2.88.114.98

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
99% Critical
23 reports
20 reporters · latest 4 days ago
ISP
STC, Riyadh Residential Fixed Broadband
Usage Type
Fixed Line ISP
ASN
AS25019
Domain Name
stc.com.sa
Country
🇸🇦 Saudi Arabia
City
Riyadh, Riyadh Region
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 11 🇩🇪 Germany 4 🇵🇱 Poland 2
Most common categories Port Scan 20 Hacking 7 Brute-Force 3 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 etu brutus
2.88.114.98 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
🇦🇹 joe-abuse
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (445/tcp); first 2026-11-10 15:14:21 UTC, last 2026-11-10 15:14:21 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇩🇪 goodbytes
Suricata IDS, web server and web honeypot logs on our public servers, UTC. 2026-11-10 13:59:46 to 2026-11-10 13:59:46: 1 alerts. Evidence: 2026-11-10 13:59:46 IDS: ET SCAN Suspicious inbound to MSSQL port 1433 (TCP/1433)
Port Scan
🇧🇷 SOC-BR
Trying access in non-authorized port - Source Port 45998 - Destination Port 445 - Time 2026-11-09 23:07:07 (UTC-3)
Port Scan Hacking
🇺🇸 cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan Hacking
🇦🇺 Block Rockin' Beats
Attempted connection to TCP port 445 (SMB)
Port Scan
🇫🇷 sthoyer.de
Nov 9 15:52:54 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=2.88.114.98 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=46067 PROTO=TCP SPT=56002 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 ...
Port Scan
🇺🇸 OceanTreasure
tcp/1433; SCAN Suspicious inbound to MSSQL port 1433 @ 2026-11-09T12:50:16Z
Port Scan
🇵🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 445/SMB | Proto: TCP(1) | Flags: all SYN | TTL: 240 | Len: 40B | Win: 1024(1) | F2B/ufw-honeypot@2026-11-09T04:20:28Z
Port Scan Hacking
🇩🇪 IP Analyzer
Unauthorized connection attempt from IP address 2.88.114.98 on Port 445(SMB)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 1433) Source port: 56002 TTL: 236 Packet length: 40 TOS: 0x08 This report (for 2.88.114.98) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 Phil Schuyler
Windows domain controller recorded 2 successful anonymous network logon event(s) (Windows Event 4624, Logon Type 3); 18 SMB network-share access event(s) (Windows Event 5140); last observed 2026-11-09T21:15:17Z.
Hacking
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇺🇸 HamSammich
Automated sensor: 1 MSSQL connection/probe attempts over the last 24h (latest 2026-11-08T10:31Z).
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 223.29.232.254
🇧🇷 205.210.31.200
🇬🇧 185.216.145.164
🇨🇳 118.145.114.113
🇨🇳 117.40.147.138
🇰🇪 102.210.148.41
🇳🇱 91.92.40.12
🇨🇳 219.151.188.245
🇳🇱 213.209.159.210
🇬🇧 193.163.125.4
🇬🇧 193.32.209.231
🇳🇱 178.62.195.212
🇺🇸 159.203.136.197
🇬🇧 35.203.211.211
🇨🇳 222.210.35.197
🇰🇷 218.238.5.110
🇺🇸 216.25.89.68
🇨🇿 95.85.244.87
🇲🇱 74.244.87.147
🇹🇭 49.0.87.123
feedback