JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.200.30.63

104.200.30.63 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 54%: ?

54%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Cedar Knolls, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.200.30.63

Whois 104.200.30.63

IP Abuse Reports for 104.200.30.63:

This IP address has been reported a total of 138 times from 86 distinct sources. 104.200.30.63 was first reported on July 23rd 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-05-25 20:19:41 (1 week ago)	[20:19] Port scanning. Port(s) scanned: TCP/110	Port Scan
🇺🇸 billybobby	2026-05-25 20:19:15 (1 week ago)	Blocked by UFW [990/tcp] \| SPT: 61000 \| TTL: 247 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [990/tcp] \| SPT: 61000 \| TTL: 247 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇬 drewf.ink	2026-05-23 06:05:35 (2 weeks ago)	[06:05] Port scanning. Port(s) scanned: TCP/587	Port Scan
🇺🇸 drewf.ink	2026-05-22 20:06:06 (2 weeks ago)	[20:06] Port scanning. Port(s) scanned: TCP/993	Port Scan
🇺🇸 Vasili Sviridov	2026-05-22 20:05:02 (2 weeks ago)	: Connection closed (no auth attempts in 0 secs)	Brute-Force
🇳🇱 tmiland	2026-05-16 12:17:43 (3 weeks ago)	(postfix_disconnect) lost connection after AUTH from 104.200.30.63 (US/United States/-): 1 in the la ... show more (postfix_disconnect) lost connection after AUTH from 104.200.30.63 (US/United States/-): 1 in the last 3600 secs; IP: 104.200.30.63; Ports: *; Direction: inout; Trigger: other; Logs: 2026-05-16T14:17:37.930966+02:00 vps1 postfix/smtpd[2133103]: disconnect from unknown[104.200.30.63] ehlo=1 starttls=0/1 commands=1/2 show less	Brute-Force
🇸🇬 drewf.ink	2026-05-15 10:15:48 (3 weeks ago)	[10:15] Port scanning. Port(s) scanned: TCP/995	Port Scan
🇦🇺 trentwiles.com	2026-05-15 08:14:11 (3 weeks ago)	Unauthorized connection attempt detected from IP address 104.200.30.63 to port 2323 [SYD]	Port Scan
🇺🇸 drewf.ink	2026-05-15 08:14:10 (3 weeks ago)	[08:14] Port scanning. Port(s) scanned: TCP/465	Port Scan
🇮🇳 evicky2002	2026-04-30 13:04:10 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-13 00:42:25 (1 month ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/104.200.30.63 2026-04 ... show more ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/104.200.30.63 2026-04-12 01:08:19 ["uname -s -v -n -r -m"] 2026-04-12 01:10:27 ["uname -s -v -n -r -m"] 2026-04-12 01:08:58 ["uname -s -v -n -r -m"] show less	Brute-Force
🇳🇱 applemooz	2026-04-12 10:05:30 (1 month ago)	Apr 12 12:05:23 ns37 sshd[6000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Apr 12 12:05:23 ns37 sshd[6000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.30.63 Apr 12 12:05:25 ns37 sshd[6000]: Failed password for invalid user omid from 104.200.30.63 port 38252 ssh2 ... show less	Brute-Force SSH
🇩🇪 Admins@FBN	2026-04-12 10:02:51 (1 month ago)	FW-PortScan: Traffic Blocked srcport=35376 dstport=22	Port Scan Hacking SSH
🇰🇷 Woodie	2026-04-12 09:57:19 (1 month ago)	2026-04-12T05:57:11.317633-04:00 debian sshd[179240]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-04-12T05:57:11.317633-04:00 debian sshd[179240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.30.63 user=root 2026-04-12T05:57:13.383885-04:00 debian sshd[179240]: Failed password for root from 104.200.30.63 port 57720 ssh2 2026-04-12T05:57:16.434360-04:00 debian sshd[179300]: Invalid user ftp from 104.200.30.63 port 60396 2026-04-12T05:57:16.608313-04:00 debian sshd[179300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.30.63 2026-04-12T05:57:18.358697-04:00 debian sshd[179300]: Failed password for invalid user ftp from 104.200.30.63 port 60396 ssh2 ... show less	Brute-Force SSH
🇫🇷 adlp.org	2026-04-12 09:56:10 (1 month ago)	Apr 12 11:56:04 charon sshd[4065981]: User bot from 104.200.30.63 not allowed because none of user's ... show more Apr 12 11:56:04 charon sshd[4065981]: User bot from 104.200.30.63 not allowed because none of user's groups are listed in AllowGroups Apr 12 11:56:05 charon sshd[4065986]: Invalid user developer from 104.200.30.63 port 54544 Apr 12 11:56:10 charon sshd[4065988]: Invalid user mohammad from 104.200.30.63 port 38838 ... show less	Brute-Force SSH

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.240.205.34

🇩🇪 213.209.159.228

🇪🇬 213.131.69.50

🇳🇱 195.178.110.26

🇬🇧 185.216.145.183

🇺🇸 162.217.160.185

🇨🇳 140.143.193.41

🇰🇬 89.237.192.62

🇩🇪 84.32.10.175

🇺🇸 74.125.224.46

🇵🇰 39.61.130.106

🇹🇼 35.201.165.111

🇺🇸 34.106.85.165

🇬🇧 2a06:4880:2000::42

🇬🇧 195.250.23.247

🇳🇱 91.92.42.19

🇺🇸 54.145.156.5

🇰🇿 31.132.90.3

🇳🇱 160.119.76.59

🇮🇳 103.252.168.4