159.253.25.213

Basic Info

City: unknown

Region: unknown

Country: Sweden

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
159.253.25.197	attackspam	389/udp 1900/udp 123/udp... [2019-09-20/11-19]33pkt,3pt.(udp)	2019-11-20 08:37:33
159.253.25.197	attackspambots	Port scan: Attack repeated for 24 hours	2019-11-03 13:02:56
159.253.25.197	attack	Scanning random ports - tries to find possible vulnerable services	2019-11-03 07:48:55
159.253.25.197	attack	UTC: 2019-10-29 port: 389/udp	2019-10-30 14:17:03
159.253.25.197	attackspam	Oct 22 00:40:33 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=159.253.25.197 DST=109.74.200.221 LEN=36 TOS=0x00 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=44314 DPT=123 LEN=16 ...	2019-10-22 08:10:20
159.253.25.197	attackbots	Honeypot hit.	2019-10-16 01:55:32
159.253.25.197	attack	firewall-block, port(s): 1900/udp	2019-10-04 18:31:36
159.253.25.197	attackspam	Sep 8 03:03:24 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=159.253.25.197 DST=109.74.200.221 LEN=36 TOS=0x00 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=54387 DPT=123 LEN=16 ...	2019-09-10 20:12:32
159.253.25.197	attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2019-09-01 16:26:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.253.25.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65516
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;159.253.25.213.			IN	A

;; AUTHORITY SECTION:
.			257	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 22:55:04 CST 2022
;; MSG SIZE  rcvd: 107

Host info

213.25.253.159.in-addr.arpa domain name pointer developer.mimer.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
213.25.253.159.in-addr.arpa	name = developer.mimer.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.13.215.94	attackspambots	15549/tcp 3438/tcp 12026/tcp... [2020-07-26/09-26]6pkt,6pt.(tcp)	2020-09-27 12:54:15
20.43.56.138	attackspam	Sep 27 06:47:57 jane sshd[24920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.43.56.138 Sep 27 06:47:59 jane sshd[24920]: Failed password for invalid user erp from 20.43.56.138 port 49245 ssh2 ...	2020-09-27 12:59:29
182.58.4.147	attack	2020-09-26T20:36:08.266885vps1033 sshd[29766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.58.4.147 2020-09-26T20:36:08.262187vps1033 sshd[29766]: Invalid user taller from 182.58.4.147 port 29503 2020-09-26T20:36:10.438139vps1033 sshd[29766]: Failed password for invalid user taller from 182.58.4.147 port 29503 ssh2 2020-09-26T20:39:41.651740vps1033 sshd[5267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.58.4.147 user=root 2020-09-26T20:39:43.065650vps1033 sshd[5267]: Failed password for root from 182.58.4.147 port 21089 ssh2 ...	2020-09-27 12:41:32
193.56.28.14	attackspam	Sep 27 06:17:03 galaxy event: galaxy/lswi: smtp: support@uni-potsdam.de [193.56.28.14] authentication failure using internet password Sep 27 06:17:19 galaxy event: galaxy/lswi: smtp: shop@uni-potsdam.de [193.56.28.14] authentication failure using internet password Sep 27 06:21:47 galaxy event: galaxy/lswi: smtp: shop@uni-potsdam.de [193.56.28.14] authentication failure using internet password Sep 27 06:22:03 galaxy event: galaxy/lswi: smtp: service@uni-potsdam.de [193.56.28.14] authentication failure using internet password Sep 27 06:26:29 galaxy event: galaxy/lswi: smtp: service@uni-potsdam.de [193.56.28.14] authentication failure using internet password ...	2020-09-27 12:27:18
104.206.128.42	attackbots	5900/tcp 23/tcp 5060/tcp... [2020-07-29/09-26]40pkt,8pt.(tcp),1pt.(udp)	2020-09-27 12:58:06
189.8.16.174	attackspambots	23/tcp 23/tcp 23/tcp... [2020-08-20/09-26]4pkt,1pt.(tcp)	2020-09-27 12:28:26
192.95.30.59	attackbots	192.95.30.59 - - [27/Sep/2020:05:25:03 +0100] "POST /wp-login.php HTTP/1.1" 200 8338 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.95.30.59 - - [27/Sep/2020:05:28:14 +0100] "POST /wp-login.php HTTP/1.1" 200 8338 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.95.30.59 - - [27/Sep/2020:05:31:24 +0100] "POST /wp-login.php HTTP/1.1" 200 8338 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ...	2020-09-27 12:42:35
104.140.188.6	attack	1433/tcp 3306/tcp 3389/tcp... [2020-07-27/09-26]32pkt,8pt.(tcp),1pt.(udp)	2020-09-27 13:03:33
192.35.169.24	attackspambots	TCP (SYN) 192.35.169.24:33410 -> port 22, len 44	2020-09-27 12:50:57
213.14.114.226	attackspam	445/tcp 445/tcp 445/tcp... [2020-07-28/09-26]5pkt,1pt.(tcp)	2020-09-27 12:40:55
180.190.52.195	attackspam	Listed on zen-spamhaus / proto=17 . srcport=38850 . dstport=53458 . (2684)	2020-09-27 12:53:30
186.4.136.153	attackbots	SSH Brute Force	2020-09-27 12:28:51
124.196.17.78	attack	Sep 26 23:13:31 sigma sshd\[9318\]: Invalid user farhan from 124.196.17.78Sep 26 23:13:34 sigma sshd\[9318\]: Failed password for invalid user farhan from 124.196.17.78 port 38342 ssh2 ...	2020-09-27 12:30:39
76.75.94.10	attackbotsspam	Sep 26 20:43:02 lanister sshd[10797]: Invalid user steve from 76.75.94.10 Sep 26 20:43:02 lanister sshd[10797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.75.94.10 Sep 26 20:43:02 lanister sshd[10797]: Invalid user steve from 76.75.94.10 Sep 26 20:43:03 lanister sshd[10797]: Failed password for invalid user steve from 76.75.94.10 port 46566 ssh2	2020-09-27 12:39:43
221.213.115.48	attackspambots	19507/tcp 15715/tcp 25165/tcp [2020-09-09/26]3pkt	2020-09-27 12:49:13

Recently Reported IPs

45.186.144.78	114.236.230.87	47.90.217.101	177.66.62.22
167.94.146.74	43.227.129.38	110.137.30.35	201.63.71.134
165.227.214.9	36.68.54.187	122.4.28.137	75.76.251.80
178.72.69.95	200.106.124.228	109.125.168.228	183.88.94.143
37.21.10.147	37.215.59.205	125.24.110.22	97.107.132.241