JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.104.30.249

Activity Trending Down

Abuse confidence score ?

2% Caution

323 reports

68 reporters · latest 2 weeks ago

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	172-104-30-249.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Cedar Knolls, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.104.30.249

This IP address has been reported a total of 323 times from 68 distinct sources. 172.104.30.249 was first reported on September 1st 2023, and the most recent report was 2 weeks ago. In the last 60 days, the only reporter location was: United States of America with 1 report. The only category in these recent reports was: Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-14 09:32:56 (2 weeks ago)	Sep 14 05:32:56 localhost kernel: [117723486.788660] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Sep 14 05:32:56 localhost kernel: [117723486.788660] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.104.30.249 DST=192.168.203.114 LEN=40 TOS=0x00 PREC=0x00 TTL=59 ID=0 DF PROTO=TCP SPT=179 DPT=62945 WINDOW=0 RES=0x00 RST URGP=0 Sep 14 05:32:56 localhost kernel: [117723486.788691] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.104.30.249 DST=192.168.203.114 LEN=40 TOS=0x00 PREC=0x00 TTL=59 ID=0 DF PROTO=TCP SPT=179 DPT=62945 SEQ=1276386641 ACK=0 WINDOW=0 RES=0x00 RST URGP=0 Sep 14 05:32:56 localhost kernel: [117723486.796144] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.104.30.249 DST=192.168.203.114 LEN=40 TOS=0x00 PREC=0x00 TTL=59 ID=0 DF PROTO=TCP SPT=179 DPT=62945 WINDOW=0 RES=0x00 RST URGP=0 Sep 14 05:32:56 localhost kernel: [117723486.796150] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.104.30.249 DST=192.168.203.114 LEN=40 TOS show less	Port Scan
🇺🇸 MirrorImageGaming	2026-03-18 14:11:15 (6 months ago)	TCP probe(s) @ 8443 US	Port Scan
🇩🇪 acadeova	2026-02-23 17:26:20 (7 months ago)	Blocked by UFW on vps4 [995/tcp] Source port: 61000 TTL: 242 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on vps4 [995/tcp] Source port: 61000 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 donarev419	2026-02-10 20:34:13 (7 months ago)	Port scan detected on port 25 (connection without data transfer)	Port Scan
🇩🇪 acadeova	2026-02-10 20:28:40 (7 months ago)	Blocked by UFW on vps4 [563/tcp] Source port: 61000 TTL: 242 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on vps4 [563/tcp] Source port: 61000 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇬 drewf.ink	2026-01-29 04:21:48 (8 months ago)	[04:21] Port scanning. Port(s) scanned: TCP/5060	Port Scan
🇦🇺 trentwiles.com	2026-01-29 04:19:59 (8 months ago)	Unauthorized connection attempt detected from IP address 172.104.30.249 to port 8443 [SYD]	Port Scan
🇺🇸 Vasili Sviridov	2026-01-29 04:19:38 (8 months ago)	: Connection closed (no auth attempts in 0 secs)	Brute-Force
🇺🇸 LotPhantom	2026-01-29 04:18:43 (8 months ago)	2026-01-29T04:18:25.905804+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-01-29T04:18:25.905804+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=172.104.30.249 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=55397 PROTO=TCP SPT=61000 DPT=993 WINDOW=1024 RES=0x00 SYN URGP=0 2026-01-29T04:18:42.859105+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=172.104.30.249 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=11363 PROTO=TCP SPT=61000 DPT=636 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 drewf.ink	2026-01-29 02:12:05 (8 months ago)	[02:12] Port scanning. Port(s) scanned: TCP/990	Port Scan
🇨🇦 Largnet SOC	2025-02-14 20:34:59 (1 year ago)	172.104.30.249 triggered Icarus honeypot on port 3389. Check us out on github.	Port Scan Hacking
🇺🇸 MPL	2025-02-14 16:58:22 (1 year ago)	tcp/3389	Port Scan
🇺🇸 MPL	2025-02-14 16:58:22 (1 year ago)	tcp/3389	Port Scan
🇯🇵 mkaraki	2025-02-14 12:54:12 (1 year ago)	1739537639 # Service_probe # SIGNATURE_SEND # source_ip:172.104.30.249 # dst_port:4588 ...	Port Scan
🇺🇸 MPL	2025-02-14 12:29:54 (1 year ago)	tcp/4588 (2 or more attempts)	Port Scan

Showing 1 to 15 of 323 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 181.177.85.20

🇸🇪 176.10.197.168

🇺🇸 162.216.150.164

🇺🇸 157.245.243.118

🇺🇸 146.75.136.1

🇰🇷 122.202.41.161

🇲🇰 77.29.196.170

🇨🇳 111.9.22.102

🇳🇱 109.160.32.170

🇿🇦 105.8.4.235

🇹🇼 1.168.82.215

🇲🇽 187.174.238.116

🇺🇸 134.199.226.208

🇺🇸 52.165.92.130

🇷🇺 31.148.228.76

🇨🇳 220.167.233.254

🇭🇰 152.32.190.84

🇺🇸 136.90.80.246

🇺🇸 104.152.57.231

🇻🇳 103.200.25.79