Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Connection to a trap port: 1 attempts on port 22, 2026-11-14 15:12 - 15:12 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
2026-11-14T22:10:12.824979+08:00 cowgl sshd[3974064]: Disconnected from authenticating user root 130.49.143.7 port 50714 [preauth]
2026-11-14T22:34:08.839289+08:00 cowgl sshd[4030889]: Invalid user ubuntu from 130.49.143.7 port 37240
2026-11-14T22:34 ...
show more2026-11-14T22:10:12.824979+08:00 cowgl sshd[3974064]: Disconnected from authenticating user root 130.49.143.7 port 50714 [preauth]
2026-11-14T22:34:08.839289+08:00 cowgl sshd[4030889]: Invalid user ubuntu from 130.49.143.7 port 37240
2026-11-14T22:34:08.842586+08:00 cowgl sshd[4030889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.49.143.7
2026-11-14T22:34:10.281191+08:00 cowgl sshd[4030889]: Failed password for invalid user ubuntu from 130.49.143.7 port 37240 ssh2
...
show less
2026-11-14T09:49:57.049485vps.myai.com sshd[1685758]: Invalid user ubuntu from 130.49.143.7 port 34942
2026-11-14T09:49:57.070277vps.myai.com sshd[1685758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.4 ...
show more2026-11-14T09:49:57.049485vps.myai.com sshd[1685758]: Invalid user ubuntu from 130.49.143.7 port 34942
2026-11-14T09:49:57.070277vps.myai.com sshd[1685758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.49.143.7
2026-11-14T09:49:59.372264vps.myai.com sshd[1685758]: Failed password for invalid user ubuntu from 130.49.143.7 port 34942 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-11-14T13:29:07.774009+08:00 kuro gitea[1282]: Unable to negotiate with 130.49.143.7 port 47896: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie- ...
show more2026-11-14T13:29:07.774009+08:00 kuro gitea[1282]: Unable to negotiate with 130.49.143.7 port 47896: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-11-14T13:47:54.244085+08:00 kuro gitea[1282]: Unable to negotiate with 130.49.143.7 port 32858: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-11-14T14:06:55.415369+08:00 kuro gitea[1282]: Unable to negotiate with 130.49.143.7 port 37718: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
...
show less
2026-11-13T08:10:08.413819+00:00 localhost sshd-session[397023]: error: PAM: Authentication failure for root from 130.49.143.7
2026-11-13T10:59:51.603040+00:00 localhost sshd-session[397807]: Invalid user ubuntu from 130.49.143.7 port 47570
2026-11-1 ...
show more2026-11-13T08:10:08.413819+00:00 localhost sshd-session[397023]: error: PAM: Authentication failure for root from 130.49.143.7
2026-11-13T10:59:51.603040+00:00 localhost sshd-session[397807]: Invalid user ubuntu from 130.49.143.7 port 47570
2026-11-13T10:59:53.729878+00:00 localhost sshd-session[397807]: error: PAM: User not known to the underlying authentication module for illegal user ubuntu from 130.49.143.7
2026-11-13T10:59:53.730367+00:00 localhost sshd-session[397807]: Failed keyboard-interactive/pam for invalid user ubuntu from 130.49.143.7 port 47570 ssh2
2026-11-13T10:59:54.383307+00:00 localhost sshd-session[397807]: Received disconnect from 130.49.143.7 port 47570:11: [preauth]
...
show less
Port Scan
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown