JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 69.67.173.28

69.67.173.28 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 100%: ?

100%

ISP	BL Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399629
Domain Name	blnwx.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 69.67.173.28

Whois 69.67.173.28

IP Abuse Reports for 69.67.173.28:

This IP address has been reported a total of 59 times from 42 distinct sources. 69.67.173.28 was first reported on April 3rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-07-25 09:54:24 (1 hour ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_da ... show more [DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged,connection_failed show less	Hacking
🇨🇦 Tanados	2026-07-25 09:46:11 (1 hour ago)	Blocked by UFW [28017/tcp] Source port: 52752 TTL: 238 Packet length: 44 TOS: 0x00 This report was ... show more Blocked by UFW [28017/tcp] Source port: 52752 TTL: 238 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 HamSammich	2026-07-25 08:54:38 (2 hours ago)	Automated sensor: 4 MSSQL, MySQL, port 1521, port 5432 connection/probe attempts over the last 24h ( ... show more Automated sensor: 4 MSSQL, MySQL, port 1521, port 5432 connection/probe attempts over the last 24h (latest 2026-07-25T08:54Z). show less	Port Scan Hacking Brute-Force
🇦🇺 HostFission	2026-07-25 08:51:08 (2 hours ago)	PSAD port scan detected	Port Scan
🇩🇪 iNetWorker	2026-07-25 07:16:30 (4 hours ago)	trying to access non-authorized port	Port Scan
🇩🇪 derLoosi	2026-07-25 05:11:24 (6 hours ago)	HV1.2 Blocked by UFW	Port Scan
🇫🇷 masterguru	2026-07-25 04:05:01 (7 hours ago)	Port Scan detected from 69.67.173.28 (RO/Romania/-). 11 hits in the last 186 seconds (0-195)	Port Scan
Anonymous	2026-07-25 03:51:47 (7 hours ago)	2026-07-25T05:51:46.332766+02:00 vps kernel: [1322361.478510] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-07-25T05:51:46.332766+02:00 vps kernel: [1322361.478510] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=69.67.173.28 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=42721 PROTO=TCP SPT=51493 DPT=23 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 sandra361	2026-07-25 03:38:49 (7 hours ago)	Port scan detected: 8 attempts across 8 ports (21,22,443,1433,1723,5985,6379,8888). \| Evidence: GHOS ... show more Port scan detected: 8 attempts across 8 ports (21,22,443,1433,1723,5985,6379,8888). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=69.67.173.28 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=38455 PROTO=TCP SPT=50598 DPT=22 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 SSP	2026-07-25 03:35:19 (7 hours ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 222 Unique Ports: 28 Destination Ports: 80, 443, 1521, 28017, 9300, 53, 27017, 3306, 9200, 23, 993, 5985, 135, 143, 5432, 6379, 1723, 8080, 8443, 9090, 1433, 5900, 21, 445, 139, 22, 3389, 8888 First Seen: 2026-07-24 03:35 UTC Last Seen: 2026-07-24 19:45 UTC show less	Port Scan
🇩🇪 marcel-knorr.de	2026-07-25 00:58:51 (10 hours ago)	[MK-VM6] Blocked by UFW	Brute-Force Port Scan
🇫🇷 masterguru	2026-07-24 18:26:28 (16 hours ago)	Port Scan detected from 69.67.173.28 (RO/Romania/-). 11 hits in the last 241 seconds (0-195)	Port Scan
🇫🇷 lechat	2026-07-24 18:04:24 (17 hours ago)	2026-07-24T18:04:24.560893+0000 inbound port scan detected by Suricata. src=69.67.173.28:56174 dst=5 ... show more 2026-07-24T18:04:24.560893+0000 inbound port scan detected by Suricata. src=69.67.173.28:56174 dst=51.68.231.122:3306 proto=TCP. signature="ET SCAN Suspicious inbound to mySQL port 3306" category="Potentially Bad Traffic" sid=2010937 reason=scan_signature. show less	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-07-24 17:03:47 (18 hours ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇫🇷 lechat	2026-07-24 16:39:56 (18 hours ago)	2026-07-24T16:39:55.944975+0000 inbound port scan detected by Suricata. src=69.67.173.28:51192 dst=5 ... show more 2026-07-24T16:39:55.944975+0000 inbound port scan detected by Suricata. src=69.67.173.28:51192 dst=51.68.231.122:3306 proto=TCP. signature="ET SCAN Suspicious inbound to mySQL port 3306" category="Potentially Bad Traffic" sid=2010937 reason=scan_signature. show less	Port Scan

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.110.17.127

🇬🇧 35.203.210.54

🇺🇸 2a09:bac5:6d75:aa::11:172

🇵🇱 185.125.4.254

🇺🇸 147.185.132.230

🇺🇸 34.24.188.16

🇦🇱 188.93.112.20

🇨🇳 183.6.64.180

🇫🇷 85.217.140.45

🇪🇪 62.65.197.114

🇰🇪 41.89.195.25

🇸🇬 35.187.231.181

🇰🇷 20.41.117.16

🇺🇸 2a04:4e40:e040:0:637:426a:ac93:55e9

🇩🇪 2a04:4e40:e000:0:6f4:e75a:1281:a507

🇷🇺 195.88.120.62

🇺🇦 195.18.18.142

🇧🇷 186.233.43.26

🇩🇪 165.232.118.73

🇺🇸 154.92.23.249