This IP address has been reported a total of
418
times from
233 distinct
sources.
120.48.170.9 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-04-24T02:24:59.329213+00:00 ephialtes2 sshd[3415967]: Failed password for root from 120.48.170. ...
show more2026-04-24T02:24:59.329213+00:00 ephialtes2 sshd[3415967]: Failed password for root from 120.48.170.9 port 44946 ssh2
2026-04-24T02:25:01.214405+00:00 ephialtes2 sshd[3415987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root
2026-04-24T02:25:03.718990+00:00 ephialtes2 sshd[3415987]: Failed password for root from 120.48.170.9 port 49714 ssh2
2026-04-24T02:25:05.647759+00:00 ephialtes2 sshd[3416021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root
2026-04-24T02:25:07.700610+00:00 ephialtes2 sshd[3416021]: Failed password for root from 120.48.170.9 port 53874 ssh2
...
show less
2026-04-24T01:06:00.753951+00:00 instance-20241019-1127 sshd[2320202]: Connection closed by authenti ...
show more2026-04-24T01:06:00.753951+00:00 instance-20241019-1127 sshd[2320202]: Connection closed by authenticating user root 120.48.170.9 port 47042 [preauth]
...
show less
2026-04-24T00:50:55.697253+00:00 instance-20241019-1127 sshd[2320140]: Connection closed by authenti ...
show more2026-04-24T00:50:55.697253+00:00 instance-20241019-1127 sshd[2320140]: Connection closed by authenticating user root 120.48.170.9 port 52148 [preauth]
...
show less
2026-04-24T01:31:31.239364+01:00 hammer sshd[629064]: Failed password for root from 120.48.170.9 por ...
show more2026-04-24T01:31:31.239364+01:00 hammer sshd[629064]: Failed password for root from 120.48.170.9 port 42664 ssh2
2026-04-24T01:31:35.740665+01:00 hammer sshd[629066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root
2026-04-24T01:31:37.900011+01:00 hammer sshd[629066]: Failed password for root from 120.48.170.9 port 53988 ssh2
...
show less
Blocked by UFW (TCP on 22)
Source port: 37070
TTL: 47
Packet length: 60
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 22)
Source port: 37070
TTL: 47
Packet length: 60
TOS: 0x08
This report (for 120.48.170.9) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-04-23T22:41:09.097894+00:00 v2202502255267314709 sshd[3743777]: User root from 120.48.170.9 not ...
show more2026-04-23T22:41:09.097894+00:00 v2202502255267314709 sshd[3743777]: User root from 120.48.170.9 not allowed because not listed in AllowUsers
2026-04-23T22:41:10.958775+00:00 v2202502255267314709 sshd[3743838]: User root from 120.48.170.9 not allowed because not listed in AllowUsers
2026-04-23T22:41:17.806666+00:00 v2202502255267314709 sshd[3743841]: User root from 120.48.170.9 not allowed because not listed in AllowUsers
2026-04-23T22:41:21.987787+00:00 v2202502255267314709 sshd[3743905]: User root from 120.48.170.9 not allowed because not listed in AllowUsers
2026-04-23T22:41:23.081664+00:00 v2202502255267314709 sshd[3743949]: User root from 120.48.170.9 not allowed because not listed in AllowUsers
...
show less