JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.143.29.252

45.143.29.252 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 24%: ?

24%

ISP	SPIDER
Usage Type	Fixed Line ISP
ASN	AS202651
Domain Name	spidernetisp.com
Country	🇮🇶 Iraq
City	Mosul, Nineveh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.143.29.252

Whois 45.143.29.252

IP Abuse Reports for 45.143.29.252:

This IP address has been reported a total of 16 times from 15 distinct sources. 45.143.29.252 was first reported on September 26th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-07-13 02:34:00 (3 days ago)	Scanning for port/service exploits on tpc-036.mach3builders.nl	Port Scan Hacking
🇺🇸 kosada.com	2026-07-06 14:31:55 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-31 18:43:53 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 45.143.29.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.143.29.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 14:43:47.994465 2026] [security2:error] [pid 7702:tid 7702] [client 45.143.29.252:57694] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.med-engineering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/prednisone.com"] [unique_id "ahyBY1xtBxQJeLsuozb3-AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-05-19 01:29:13 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-05-17 05:15:46 (1 month ago)	Attack Signature Blocked: /wishlist/index/add/product/11343/form_key/WuDdZjjT5B08r88R/ (Magento Site ... show more Attack Signature Blocked: /wishlist/index/add/product/11343/form_key/WuDdZjjT5B08r88R/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇩🇪 guldkage	2026-05-06 20:27:38 (2 months ago)	Unauthorized connection attempt detected from IP address 45.143.29.252 to port 23 (ger-02) [TELNET]	Exploited Host
🇫🇷 Mölkky	2026-04-08 07:53:31 (3 months ago)	DDOS Attack (by infected device ?)	Web App Attack
🇺🇸 kosada.com	2026-03-10 08:32:33 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇨🇦 polycoda	2026-01-26 14:45:43 (5 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇨🇭 backslash	2026-01-03 01:10:36 (6 months ago)	block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB	Bad Web Bot
🇫🇷 bigorre.org	2025-12-08 16:27:10 (7 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇮🇳 Altis Shield	2025-12-01 02:23:19 (7 months ago)	TCP ACK scan detected from 45.143.29.252 port 36324 flags [FIN]	Email Spam Port Scan
🇺🇸 PeravixGroup	2024-04-14 09:14:55 (2 years ago)	2024-04-14T10:14:45.348951 AdbuseHP sshd[933102]: pam_unix(sshd:auth): authentication failure; logna ... show more 2024-04-14T10:14:45.348951 AdbuseHP sshd[933102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.143.29.252 user=root 2024-04-14T10:14:47.564506 AdbuseHP sshd[933102]: Failed password for root from 45.143.29.252 port 32140 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2024-04-14 07:21:05 (2 years ago)	45.143.29.252 (IQ/Iraq/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports ... show more 45.143.29.252 (IQ/Iraq/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 14 02:20:48 14036 sshd[32115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.143.29.32 user=root Apr 14 02:16:27 14036 sshd[11107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.119.63.208 user=root Apr 14 02:16:29 14036 sshd[11107]: Failed password for root from 92.119.63.208 port 4494 ssh2 Apr 14 02:19:23 14036 sshd[4144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.143.29.252 user=root Apr 14 02:19:25 14036 sshd[4144]: Failed password for root from 45.143.29.252 port 32033 ssh2 IP Addresses Blocked: 45.143.29.32 (IQ/Iraq/-) 92.119.63.208 (IQ/Iraq/-) show less	Brute-Force SSH
🇺🇸 ALSCO®️	2023-09-26 22:05:29 (2 years ago)	Report By ALSCO Security Team: Potential CSRF Attack Detected	SQL Injection

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 186.68.83.105

🇷🇺 81.211.72.167

🇬🇧 35.203.210.120

🇬🇧 35.203.210.85

🇺🇸 20.119.75.60

🇳🇱 194.26.192.173

🇲🇽 187.190.206.152

🇳🇵 118.91.172.98

🇨🇳 116.53.130.4

🇿🇦 105.184.239.7

🇫🇷 91.196.152.218

🇫🇷 91.196.152.185

🇩🇪 47.245.131.47

🇷🇺 46.180.158.120

🇬🇧 35.203.211.96

🇸🇦 31.167.45.28

🇺🇸 3.224.205.25

🇨🇳 221.224.133.98

🇹🇷 212.154.121.199

🇹🇭 202.29.220.6