Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-15T11:34:40.815493vm6975.akenai.wtf sshd[144863]: Failed password for root from 120.48.9.221 port 40770 ssh2
2026-11-15T11:38:55.698103vm6975.akenai.wtf sshd[144867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ...
show more2026-11-15T11:34:40.815493vm6975.akenai.wtf sshd[144863]: Failed password for root from 120.48.9.221 port 40770 ssh2
2026-11-15T11:38:55.698103vm6975.akenai.wtf sshd[144867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.9.221 user=root
2026-11-15T11:38:57.768378vm6975.akenai.wtf sshd[144867]: Failed password for root from 120.48.9.221 port 57766 ssh2
...
show less
2026-11-15T04:50:53.155494+00:00 naomi sshd[1026179]: Disconnected from authenticating user root 120.48.9.221 port 45788 [preauth]
2026-11-15T05:00:06.353878+00:00 naomi sshd[1026325]: error: kex_exchange_identification: read: Connection reset by pee ...
show more2026-11-15T04:50:53.155494+00:00 naomi sshd[1026179]: Disconnected from authenticating user root 120.48.9.221 port 45788 [preauth]
2026-11-15T05:00:06.353878+00:00 naomi sshd[1026325]: error: kex_exchange_identification: read: Connection reset by peer
2026-11-15T05:00:06.353987+00:00 naomi sshd[1026325]: Connection reset by 120.48.9.221 port 43940
...
show less
2026-11-15T04:24:19.634987+02:00 rc01 sshd[3720439]: Invalid user ubuntu from 120.48.9.221 port 51140
2026-11-15T04:24:19.640141+02:00 rc01 sshd[3720439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48. ...
show more2026-11-15T04:24:19.634987+02:00 rc01 sshd[3720439]: Invalid user ubuntu from 120.48.9.221 port 51140
2026-11-15T04:24:19.640141+02:00 rc01 sshd[3720439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.9.221
2026-11-15T04:24:21.494635+02:00 rc01 sshd[3720439]: Failed password for invalid user ubuntu from 120.48.9.221 port 51140 ssh2
...
show less
Nov 15 02:30:45 50581 sshd[2237451]: Invalid user root1 from 120.48.9.221 port 45834
Nov 15 02:30:45 50581 sshd[2237451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.9.221
Nov 15 02:30:47 50581 sshd ...
show moreNov 15 02:30:45 50581 sshd[2237451]: Invalid user root1 from 120.48.9.221 port 45834
Nov 15 02:30:45 50581 sshd[2237451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.9.221
Nov 15 02:30:47 50581 sshd[2237451]: Failed password for invalid user root1 from 120.48.9.221 port 45834 ssh2
...
show less
Nov 15 00:34:20 vps-de1 sshd[3957489]: User root from 120.48.9.221 not allowed because not listed in AllowUsers
Nov 15 00:42:01 vps-de1 sshd[3958133]: User root from 120.48.9.221 not allowed because not listed in AllowUsers
Nov 15 00:44:07 vps-de1 ss ...
show moreNov 15 00:34:20 vps-de1 sshd[3957489]: User root from 120.48.9.221 not allowed because not listed in AllowUsers
Nov 15 00:42:01 vps-de1 sshd[3958133]: User root from 120.48.9.221 not allowed because not listed in AllowUsers
Nov 15 00:44:07 vps-de1 sshd[3958320]: Invalid user admin from 120.48.9.221 port 33574
...
show less
2026-11-14T22:04:08.120623+00:00 xenon sshd-session[2506424]: Disconnected from authenticating user root 120.48.9.221 port 33416 [preauth]
2026-11-14T22:06:45.792667+00:00 xenon sshd-session[2509755]: Disconnected from authenticating user root 120.48 ...
show more2026-11-14T22:04:08.120623+00:00 xenon sshd-session[2506424]: Disconnected from authenticating user root 120.48.9.221 port 33416 [preauth]
2026-11-14T22:06:45.792667+00:00 xenon sshd-session[2509755]: Disconnected from authenticating user root 120.48.9.221 port 38380 [preauth]
2026-11-14T22:10:44.210929+00:00 xenon sshd-session[2514021]: Connection closed by 120.48.9.221 port 35062 [preauth]
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
