This IP address has been reported a total of
67
times from
61 distinct
sources.
104.173.205.2 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 17 09:16:33 peterbilt sshd[288287]: Failed password for root from 104.173.205.2 port 53740 ssh2
...
show moreJun 17 09:16:33 peterbilt sshd[288287]: Failed password for root from 104.173.205.2 port 53740 ssh2
Jun 17 09:16:35 peterbilt sshd[288287]: Failed password for root from 104.173.205.2 port 53740 ssh2
Jun 17 09:16:38 peterbilt sshd[288287]: Failed password for root from 104.173.205.2 port 53740 ssh2
...
show less
2026-06-17T16:51:55.604356+02:00 localhost sshd[1193402]: Failed password for root from 104.173.205. ...
show more2026-06-17T16:51:55.604356+02:00 localhost sshd[1193402]: Failed password for root from 104.173.205.2 port 33174 ssh2
2026-06-17T16:51:59.161203+02:00 localhost sshd[1193402]: Failed password for root from 104.173.205.2 port 33174 ssh2
2026-06-17T16:52:01.853372+02:00 localhost sshd[1193402]: Failed password for root from 104.173.205.2 port 33174 ssh2
2026-06-17T16:52:05.748650+02:00 localhost sshd[1193402]: Failed password for root from 104.173.205.2 port 33174 ssh2
2026-06-17T16:52:09.974015+02:00 localhost sshd[1193402]: Failed password for root from 104.173.205.2 port 33174 ssh2
...
show less
2026-06-17T14:34:45.932506+00:00 mailtommygod sshd[829633]: Failed password for root from 104.173.20 ...
show more2026-06-17T14:34:45.932506+00:00 mailtommygod sshd[829633]: Failed password for root from 104.173.205.2 port 54188 ssh2
2026-06-17T14:34:48.901561+00:00 mailtommygod sshd[829633]: Failed password for root from 104.173.205.2 port 54188 ssh2
2026-06-17T14:34:53.136193+00:00 mailtommygod sshd[829633]: Failed password for root from 104.173.205.2 port 54188 ssh2
2026-06-17T14:34:55.786580+00:00 mailtommygod sshd[829633]: Failed password for root from 104.173.205.2 port 54188 ssh2
2026-06-17T14:35:00.221946+00:00 mailtommygod sshd[829633]: Failed password for root from 104.173.205.2 port 54188 ssh2
show less
2026-06-17T16:34:09.841832+02:00 axisverse sshd-session[607947]: error: maximum authentication attem ...
show more2026-06-17T16:34:09.841832+02:00 axisverse sshd-session[607947]: error: maximum authentication attempts exceeded for root from 104.173.205.2 port 46940 ssh2 [preauth]
2026-06-17T16:34:12.615619+02:00 axisverse sshd-session[608044]: error: maximum authentication attempts exceeded for root from 104.173.205.2 port 47366 ssh2 [preauth]
2026-06-17T16:34:15.343630+02:00 axisverse sshd-session[608160]: error: maximum authentication attempts exceeded for root from 104.173.205.2 port 47840 ssh2 [preauth]
...
show less
SSH credential brute-force observed by honeypot.
Source IP: 104.173.205.2
Targeted device: NAS
First ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 104.173.205.2
Targeted device: NAS
First seen: 17 Jun 2026 13:43:21 UTC
Last seen: 17 Jun 2026 13:43:21 UTC
Attempts: 1
Client: SSH-2.0-libssh2_1.11.1
Sample credentials: root:root
show less
2026-06-17T15:28:16.561705+02:00 pve-osd-102 sshd[2347210]: Failed password for root from 104.173.20 ...
show more2026-06-17T15:28:16.561705+02:00 pve-osd-102 sshd[2347210]: Failed password for root from 104.173.205.2 port 42368 ssh2
2026-06-17T15:28:20.110140+02:00 pve-osd-102 sshd[2347210]: Failed password for root from 104.173.205.2 port 42368 ssh2
2026-06-17T15:28:23.525048+02:00 pve-osd-102 sshd[2347210]: Failed password for root from 104.173.205.2 port 42368 ssh2
2026-06-17T15:28:25.726004+02:00 pve-osd-102 sshd[2347210]: Failed password for root from 104.173.205.2 port 42368 ssh2
2026-06-17T15:28:29.281750+02:00 pve-osd-102 sshd[2347210]: Failed password for root from 104.173.205.2 port 42368 ssh2
2026-06-17T15:28:33.498094+02:00 pve-osd-102 sshd[2347210]: Failed password for root from 104.173.205.2 port 42368 ssh2
...
show less
error: maximum authentication attempts exceeded for root from 104.173.205.2 port 32942 ssh2 [preauth ...
show moreerror: maximum authentication attempts exceeded for root from 104.173.205.2 port 32942 ssh2 [preauth]
error: maximum authentication attempts exceeded for root from 104.173.205.2 port 33090 ssh2 [preauth]
error: maximum authentication attempts exceeded for root from 104.173.205.2 port 33242 ssh2 [preauth]
Disconnected from authenticating user root 104.173.205.2 port 33338 [preauth]
Invalid user admin from 104.173.205.2 port 33398
show less
2026-06-17T11:36:10.824618+00:00 kyana sshd[637114]: Failed password for root from 104.173.205.2 por ...
show more2026-06-17T11:36:10.824618+00:00 kyana sshd[637114]: Failed password for root from 104.173.205.2 port 47482 ssh2
2026-06-17T11:36:13.478703+00:00 kyana sshd[637114]: Failed password for root from 104.173.205.2 port 47482 ssh2
2026-06-17T11:36:16.656582+00:00 kyana sshd[637114]: Failed password for root from 104.173.205.2 port 47482 ssh2
...
show less
(sshd) Failed SSH login from 104.173.205.2 (US/United States/syn-104-173-205-002.res.spectrum.com): ...
show more(sshd) Failed SSH login from 104.173.205.2 (US/United States/syn-104-173-205-002.res.spectrum.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 17 13:29:07 da057 sshd[3830360]: error: maximum authentication attempts exceeded for root from 104.173.205.2 port 53684 ssh2 [preauth]
Jun 17 13:29:10 da057 sshd[3830401]: error: maximum authentication attempts exceeded for root from 104.173.205.2 port 54220 ssh2 [preauth]
Jun 17 13:29:13 da057 sshd[3830458]: error: maximum authentication attempts exceeded for root from 104.173.205.2 port 54690 ssh2 [preauth]
Jun 17 13:29:17 da057 sshd[3830563]: error: maximum authentication attempts exceeded for admin from 104.173.205.2 port 55414 ssh2 [preauth]
Jun 17 13:29:20 da057 sshd[3830577]: error: maximum authentication attempts exceeded for admin from 104.173.205.2 port 55846 ssh2 [preauth]
show less
Port Scan
Showing 1 to
15
of 67 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩