JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 88.166.166.49

88.166.166.49 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 39%: ?

39%

ISP	Proxad / Free SAS
Usage Type	Fixed Line ISP
ASN	AS12322
Hostname(s)	88-166-166-49.subs.proxad.net
Domain Name	free.fr
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 88.166.166.49

Whois 88.166.166.49

IP Abuse Reports for 88.166.166.49:

This IP address has been reported a total of 13 times from 9 distinct sources. 88.166.166.49 was first reported on July 7th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 maxpower	2026-10-21 17:48:59 (1 day ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 88.166.166.49 (FR/France/88-166-166-49.subs.pr ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 88.166.166.49 (FR/France/88-166-166-49.subs.proxad.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 88.166.166.49 - - [21/Oct/2026:19:48:54 +0200] "GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 200 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "-" host=squalettiacademy.it show less	Port Scan
🇺🇸 cwytech	2026-10-20 22:57:01 (1 day ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.	Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-10-12 17:49:52 (1 week ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇷🇺 AbuseIPDB informer	2026-10-12 16:54:57 (1 week ago)	nfdump top talker: 88.166.166.49 \| first seen 2026-10-12 19:54:57.024 \| duration 00:00:00.208 \| flow ... show more nfdump top talker: 88.166.166.49 \| first seen 2026-10-12 19:54:57.024 \| duration 00:00:00.208 \| flows=7 \| packets=230175 \| bytes=164.7 M \| pps=1105 \| bps=6.3 M \| bpp=715 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-12 09:26:57 (1 week ago)	nfdump top talker: 88.166.166.49 \| first seen 2026-10-12 12:26:57.024 \| duration 00:00:00.067 \| flow ... show more nfdump top talker: 88.166.166.49 \| first seen 2026-10-12 12:26:57.024 \| duration 00:00:00.067 \| flows=1 \| packets=37851 \| bytes=26.8 M \| pps=564 \| bps=3.2 M \| bpp=708 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-09 08:30:18 (1 week ago)	nfdump top talker: 88.166.166.49 \| first seen 2026-10-09 11:30:18.112 \| duration 00:00:00.060 \| flow ... show more nfdump top talker: 88.166.166.49 \| first seen 2026-10-09 11:30:18.112 \| duration 00:00:00.060 \| flows=3 \| packets=77748 \| bytes=55.1 M \| pps=1292 \| bps=7.3 M \| bpp=708 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇲🇽 octageeks.com	2026-10-09 04:17:50 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇷🇺 AbuseIPDB informer	2026-10-08 10:20:19 (2 weeks ago)	nfdump top talker: 88.166.166.49 \| first seen 2026-10-08 13:20:19.584 \| duration 00:00:00.090 \| flow ... show more nfdump top talker: 88.166.166.49 \| first seen 2026-10-08 13:20:19.584 \| duration 00:00:00.090 \| flows=5 \| packets=344751 \| bytes=262.7 M \| pps=3825 \| bps=23.3 M \| bpp=762 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-03 17:16:57 (2 weeks ago)	nfdump top talker: 88.166.166.49 \| first seen 2026-10-03 20:16:57.728 \| duration 00:00:00.059 \| flow ... show more nfdump top talker: 88.166.166.49 \| first seen 2026-10-03 20:16:57.728 \| duration 00:00:00.059 \| flows=2 \| packets=80817 \| bytes=79.0 M \| pps=1360 \| bps=10.6 M \| bpp=977 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
Anonymous	2026-09-18 13:38:19 (1 month ago)	(wordpress) Failed wordpress login from 88.166.166.49 (FR/France/88-166-166-49.subs.proxad.net)	Brute-Force
🇦🇺 paulshipley.com.au	2026-09-18 09:29:15 (1 month ago)	support.paulshipley.com.au:443 88.166.166.49 - - [18/Sep/2026:19:29:12 +1000] "GET /wp/wp-login.php ... show more support.paulshipley.com.au:443 88.166.166.49 - - [18/Sep/2026:19:29:12 +1000] "GET /wp/wp-login.php HTTP/1.1" 404 27459 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 kosada.com	2026-07-14 17:49:43 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-07 17:48:03 (3 months ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=224&dir=asc&order=relevance&q=ex+90&screensize=18%2C20%2C115 \| UA: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_10_4) AppleWebKit/531.2 (KHTML, like Gecko) Chrome/52.0.801.0 Safari/531.2 \| (Magento Site) show less	Hacking Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 212.73.148.32

🇷🇴 193.46.255.86

🇲🇽 187.188.9.135

🇺🇸 157.245.84.42

🇰🇷 112.220.250.20

🇺🇸 107.150.105.153

🇩🇪 69.5.169.131

🇹🇼 59.126.73.113

🇫🇷 45.90.163.37

🇧🇪 35.195.45.168

🇺🇸 34.182.133.163

🇦🇺 20.5.85.204

🇺🇸 18.218.118.203

🇺🇸 17.166.21.43

🇲🇽 189.165.0.233

🇸🇬 165.22.51.61

🇨🇳 115.198.189.89

🇷🇺 95.188.91.101

🇳🇱 87.199.203.104

🇺🇸 66.132.186.174