Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 130.211.104.253
This IP address has been reported a total of
132
times from
121 distinct
sources.
130.211.104.253 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 38
reports;
United States of America
with 23
reports;
France
with 9
reports.
The most common categories in these recent reports were:
SSH
117
times;
Brute-Force
113
times;
Port Scan
14
times;
Hacking
5
times;
Exploited Host
4
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
Unwanted traffic detected by honeypot on September 20, 2026: port scans (1 port 22 scan), and brute ...
show moreUnwanted traffic detected by honeypot on September 20, 2026: port scans (1 port 22 scan), and brute force and hacking attacks (1 over ssh).
show less
2026-09-21T09:55:33.528081+03:00 kotia sshd[1441726]: Invalid user admin from 130.211.104.253 port 4 ...
show more2026-09-21T09:55:33.528081+03:00 kotia sshd[1441726]: Invalid user admin from 130.211.104.253 port 49642
...
show less
2026-09-21 06:41:22 connection from 130.211.104.253
2026-09-21 06:41:22 connection from 130.211.104. ...
show more2026-09-21 06:41:22 connection from 130.211.104.253
2026-09-21 06:41:22 connection from 130.211.104.253
2026-09-21 06:41:22 connection from 130.211.104.253
2026-09-21 06:41:22 connection from 130.211.104.253
2026-09-21 06:41:22 connection from 130.211.104.253
...
show less
2026-09-21T08:34:30.668585+02:00 ..de sshd-session[1456799]: Unable to negotiate with 130.211.104.25 ...
show more2026-09-21T08:34:30.668585+02:00 ..de sshd-session[1456799]: Unable to negotiate with 130.211.104.253 port 3562: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
2026-09-21T08:34:30.921725+02:00 ..de sshd-session[1456801]: Unable to negotiate with 130.211.104.253 port 3570: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-09-21T08:34:31.172809+02:00 ..de sshd-session[1456803]: Unable to negotiate with 130.211.104.253 port 3582: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
...
show less
2026-09-21T06:33:08.642098luna-spire sshd[3307222]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-09-21T06:33:08.642098luna-spire sshd[3307222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.211.104.253
2026-09-21T06:33:10.152682luna-spire sshd[3307222]: Failed password for invalid user admin from 130.211.104.253 port 5870 ssh2
...
show less
Fail2Ban SSH report from slimatic.slimatic.be:\n\n2026-09-21T02:29:21.132804-04:00 slimatic sshd-ses ...
show moreFail2Ban SSH report from slimatic.slimatic.be:\n\n2026-09-21T02:29:21.132804-04:00 slimatic sshd-session[2880354]: Connection from 130.211.104.253 port 28982 on 94.176.214.98 port 22 rdomain ""
2026-09-21T02:29:21.159094-04:00 slimatic sshd-session[2880354]: Invalid user admin from 130.211.104.253 port 28982
show less
2026-09-21T08:23:25.900865+02:00 server sshd-session[4949]: Connection closed by 130.211.104.253 por ...
show more2026-09-21T08:23:25.900865+02:00 server sshd-session[4949]: Connection closed by 130.211.104.253 port 4268 [preauth]
...
show less
