AbuseIPDB » 2.59.254.244

2.59.254.244 was found in our database!

This IP was reported 7,113 times. Confidence of Abuse is 0%: ?

ISP	Bartonet Woerden 1
Usage Type	Data Center/Web Hosting/Transit
ASN	AS207083
Domain Name	bartonet.nl
Country	Netherlands
City	Woerden, Utrecht

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 2.59.254.244

Whois 2.59.254.244

IP Abuse Reports for 2.59.254.244:

This IP address has been reported a total of 7,113 times from 704 distinct sources. 2.59.254.244 was first reported on August 2nd 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
yvoictra	2023-08-21 09:15:34 (1 year ago)	Aug 21 11:15:32 medusa sshd[674677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreAug 21 11:15:32 medusa sshd[674677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.59.254.244 user=root Aug 21 11:15:34 medusa sshd[674677]: Failed password for root from 2.59.254.244 port 37720 ssh2 ... show less	Brute-Force SSH
shaunc	2023-08-21 09:15:04 (1 year ago)	Aug 21 04:15:02 [redacted] sshd[6190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreAug 21 04:15:02 [redacted] sshd[6190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.59.254.244 user=root Aug 21 04:15:03 [redacted] sshd[6190]: Failed password for root from 2.59.254.244 port 39204 ssh2 Aug 21 04:15:03 [redacted] sshd[6190]: Connection closed by 2.59.254.244 port 39204 [preauth] show less	Brute-Force SSH
LotusDragon	2023-08-21 09:14:46 (1 year ago)	Aug 21 02:14:43 ds13592 sshd[25133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreAug 21 02:14:43 ds13592 sshd[25133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.59.254.244 user=root Aug 21 02:14:43 ds13592 sshd[25133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.59.254.244 user=root Aug 21 02:14:45 ds13592 sshd[25133]: Failed password for root from 2.59.254.244 port 32984 ssh2 Aug 21 02:14:45 ds13592 sshd[25133]: Failed password for root from 2.59.254.244 port 32984 ssh2 show less	Brute-Force SSH
. .	2023-08-21 09:12:31 (1 year ago)	2023-08-21T09:12:29.243318 [REDACTED] sshd[1856922]: Connection from 2.59.254.244 port 39402 on [RED ... show more2023-08-21T09:12:29.243318 [REDACTED] sshd[1856922]: Connection from 2.59.254.244 port 39402 on [REDACTED] port 22 rdomain "" 2023-08-21T09:12:30.219110 [REDACTED] sshd[1856922]: User root from 2.59.254.244 not allowed because listed in DenyUsers ... show less	Brute-Force SSH
imgzit	2023-08-21 09:12:02 (1 year ago)	(sshd) Failed SSH login from 2.59.254.244 (NL/Netherlands/-): ; Ports: ; Direction: inout; Trigger: ... show more(sshd) Failed SSH login from 2.59.254.244 (NL/Netherlands/-): ; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Aug 21 02:12:00 temporary sshd[1643433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.59.254.244 user=root show less	Brute-Force SSH
RAP	2023-08-21 09:06:14 (1 year ago)	2023-08-21 09:06:14 UTC Unauthorized activity to TCP port 22. SSH	SSH
MortimerCat	2023-08-14 17:00:48 (1 year ago)	speculative search for an API folder	Web App Attack
mawan	2023-08-13 12:49:34 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
RLDD	2023-08-13 00:46:06 (1 year ago)	WP probing -cou	Web App Attack
MortimerCat	2023-08-12 11:38:30 (1 year ago)	Searching for insecure backups of system scripts	Web App Attack
mawan	2023-08-12 10:15:46 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
conseilgouz	2023-08-12 08:30:01 (1 year ago)	coe-7 : Trying access unauthorized files/dir=>/wp-content/wp-1ogin_bak.php	Hacking
conseilgouz	2023-08-10 04:29:32 (1 year ago)	hae-7 : Trying access unauthorized files/dir=>/wp-content/index.php	Hacking
mnsf	2023-08-09 20:04:13 (1 year ago)	Too many Status 40X (15)	Brute-Force Web App Attack
Lentini	2023-08-09 04:20:28 (1 year ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/themes/seotheme/db.php	Web App Attack