JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 9.169.195.159

9.169.195.159 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 77%: ?

77%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 9.169.195.159

Whois 9.169.195.159

IP Abuse Reports for 9.169.195.159:

This IP address has been reported a total of 20 times from 13 distinct sources. 9.169.195.159 was first reported on July 22nd 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-07-27 18:04:03 (6 hours ago)	9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 ... show more 9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 12:49:10 21154 sshd[2697]: Invalid user ubuntu from 77.245.12.76 port 64682 Jul 27 12:49:13 21154 sshd[2697]: Failed password for invalid user ubuntu from 77.245.12.76 port 64682 ssh2 Jul 27 12:44:18 21154 sshd[1407]: Failed password for invalid user ubuntu from 4.193.250.198 port 39858 ssh2 Jul 27 13:03:39 21154 sshd[6123]: Invalid user ubuntu from 9.169.195.159 port 49156 Jul 27 13:03:41 21154 sshd[6123]: Failed password for invalid user ubuntu from 9.169.195.159 port 49156 ssh2 IP Addresses Blocked: 77.245.12.76 (JO/Jordan/-) 4.193.250.198 (SG/Singapore/-) show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-07-27 17:22:20 (7 hours ago)	This IP address carried out 120 port scanning attempts on 26-07-2026. For more information or to rep ... show more This IP address carried out 120 port scanning attempts on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇺🇸 bigscoots.com	2026-07-27 17:05:00 (7 hours ago)	9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 ... show more 9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 12:00:01 14423 sshd[20511]: Invalid user ubuntu from 118.107.219.169 port 63892 Jul 27 12:00:03 14423 sshd[20511]: Failed password for invalid user ubuntu from 118.107.219.169 port 63892 ssh2 Jul 27 12:04:52 14423 sshd[23346]: Invalid user ubuntu from 9.169.195.159 port 60030 Jul 27 11:55:02 14423 sshd[17652]: Invalid user ubuntu from 197.248.233.55 port 65394 Jul 27 11:55:04 14423 sshd[17652]: Failed password for invalid user ubuntu from 197.248.233.55 port 65394 ssh2 IP Addresses Blocked: 118.107.219.169 (MY/Malaysia/-) show less	Brute-Force SSH
Anonymous	2026-07-27 16:59:26 (7 hours ago)	Jul 27 12:59:21 v sshd\[26554\]: Invalid user ubuntu from 9.169.195.159 port 52574 Jul 27 12:59:21 v ... show more Jul 27 12:59:21 v sshd\[26554\]: Invalid user ubuntu from 9.169.195.159 port 52574 Jul 27 12:59:21 v sshd\[26554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=9.169.195.159 Jul 27 12:59:24 v sshd\[26554\]: Failed password for invalid user ubuntu from 9.169.195.159 port 52574 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 16:43:20 (8 hours ago)	9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 ... show more 9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 11:33:30 14778 sshd[21716]: Invalid user ubuntu from 9.169.195.159 port 36624 Jul 27 11:33:33 14778 sshd[21716]: Failed password for invalid user ubuntu from 9.169.195.159 port 36624 ssh2 Jul 27 11:43:10 14778 sshd[26898]: Invalid user ubuntu from 143.92.137.36 port 45464 Jul 27 11:28:40 14778 sshd[19254]: Invalid user ubuntu from 125.122.13.33 port 42282 Jul 27 11:28:42 14778 sshd[19254]: Failed password for invalid user ubuntu from 125.122.13.33 port 42282 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 formality	2026-07-27 16:32:00 (8 hours ago)	Invalid user ubuntu from 9.169.195.159 port 53026	Brute-Force SSH
🇩🇪 xdpdrop	2026-07-27 15:09:37 (9 hours ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "ubuntu" at 2026-07-27T15:09:37Z	Brute-Force SSH
🇺🇸 Deltron3030	2026-07-27 15:06:11 (9 hours ago)	SSH brute-force attempt from 9.169.195.159 blocked by Houston-Xeon-Dartnode. 2026-07-27T15:06:06.157 ... show more SSH brute-force attempt from 9.169.195.159 blocked by Houston-Xeon-Dartnode. 2026-07-27T15:06:06.157617+00:00 texas.dartnode.com sshd[221073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=9.169.195.159 2026-07-27T15:06:08.233547+00:00 texas.dartnode.com sshd[221073]: Failed password for invalid user ubuntu from 9.169.195.159 port 38502 ssh2 2026-07-27T15:06:08.526436+00:00 texas.dartnode.com sshd[221073]: Connection closed by invalid user ubuntu 9.169.195.159 port 38502 [preauth] show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-07-27 13:13:29 (11 hours ago)	This IP address carried out 29 SSH credential attack (attempts) on 26-07-2026. For more information ... show more This IP address carried out 29 SSH credential attack (attempts) on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 11:40:18 (13 hours ago)	9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 06:35:38 14397 sshd[455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.90.11 user=root Jul 27 06:35:40 14397 sshd[455]: Failed password for root from 103.55.90.11 port 55866 ssh2 Jul 27 06:31:11 14397 sshd[30682]: Failed password for root from 35.209.43.176 port 58517 ssh2 Jul 27 06:40:03 14397 sshd[2808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=9.169.195.159 user=root Jul 27 06:40:05 14397 sshd[2808]: Failed password for root from 9.169.195.159 port 51880 ssh2 IP Addresses Blocked: 103.55.90.11 (IN/India/103.55.90.11.home.ultranet.co.in) 35.209.43.176 (US/United States/176.43.209.35.bc.googleusercontent.com) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 10:16:17 (14 hours ago)	9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 9.169.195.159 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 05:12:08 15075 sshd[12164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.94.9.51 user=root Jul 27 05:12:10 15075 sshd[12164]: Failed password for root from 36.94.9.51 port 54744 ssh2 Jul 27 05:07:37 15075 sshd[9870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.155.86.225 user=root Jul 27 05:07:38 15075 sshd[9870]: Failed password for root from 43.155.86.225 port 50782 ssh2 Jul 27 05:16:03 15075 sshd[14717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=9.169.195.159 user=root IP Addresses Blocked: 36.94.9.51 (ID/Indonesia/-) 43.155.86.225 (HK/Hong Kong/-) show less	Brute-Force SSH
🇫🇮 Luhte	2026-07-27 09:39:53 (15 hours ago)	Unauthorised SSH/Telnet login attempt with user "root" at 2026-07-27T09:39:53Z	Brute-Force SSH
🇰🇷 tjx	2026-07-26 10:57:57 (1 day ago)	Honeypot brute-force via Cowrie SSH/Telnet honeypot. Username: azureuser \| Password: Drl2020 Session ... show more Honeypot brute-force via Cowrie SSH/Telnet honeypot. Username: azureuser \| Password: Drl2020 Session: cc84aac8 show less	Brute-Force SSH
🇩🇪 NetWatch	2026-07-26 10:37:43 (1 day ago)	The IP 9.169.195.159 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇳🇱 donarev419	2026-07-23 07:55:12 (4 days ago)	Connection to port 1083 with data transfer. Data preview: CONNECT www.google.com:443 HTTP/1.1 Host: ... show more Connection to port 1083 with data transfer. Data preview: CONNECT www.google.com:443 HTTP/1.1 Host: www.google.com:443 User-Agent: Mozilla/5.0 (Windows NT 1 show less	Port Scan Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.55

🇳🇬 105.112.208.88

🇮🇩 103.82.93.80

🇷🇺 94.41.141.36

🇺🇸 216.24.217.112

🇬🇧 213.166.84.55

🇨🇭 209.99.191.65

🇺🇸 205.210.31.14

🇦🇷 190.55.156.86

🇸🇾 185.110.104.132

🇧🇷 179.248.170.85

🇸🇦 168.149.77.105

🇺🇸 136.107.91.56

🇺🇸 129.121.114.225

🇭🇰 121.202.206.76

🇨🇳 116.179.32.78

🇻🇳 103.75.183.177

🇻🇳 103.75.183.43

🇻🇳 103.75.182.108

🇨🇳 101.126.86.90