94.61.96.88

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
38% Elevated
15 reports
7 reporters · latest 9 hours ago
ISP
DSL-ULL
Usage Type
Fixed Line ISP
ASN
AS12353
Hostname(s)
88.96.61.94.rev.vodafone.pt
Domain Name
vodafone.com
Country
🇵🇹 Portugal
City
Vila Nova de Gaia, Porto
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 7 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇷🇺 Russian Federation 5 🇺🇸 United States of America 4 🇵🇹 Portugal 3
Most common categories DDoS Attack 8 Exploited Host 7 Bad Web Bot 5 Web App Attack 4 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 ELYAZ
(y6) Failed scan -byebye- from 94.61.96.88 (PT/Portugal/-): (CF_ENABLE)
Hacking
🇩🇪 LRob
DDoS Attack Bad Web Bot
Anonymous
Distributed web scraper targeting /store/filtered/ on shop.grizzlyliquor.com. Residential proxy - IP+timestamp provided for ISP DHCP log attribution.
DDoS Attack Bad Web Bot Exploited Host
🇵🇹 Information Security
Web App Attack ...
Web App Attack
🇵🇹 PT
web app attack (botnet)
Exploited Host Web App Attack
🇵🇹 Information Security
Web App Attack ...
Web App Attack
🇩🇪 LRob
Calendar filter flood (L7 DDoS) | host: escrime-auvergnerhonealpes.fr | path: http://escrime-auvergnerhonealpes.fr/calendrier-2/action~agenda/cat_ids~155,190/tag_ids~612,725,671,405,652,224/request_format~j | src_port: 52504
DDoS Attack Web App Attack
🇷🇺 AbuseIPDB informer
nfdump top talker: 94.61.96.88 | first seen 2026-10-12 20:55:34.528 | duration 00:00:00.078 | flows=1 | packets=31713 | bytes=23.6 M | pps=403 | bps=2.4 M | bpp=744 | proto=udp
DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 94.61.96.88 | first seen 2026-10-12 20:31:52.192 | duration 00:00:00.077 | flows=1 | packets=25575 | bytes=18.8 M | pps=330 | bps=1.9 M | bpp=734 | proto=udp
DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 94.61.96.88 | first seen 2026-10-12 19:56:33.536 | duration 00:00:00.067 | flows=1 | packets=21483 | bytes=15.6 M | pps=316 | bps=1.8 M | bpp=725 | proto=udp
DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 94.61.96.88 | first seen 2026-10-12 19:27:25.056 | duration 00:00:00.074 | flows=4 | packets=114576 | bytes=82.9 M | pps=1532 | bps=8.9 M | bpp=723 | proto=udp
DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 94.61.96.88 | first seen 2026-10-09 11:51:23.776 | duration 00:00:00.157 | flows=3 | packets=67518 | bytes=50.5 M | pps=429 | bps=2.6 M | bpp=747 | proto=any
DDoS Attack Port Scan Exploited Host
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 209.99.190.186
🇹🇷 193.35.155.234
🇺🇸 138.197.206.208
🇺🇸 136.118.22.118
🇻🇳 103.68.69.16
🇸🇬 43.128.119.50
🇨🇳 175.9.187.65
🇺🇸 157.22.127.240
🇧🇷 138.185.126.251
🇷🇴 80.94.95.245
🇳🇱 77.91.71.33
🇺🇸 71.120.181.69
🇺🇸 68.104.212.197
🇸🇪 13.51.178.142
🇹🇭 203.156.108.110
🇦🇷 186.128.225.154
🇺🇸 184.105.139.69
🇨🇴 181.78.78.93
🇧🇷 179.148.51.177
feedback