AbuseIPDB » 88.165.195.192
88.165.195.192
This IP was reported 6 times. Confidence of
Abuse
is 29% : ?
ISP
Proxad / Free SAS
Usage Type
Fixed Line ISP
ASN
AS12322
Hostname(s)
88-165-195-192.subs.proxad.net
Domain Name
free.fr
Country
🇫🇷
France
City
Vaulx-en-Velin, Rhone-Alpes
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 88.165.195.192 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
88.165.195.192 was first reported on
June 26th 2026 , and the most recent report was
18 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
conseilgouz
2026-09-01 21:11:14
(18 hours ago)
sae-13 : Block SQL injections=>/votre-mairie/communication?start=12%20ORDER%20BY%201--%20-( )
Hacking
🇺🇸
TPI-Abuse
2026-08-26 12:12:49
(1 week ago)
(mod_security) mod_security (id:220150) triggered by 88.165.195.192 (88-165-195-192.subs.proxad.net) ...
show more
(mod_security) mod_security (id:220150) triggered by 88.165.195.192 (88-165-195-192.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 08:12:42.442867 2026] [security2:error] [pid 15646:tid 15646] [client 88.165.195.192:19823] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.{0,399}\\\\*\\\\/)?select)" at ARGS:category_ids[1]. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||nnrentacar.com|F|2"] [data ")/**/and/**/(1623628969=1623628969/**/union/**/all/**/select/**/'juyxauhbnsnedwglwblqbviemndwpgeo'--/**/879b3h"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nnrentacar.com"] [uri "/ba_locations/california/"] [unique_id "ao7YOiq-CYHRMS7uFo0zygAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
[email protected]
2026-08-14 00:04:26
(2 weeks ago)
88.165.195.192 - - [14/Aug/2026:00:04:19 +0000] "GET /mod/book/view.php?id=5202&chapterid=1201%20AND ...
show more
88.165.195.192 - - [14/Aug/2026:00:04:19 +0000] "GET /mod/book/view.php?id=5202&chapterid=1201%20AND%20EXTRACTVALUE%289808%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%289808%3D9808%2C1%29%29%29%29%2C0x7e%29%29--%20-&lang=tl HTTP/1.1" 200 12283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
88.165.195.192 - - [14/Aug/2026:00:04:20 +0000] "GET /mod/book/view.php?id=5202&chapterid=1201&lang=tl%27%20AND%20EXTRACTVALUE%286793%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%286793%3D6793%2C1%29%29%29%29%2C0x7e%29%29--%20- HTTP/1.1" 200 12162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
88.165.195.192 - - [14/Aug/2026:00:04:25 +0000] "GET /mod/book/view.php?id=5202%25%27%20AND%20EXTRACTVALUE%286155%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%286155%3D6155%2C1%29%29%29%29%2C0x7e%29%29--%20-&chapterid=1201&lang=tl HTTP/1.1" 200 12281 "-" "Mozilla/5.
...
show less
Web App Attack
🇩🇪
EGP Abuse Dept
2026-08-06 01:57:14
(3 weeks ago)
Scraping webshop URLs (www.ngs.nl), likely botnet drone
Bad Web Bot
Exploited Host
🇺🇸
kosada.com
2026-08-01 10:59:48
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-06-26 06:14:16
(2 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: