JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

2.59.254.174

Activity Trending Down

Abuse confidence score ?

45% Elevated

313 reports

171 reporters · latest 3 weeks ago

ISP	Bartonet Woerden 1
Usage Type	Data Center/Web Hosting/Transit
ASN	AS207083
Domain Name	bartonet.nl
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 2.59.254.174

Export CSV

This IP address has been reported a total of 313 times from 171 distinct sources. 2.59.254.174 was first reported on September 27th 2025, and the most recent report was 3 weeks ago. In the last 60 days, the top reporter locations were: United States of America with 6 reports; Germany with 3 reports; France with 2 reports. The most common categories in these recent reports were: Port Scan 16 times; Hacking 4 times; SSH 1 time; Web App Attack 1 time; DDoS Attack 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SSP	2026-09-27 19:05:03 (3 weeks ago)	Automatically generated from firewall_v2 logs on SID:VTMI2 Category: Port Scan Occurrences: 56 Un ... show more Automatically generated from firewall_v2 logs on SID:VTMI2 Category: Port Scan Occurrences: 56 Unique Ports: 149 Destination Ports: 5977, 5973, 5939, 6512, 5996, 5937, 5910, 5920, 5945, 6020, 5905, 6021, 5902, 6005, 5954, 5955, 5956, 9000, 6011, 5930, 7000, 5941, 6262, 5979, 5916, 5958, 5981, 6081, 5985, 6004, 5907, 6007, 5959, 5951, 5962, 5922, 6000, 5957, 5914, 5988, 5976, 5982 First Seen: 2026-09-26 19:05 UTC Last Seen: 2026-09-26 19:45 UTC show less	Port Scan
Anonymous	2026-09-26 19:51:13 (3 weeks ago)	...	Web App Attack
🇩🇪 phil2k	2026-09-26 19:48:45 (3 weeks ago)	fail2ban:firewall:2026-09-26T21:47:07.208276+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-09-26T21:47:07.208276+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=2.59.254.174 DST=<ANONYMIZED_IP> LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=46183 PROTO=TCP SPT=61000 DPT=5958 WINDOW=1025 RES=0x00 SYN URGP=0 2026-09-26T21:48:41.998295+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=2.59.254.174 DST=<ANONYMIZED_IP> LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=50985 PROTO=TCP SPT=61000 DPT=5976 WINDOW=1025 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇺🇸 SSP	2026-09-26 19:05:04 (3 weeks ago)	Automatically generated from firewall_v2 logs on SID:VTMI2 Category: Port Scan Occurrences: 93 Un ... show more Automatically generated from firewall_v2 logs on SID:VTMI2 Category: Port Scan Occurrences: 93 Unique Ports: 93 Destination Ports: 5977, 5973, 5939, 6512, 5996, 5937, 5910, 5920, 5945, 6020, 5905, 6021, 5902, 6005, 5954, 5955, 5956, 9000, 6011, 5930, 7000, 5941, 6262, 5979, 5916, 5958, 5981, 6081, 5985, 6004, 5907, 6007, 5959, 5951, 5962, 5922, 6000, 5957, 5914, 5988, 5976, 5982 First Seen: 2026-09-26 18:05 UTC Last Seen: 2026-09-26 19:05 UTC show less	Port Scan
🇮🇹 MenaBelino	2026-09-26 18:49:42 (3 weeks ago)	2.59.254.174 - - [26/Sep/2026:18:49:41 +0000] "REDQ\x02\x00\x00\x00\x02\x00\x00\x00\x12\x00\x00\x00\ ... show more 2.59.254.174 - - [26/Sep/2026:18:49:41 +0000] "REDQ\x02\x00\x00\x00\x02\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00" 400 150 "-" "-" ... show less	Hacking Port Scan
🇺🇸 schematics.cc	2026-09-26 02:09:16 (4 weeks ago)	Blocked by on honeypot2 [6134/tcp] \| SPT: 61000 \| TTL: 241 \| LEN: 44 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [6134/tcp] \| SPT: 61000 \| TTL: 241 \| LEN: 44 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇺🇸 LotPhantom	2026-09-25 16:07:03 (4 weeks ago)	2026-09-25T16:05:51.187232+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-25T16:05:51.187232+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=2.59.254.174 DST=157.230.217.55 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=13906 PROTO=TCP SPT=61000 DPT=5800 WINDOW=1025 RES=0x00 SYN URGP=0 2026-09-25T16:07:02.926655+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=2.59.254.174 DST=157.230.217.55 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=58287 PROTO=TCP SPT=61000 DPT=5997 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇳🇱 Tsumugi Kotobuki	2026-09-25 10:39:10 (4 weeks ago)	Port Scan on Honeypot \| Ports: 5900/VNC \| Proto: TCP(1) \| Flags: all SYN \| TTL: 246 \| Len: 44B \| Win ... show more Port Scan on Honeypot \| Ports: 5900/VNC \| Proto: TCP(1) \| Flags: all SYN \| TTL: 246 \| Len: 44B \| Win: 1025(1) \| F2B/ufw-honeypot@2026-09-25T10:39:10Z show less	Port Scan Hacking
🇩🇪 Tsumugi Kotobuki	2026-09-25 10:10:24 (4 weeks ago)	Port Scan on Honeypot \| Ports: 5900/VNC \| Proto: TCP(1) \| Flags: all SYN \| TTL: 244 \| Len: 44B \| Win ... show more Port Scan on Honeypot \| Ports: 5900/VNC \| Proto: TCP(1) \| Flags: all SYN \| TTL: 244 \| Len: 44B \| Win: 1025(1) \| F2B/ufw-honeypot@2026-09-25T10:10:24Z show less	Port Scan Hacking
🇫🇷 EvoX	2026-09-25 06:08:58 (4 weeks ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (34 bytes of payload); 5991 [1], 10002 [1], 665 ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (34 bytes of payload); 5991 [1], 10002 [1], 6653 [1], 5910 [1], 5959 [1] TCP show less	Port Scan
Anonymous	2026-09-25 01:05:30 (4 weeks ago)	5970/tcp,7434/tcp,6633/tcp (3 or more attempts)	Port Scan
🇩🇪 ValtonTahiri	2026-09-24 05:42:22 (1 month ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=2.59.254.174; proto=TCP; source_port=61000; target_port=5926 show less	Port Scan
🇺🇸 technash	2026-09-23 21:50:00 (1 month ago)	Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.	Port Scan
🇹🇷 SeczarSecureOps	2026-09-23 19:56:46 (1 month ago)	Auto-blocked by Seczar SecureOps — Port Scan Detection (24 events in 10min) at 2026-09-23 19:56	Port Scan
🇵🇱 mkey	2026-09-23 19:05:02 (1 month ago)	Source IP from blacklist is still actively scanning our network. (9 hits in last hour, last seen 202 ... show more Source IP from blacklist is still actively scanning our network. (9 hits in last hour, last seen 2026-09-23 20:59:04) show less	Port Scan

Showing 1 to 15 of 313 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.215.158.228

🇫🇮 147.185.133.170

🇺🇸 66.132.172.230

🇧🇾 37.212.32.140

🇵🇰 223.123.72.123

🇭🇰 203.218.203.93

🇵🇱 193.34.214.17

🇲🇽 189.203.101.211

🇲🇽 187.221.129.30

🇸🇪 172.232.129.225

🇻🇳 160.30.158.218

🇧🇷 138.84.43.50

🇮🇳 122.172.86.100

🇭🇰 104.143.36.100

🇮🇳 103.248.120.6

🇫🇷 91.231.89.213

🇺🇸 91.230.168.212

🇳🇱 77.239.124.73

🇱🇰 45.121.88.131

🇦🇷 45.4.97.1