JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

96.9.125.249

Recent Activity

Abuse confidence score ?

86% Critical

15 reports

14 reporters · latest 9 hours ago

ISP	BL Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399629
Domain Name	blnwx.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 96.9.125.249

Export CSV

This IP address has been reported a total of 15 times from 14 distinct sources. 96.9.125.249 was first reported on October 5th 2026, and the most recent report was 9 hours ago. In the last 60 days, the top reporter locations were: France with 6 reports; Germany with 4 reports; Australia with 1 report. The most common categories in these recent reports were: Port Scan 14 times; Web App Attack 1 time; DDoS Attack 1 time; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Yepngo	2026-10-05 10:24:17 (9 hours ago)	2026-10-05T11:38:02.693460+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ... show more 2026-10-05T11:38:02.693460+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=96.9.125.249 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=17486 PROTO=TCP SPT=44103 DPT=31337 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T12:24:05.295686+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=96.9.125.249 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=60342 PROTO=TCP SPT=44103 DPT=7443 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T12:24:05.295686+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=96.9.125.249 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=60342 PROTO=TCP SPT=44103 DPT=7443 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T12:24:16.475165+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=96.9.125.249 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=2896 PROTO=TCP SPT=44103 DP ... show less	Port Scan
🇳🇱 Selckie	2026-10-05 10:20:03 (9 hours ago)	fail2ban: NGINX unusual impact	Web App Attack
🇩🇪 David Ferneding	2026-10-05 08:43:44 (10 hours ago)	Blocked by UFW (TCP on 4321) Source port: 44103 TTL: 248 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 4321) Source port: 44103 TTL: 248 Packet length: 44 TOS: 0x00 This report (for 96.9.125.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kelliwic.net	2026-10-05 08:33:40 (11 hours ago)	Port scan detected (F2B)	Port Scan
🇫🇷 Yepngo	2026-10-05 08:29:28 (11 hours ago)	2026-10-05T09:31:30.049580+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ... show more 2026-10-05T09:31:30.049580+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=96.9.125.249 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=35907 PROTO=TCP SPT=44103 DPT=50050 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T09:44:12.360883+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=96.9.125.249 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=475 PROTO=TCP SPT=44103 DPT=8800 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T09:46:26.219048+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=96.9.125.249 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=59541 PROTO=TCP SPT=44103 DPT=9999 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T10:00:54.217490+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=96.9.125.249 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=115 PROTO=TCP SPT=44103 DPT=1 ... show less	Port Scan
🇬🇧 wiredalter	2026-10-05 08:25:35 (11 hours ago)	Blocked by UFW on o4VPS [31337/tcp] Source Port: 44103 TTL: 230 Packet Length: 44 TOS: 0x00 Analyze ... show more Blocked by UFW on o4VPS [31337/tcp] Source Port: 44103 TTL: 230 Packet Length: 44 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan
🇫🇷 Petre 21_ip	2026-10-05 08:19:44 (11 hours ago)	2026-10-05T10:19:44.076032+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-10-05T10:19:44.076032+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=96.9.125.249 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=49894 PROTO=TCP SPT=44103 DPT=8082 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇺 HostFission	2026-10-05 08:13:36 (11 hours ago)	PSAD port scan detected	Port Scan
🇩🇪 phil2k	2026-10-05 08:00:35 (11 hours ago)	fail2ban:firewall:2026-10-05T09:36:29.002964+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-10-05T09:36:29.002964+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=96.9.125.249 DST=<ANONYMIZED_IP> LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=38171 PROTO=TCP SPT=44103 DPT=4444 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-05T10:00:32.406638+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=96.9.125.249 DST=<ANONYMIZED_IP> LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=874 PROTO=TCP SPT=44103 DPT=50050 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇩🇪 bescared	2026-10-05 07:59:46 (11 hours ago)	F2B - Malicious activity detected. Excessive port scans. -8ff06ede-	Port Scan
🇫🇷 dusfor72	2026-10-05 07:53:15 (11 hours ago)	aggressive portscan ...	Port Scan
🇸🇬 celestialcity	2026-10-05 07:37:45 (12 hours ago)	Blocked by UFW on celestialcityas [31337/tcp] \| SPT: 44103 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Report ... show more Blocked by UFW on celestialcityas [31337/tcp] \| SPT: 44103 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-10-05 07:34:16 (12 hours ago)	Connection atttempts against closed TCP ports Oct 5 09:14:49 BLOCK SRC=96.9.125.249 LEN=44 TOS=0x00 ... show more Connection atttempts against closed TCP ports Oct 5 09:14:49 BLOCK SRC=96.9.125.249 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=20200 PROTO=TCP SPT=44103 DPT=8888 WINDOW=1024 RES=0x00 SYN Oct 5 09:29:33 BLOCK SRC=96.9.125.249 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=17898 PROTO=TCP SPT=44103 DPT=8082 WINDOW=1024 RES=0x00 SYN Oct 5 09:34:14 BLOCK SRC=96.9.125.249 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=801 PROTO=TCP SPT=44103 DPT=9443 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇫🇷 Little Iguana	2026-10-05 07:18:00 (12 hours ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-10-05 07:12:36 (12 hours ago)	2026-10-05T09:12:31.627148+02:00 vps kernel: [7555134.574322] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-10-05T09:12:31.627148+02:00 vps kernel: [7555134.574322] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=96.9.125.249 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=26622 PROTO=TCP SPT=44103 DPT=4443 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 194.180.49.77

🇳🇱 85.11.167.138

🇺🇸 20.106.173.193

🇺🇸 2607:5500:3000:4da::2

🇳🇱 199.91.220.245

🇹🇭 171.100.156.38

🇺🇸 170.205.31.190

🇳🇵 157.10.100.12

🇩🇪 130.12.180.39

🇧🇩 103.12.205.20

🇨🇦 85.217.149.26

🇳🇱 77.239.124.31

🇺🇸 35.168.130.13

🇺🇸 172.171.244.149

🇺🇸 146.70.72.174

🇩🇪 141.98.153.85

🇨🇳 140.246.108.106

🇨🇿 85.193.7.74

🇳🇱 77.91.71.91

🇫🇷 51.91.96.79