195.128.241.9

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
42% Elevated
17 reports
16 reporters · latest 5 days ago
ISP
Obenet AB
Usage Type
Fixed Line ISP
ASN
AS3399
Hostname(s)
195-128-241-9.ip.obe.net
Domain Name
obe.net
Country
🇸🇪 Sweden
City
Stockholm, Stockholm
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇺🇸 United States of America 2 🇧🇷 Brazil 1
Most common categories Brute-Force 10 SSH 8 Web App Attack 4 Exploited Host 2 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 mnsf
Abuse Detected (10)
Brute-Force Web App Attack
🇭🇺 jani.hu
Hit on SSH honeypot at 2026-11-01 07:02:17 from 195.128.241.9 as user admin with password
Brute-Force SSH
🇺🇸 Phil Schuyler
SSH brute-force attempt on a Cowrie honeypot on TCP/2222.
Brute-Force SSH
🇩🇪 Hazzard
(wordpress) Failed wordpress login from 195.128.241.9 (SE/Sweden/Stockholm County/Solna/195-128-241-9.ip.obe.net/[redacted]): (CF_ENABLE)
Brute-Force
Anonymous
BruteForce IMAP/POP3/SMTP
Brute-Force
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host Web App Attack
🇮🇳 Parth Maniar
This IP address carried out 1 SSH credential attack (attempts) on 05-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
🇳🇱 globcom
SSH-BruteForce
Brute-Force SSH
🇩🇪 NetWatch
NetWatch sensor network: The IP 195.128.241.9 executed unauthorized SSH login attempts.
Brute-Force SSH
🇨🇳 SA19999
Auto-report: brute_force | sources=["peer-sync"] | Fox honeypot cluster
Web App Attack
🇫🇷 900cm
Sep 22 21:21:03 raspberrypi sshd[2381]: Invalid user Admin from 195.128.241.9 port 46127 ...
Port Scan Brute-Force SSH
🇵🇱 lns.bz
SSH bruteforce [BY]
SSH
🇩🇪 donarev419
2026-09-18T08:35:28.567825+02:00 mail.donarev419.com sshd[2827724]: Invalid user admin from 195.128.241.9 port 35857 ...
Brute-Force SSH
🇺🇸 brycemaxheimer
Cowrie SSH honeypot: 1 events in 10m window 2026-09-08T22:20:00+00:00. Users tried: root. Commands:
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇭 196.50.29.16
🇸🇬 194.164.107.4
🇮🇹 79.36.119.201
🇬🇧 35.203.211.229
🇺🇸 172.56.65.222
🇳🇱 109.160.32.171
🇫🇷 85.217.140.49
🇺🇸 45.147.232.22
🇺🇸 185.61.223.222
🇺🇸 136.144.19.17
🇷🇺 91.202.233.64
🇳🇱 45.148.10.152
🇳🇱 45.148.10.151
🇻🇳 14.171.234.56
🇹🇼 203.66.168.131
🇨🇴 190.253.72.209
🇺🇸 159.223.97.218
🇷🇺 95.172.59.238
🇫🇷 88.168.227.181
🇬🇧 35.203.210.209
feedback