72.205.88.2
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Cox Communications Inc.
- Usage Type
- Fixed Line ISP
- ASN
- AS22773
- Hostname(s)
- ip72-205-88-2.sb.sd.cox.net
- Domain Name
- cox.com
- Country
- 🇺🇸 United States of America
- City
- Santa Barbara, California
Abuse Reports
Total reports
27 from
19 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-28 02:48:12 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇫🇮 mikkopal88 |
TCP SYN port scan to SSH 22
|
Port Scan SSH | |
| 🇬🇧 essinghigh |
IPS Detection: 72.205.88.2 -> DPT: 22
|
Port Scan | |
| 🇺🇸 seb6062 |
SSH tarpit on port 22: 2 connection(s) in the last 24h, held 2101 s in total, longest 1061 s. Unsolicited SSH to a port with no SSH service: SSH client held by the tarpit (brute-force tool behavior). Automated endlessh tarpit report.
|
Brute-Force SSH | |
| 🇩🇪 cloudmax |
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
|
Port Scan | |
| Anonymous |
72.205.88.2 (US/United States/California/Santa Barbara/ip72-205-88-2.sb.sd.cox.net/[redacted]
|
Brute-Force | |
| 🇺🇸 RAP |
2026-09-13 19:57:19 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇪🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 46 | Len: 60B | Win: 64240(1) | rDNS: ip72-205-88-2.sb.sd.cox.net | F2B/ufw-honeypot@2026-09-13T13:44:10Z
|
Port Scan Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:47200 dst:23
|
Port Scan | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 MPL |
tcp ports: 22,23 (4 or more attempts)
|
Port Scan | |
| 🇫🇷 jonahtebaa |
SSH tarpit capture
|
Port Scan Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown