JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.143.109.99

Recent Activity

Abuse Confidence Score

100% Critical

128 reports

49 reporters · latest 2 days ago

ISP: AIRMAX LLC
Usage Type: Fixed Line ISP
ASN: AS208320
Domain Name: airmax.ge
Country: 🇬🇪 Georgia
City: Zestaponi, Imereti

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

128 from 49 distinct reporters

First reported

September 29th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇫🇷 France 19 🇸🇬 Singapore 19 🇩🇪 Germany 16

Most common categories SSH 95 Brute-Force 95 DDoS Attack 12 Hacking 7 Bad Web Bot 6

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 MatStef132	2026-10-27 06:55:56 (2 days ago)	MatShield L7: blocked on unlocknow.cc (sec-ch-ua-grease-mismatch)	DDoS Attack
🇵🇱 MatStef132	2026-10-21 20:50:46 (1 week ago)	MatShield L7: blocked on panel.averisca.cloud (ua-quarantined)	Bad Web Bot
🇳🇱 ZANET.BABY	2026-10-21 13:21:29 (1 week ago)	Automated L7 DDoS against HTTPS port 443; 30 HTTP 429 responses observed within 10 seconds; source blocked at ingress. Incident 20261021T131706Z.	DDoS Attack Bad Web Bot
🇵🇱 MatStef132	2026-10-20 16:38:22 (1 week ago)	MatShield L7: blocked on politempire.org (ua-quarantined)	Bad Web Bot
🇵🇱 MatStef132	2026-10-19 19:18:59 (1 week ago)	MatShield L7: blocked on politempire.org (ua-quarantined)	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2026-10-17 22:25:58 (1 week ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-10-16 17:03:58 (1 week ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-10-11 23:28:38 (2 weeks ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 edgeshield	2026-10-08 21:37:16 (2 weeks ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
🇸🇰 Spyerfox	2026-10-08 15:24:43 (2 weeks ago)	Oct 8 17:24:40 <server> sshd\[8282\]: Invalid user hupeng from 45.143.109.99Oct 8 17:24:42 <server> sshd\[8282\]: Failed password for invalid user hupeng from 45.143.109.99 port 46338 ssh2 ...	Brute-Force SSH
Anonymous	2026-10-08 13:45:17 (2 weeks ago)	(sshd) Failed SSH login from 45.143.109.99 (GE/Georgia/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 09:23:02 server5 sshd[12215]: Invalid user yuanxin from 45.143.109.99 Oct 8 09:23:02 server5 sshd[12215]: ... show more (sshd) Failed SSH login from 45.143.109.99 (GE/Georgia/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 09:23:02 server5 sshd[12215]: Invalid user yuanxin from 45.143.109.99 Oct 8 09:23:02 server5 sshd[12215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.143.109.99 Oct 8 09:23:04 server5 sshd[12215]: Failed password for invalid user yuanxin from 45.143.109.99 port 50182 ssh2 Oct 8 09:45:13 server5 sshd[22624]: Invalid user bdu from 45.143.109.99 Oct 8 09:45:13 server5 sshd[22624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.143.109.99 show less	Brute-Force
🇫🇷 Omar Martínez	2026-10-08 12:46:41 (2 weeks ago)	2026-10-08 06:01:50,133 ns1.elmec.com.mx proftpd[535415] 0.0.0.0 (45.143.109.99[45.143.109.99]): USER chenfang: no such user found from 45.143.109.99 [45.143.109.99] to ::ffff:149.202.66.25:2222 2026-10-08 06:24:06,961 ns1.elmec.com.mx proftpd[544557 ... show more 2026-10-08 06:01:50,133 ns1.elmec.com.mx proftpd[535415] 0.0.0.0 (45.143.109.99[45.143.109.99]): USER chenfang: no such user found from 45.143.109.99 [45.143.109.99] to ::ffff:149.202.66.25:2222 2026-10-08 06:24:06,961 ns1.elmec.com.mx proftpd[544557] 0.0.0.0 (45.143.109.99[45.143.109.99]): USER tangyan: no such user found from 45.143.109.99 [45.143.109.99] to ::ffff:149.202.66.25:2222 2026-10-08 06:46:39,919 ns1.elmec.com.mx proftpd[550865] 0.0.0.0 (45.143.109.99[45.143.109.99]): USER zy: no such user found from 45.143.109.99 [45.143.109.99] to ::ffff:149.202.66.25:2222 ... show less	Phishing Email Spam Blog Spam
🇸🇰 Spyerfox	2026-10-08 12:23:19 (2 weeks ago)	Oct 8 14:23:17 <server> sshd\[31724\]: Invalid user tangyan from 45.143.109.99Oct 8 14:23:18 <server> sshd\[31724\]: Failed password for invalid user tangyan from 45.143.109.99 port 48128 ssh2 ...	Brute-Force SSH
🇳🇴 Hotwire	2026-10-08 10:34:20 (2 weeks ago)	Oct 8 12:13:26 h3buntu sshd[1364988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.143.109.99 Oct 8 12:13:28 h3buntu sshd[1364988]: Failed password for invalid user zhoushiyao from 45.143.109.99 port 5 ... show more Oct 8 12:13:26 h3buntu sshd[1364988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.143.109.99 Oct 8 12:13:28 h3buntu sshd[1364988]: Failed password for invalid user zhoushiyao from 45.143.109.99 port 50406 ssh2 Oct 8 12:34:19 h3buntu sshd[1370771]: Invalid user chengang from 45.143.109.99 port 39914 ... show less	Brute-Force SSH Hacking
🇩🇪 -SK-	2026-10-08 10:28:07 (2 weeks ago)	FALK (f2b sshd, abuse	Brute-Force SSH

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 211.253.37.225

🇳🇱 195.178.110.232

🇸🇦 193.122.74.208

🇳🇱 193.47.62.69

🇧🇷 189.50.52.148

🇦🇷 181.231.49.4

🇨🇳 153.34.223.143

🇨🇳 117.184.44.55

🇨🇳 117.173.69.241

🇨🇳 115.191.21.250

🇵🇬 103.14.91.87

🇸🇴 102.223.189.112

🇩🇪 87.120.126.29

🇳🇱 85.11.167.38

🇷🇺 78.40.119.101

🇪🇸 65.20.99.14

🇦🇿 62.217.145.73

🇩🇪 45.135.193.193

🇺🇸 45.56.85.254

🇺🇸 45.33.90.118