3 weeks ago)	Forged login request.	Brute-Force
🇺🇸 TPI-Abuse	2026-10-17 11:53:25 UTC · (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 89.34.68.5 (host-static-89-34-68-5.moldtelecom.md): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 07:53:17.784042 2026] [security2:error] [pid 26153:tid 2615 ... show more (mod_security) mod_security (id:225170) triggered by 89.34.68.5 (host-static-89-34-68-5.moldtelecom.md): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 07:53:17.784042 2026] [security2:error] [pid 26153:tid 26153] [client 89.34.68.5:41661] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|fusionrep.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fusionrep.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNhrQacx_MGg3cYcyVmmwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-10-16 13:09:12 UTC · (3 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇲🇽 octageeks.com	2026-10-02 04:24:26 UTC · (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇽 octageeks.com	2026-10-01 04:22:54 UTC · (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 debaba	2026-09-29 08:11:07 UTC · (1 month ago)	aktiv [29/Sep/2026:08:11:05.426447 +0000] artymWV8c_LjrK27ejL-uAAAAEo 89.34.68.5 42250 127.0.0.1 7081 [29/Sep/2026:08:11:05.986752 +0000] artymbZjkYKokUcE1F ...	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-24 11:20:23 UTC · (1 month ago)	This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. \| method: GET \| path: /wp-login.php \| 2026-09-24 11:20 UTC show less	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 198.98.58.199

🇻🇳 171.237.170.148

🇷🇺 89.109.46.107

🇺🇸 40.124.117.28

🇺🇸 189.104.63.86

🇺🇸 185.102.112.209

🇺🇸 153.75.226.220

🇫🇷 109.208.163.122

🇫🇷 91.231.89.225

🇩🇪 51.89.71.154

🇩🇪 51.89.69.101

🇬🇧 134.209.189.220

🇬🇧 104.248.171.193

🇺🇸 72.56.165.44

🇵🇱 45.38.131.204

🇺🇸 2a03:2880:f814:e::

🇺🇸 206.232.2.59

🇸🇬 206.189.144.191

🇺🇸 173.230.128.21

🇺🇸 143.198.168.1