🇲🇩 Moldova: live cyber threat activity

Malicious IPs, malware and ransomware victims in Moldova.

85Malicious IPs listed#50 of 182 countries · 0.13% of the world
22New in the last 24hfirst seen by any feed
13Reported by 2+ feedsindependent sources agree
1Ransomware victimsposted in the last 30 days

View Moldova on the live map →All listed IPs in MoldovaRansomware victims in Moldova

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C217
  2. Malware36
  3. Phishing0
  4. Attacker32

By state or region

  1. Chișinău Municipality76
  2. Transnistria5
  3. Anenii Noi1
  4. Nisporeni1
  5. Gagauzia1
  6. Dubăsari District1

By city

  1. Chisinau74
  2. Tiraspol5
  3. Tohatin2
  4. Anenii Noi1
  5. Nisporeni1
  6. Comrat1
  7. Cocieri1

Networks hosting the most

NetworkIPs
AS39798 MivoCloud SRL 20
AS200019 ALEXHOST SRL 15
AS48753 AVA HOST SRL 12
AS201670 S.C. INFOTECH-GRUP S.R.L. 11
AS1547 Societatea mixta pe actiuni de tip inchis "Interdnestrcom" 6
AS43289 Trabia SRL 3
AS25454 ORANGE MOLDOVA S.A. 3
AS31252 StarNet Solutii SRL 2
AS207164 PRIMANET SRL 2
AS8926 Moldtelecom SA 2
AS211504 STUDIO AN-TV SRL 1
AS43768 OGUZSATLINK SRL 1
AS62013 Societatea Comerciala Click-COM SRL 1
AS209854 Cyberzone S.A. 1
AS31204 ORANGE MOLDOVA S.A. 1

Malware families served from Moldova

  1. PureRAT5
  2. Jackskid5
  3. Loki4
  4. AdaptixC22
  5. Crifi2
  6. Hook2
  7. Frzv1
  8. Redline1
  9. Remcos1
  10. Krypt1
  11. Zitirez1
  12. SmartLoader1
  13. Bladabindi1
  14. Gencbl1
  15. Nymeria1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
176.123.2[.]239MalwareContacted by malwareChisinau, Chișinău MunicipalityAS200019 ALEXHOST SRL1 feed · 71 sandbox samples2026-10-12 07:26
178.175.129[.]22AttackerAttacking hostChisinau, Chișinău MunicipalityAS43289 Trabia SRL1 feed2026-10-12 07:15
2001[:]67c[:]2db8[:]305[:][:]193AttackerMalicious IPChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed2026-10-12 04:35
89.149.105[.]100AttackerAttacking hostChisinau, Chișinău MunicipalityAS31204 ORANGE MOLDOVA S.A.2 feeds2026-10-12 04:35
94.158.246[.]117AttackerMalicious IPChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed2026-10-12 04:35
95.153.64[.]177AttackerMalicious IPTiraspol, TransnistriaAS1547 Societatea mixta pe actiuni de tip inchis "Interdnestrcom"1 feed2026-10-12 04:35
143.246.222[.]130MalwareMalicious URLChisinau, Chișinău MunicipalityAS200019 ALEXHOST SRLaggregated list2026-10-12 04:35
176.123.9[.]142MalwareCrifiChisinau, Chișinău MunicipalityAS200019 ALEXHOST SRL1 feed · 129 sandbox samples2026-10-12 03:30
176.123.9[.]85MalwareCrifiChisinau, Chișinău MunicipalityAS200019 ALEXHOST SRL1 feed · 40 sandbox samples2026-10-12 03:30
185.163.47[.]176MalwareZitirezChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 152 sandbox samples2026-10-12 01:47
5.181.156[.]221MalwareLockbitChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 29 sandbox samples2026-10-12 01:47
178.17.174[.]164AttackerTor exitChisinau, Chișinău MunicipalityAS43289 Trabia SRL2 feeds · 1 sandbox sample2026-10-11 17:05
185.163.45[.]90MalwareContacted by malwareChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 23 sandbox samples2026-10-11 15:48
5.181.156[.]229MalwareContacted by malwareChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 39 sandbox samples2026-10-11 15:16
5.181.156[.]252MalwareContacted by malwareChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 22 sandbox samples2026-10-11 14:59
5.181.156[.]120MalwareLokiChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 34 sandbox samples2026-10-11 14:27
94.158.245[.]173MalwareLokiChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 55 sandbox samples2026-10-11 14:27
185.163.45[.]70MalwareKryptChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 45 sandbox samples2026-10-11 12:06
94.158.245[.]167MalwareDacicChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 39 sandbox samples2026-10-11 10:43
37.221.66[.]206:42069C2HookChisinau, Chișinău MunicipalityAS48753 AVA HOST SRL1 feed2026-10-11 09:45
92.114.215[.]52AttackerAttacking hostTohatin, Chișinău MunicipalityAS8926 Moldtelecom SA1 feed2026-10-11 09:36
37.75.98[.]113MalwareBladabindiTohatin, Chișinău MunicipalityAS8926 Moldtelecom SA1 feed · 2 sandbox samples2026-10-11 09:18
94.158.245[.]250MalwareLokiChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 6 sandbox samples2026-10-11 08:09
5.181.156[.]77MalwareChapakChisinau, Chișinău MunicipalityAS39798 MivoCloud SRL1 feed · 39 sandbox samples2026-10-11 06:41
178.17.174[.]71MalwareRemcosChisinau, Chișinău MunicipalityAS43289 Trabia SRL1 feed · 3 sandbox samples2026-10-11 05:59

See every listed IP in Moldova →

Ransomware victims in Moldova

1 posted in the last 30 days, 3 in 90.

Sectors hit (30 days)

    Groups (30 days)

    Posted (UTC)VictimGroupSector
    2026-09-22 14:50GOTTHELFBooba Project—
    2026-08-30 09:10wmdn.netthreeam—
    2026-07-24 22:57Center Of Information Technologies In Finance Public InstitutionnovaFinancial Services

    All ransomware victims in Moldova →

    Other countries

    🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →