This IP address has been reported a total of
9
times from
7 distinct
sources.
188.163.49.200 was first reported on
November 24th 2020 , and the most recent report was
1 day ago Germany
with 1
report;
Indonesia
with 1
report;
Poland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
2
times;
Brute-Force
2
times;
Bad Web Bot
1
time;
Email Spam
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-18 01:44:34
(1 day ago)
WEB attack
Brute-Force
🇮🇩
hermawan
2026-10-11 02:57:32
(1 week ago)
[Sun Oct 11 09:57:31.728182 2026] [security2:error] [pid 501495:tid 140630038668992] [client 188.163 ...
show more
[Sun Oct 11 09:57:31.728182 2026] [security2:error] [pid 501495:tid 140630038668992] [client 188.163.49.200:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "asr7GziSZf4Z013pbVBZVwAAAIQ"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[501526] [DMgbvkeIuCQ] [asr7GziSZf4Z013pbVBZVwAAAIQ] keep_alive=[0] [2026-10-11 09:57:31.728191] [R:asr7GziSZf4Z013pbVBZVwAAAIQ] UA:'M
...
show less
Email Spam
Hacking
🇺🇸
TPI-Abuse
2026-09-22 03:03:55
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 188.163.49.200 (188-163-49-200.broadband.kyivst ...
show more
(mod_security) mod_security (id:210350) triggered by 188.163.49.200 (188-163-49-200.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:03:46.602722 2026] [security2:error] [pid 24569:tid 24569] [client 188.163.49.200:30866] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||starfrontiers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "starfrontiers.com"] [uri "/"] [unique_id "arHwEtn9wQuxNJKD4i4gCgAAACQ"], referer: https://the-disoriented-ranger.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Phenix Info
2026-09-20 13:30:44
(4 weeks ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇺🇸
kosada.com
2026-07-06 08:22:21
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2025-02-26 04:53:35
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-02-26 03:01:35
(1 year ago)
Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
2024-11-09 00:29:37
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
etu brutus
2020-11-24 05:59:29
(5 years ago)
20/11/24@05:59:25: FAIL: Alarm-Network address from=188.163.49.200
20/11/24@05:59:26: FAIL: Alarm-Ne ...
show more
20/11/24@05:59:25: FAIL: Alarm-Network address from=188.163.49.200
20/11/24@05:59:26: FAIL: Alarm-Network address from=188.163.49.200
...
show less
Hacking
Brute-Force
SSH
Showing 1 to
9
of 9 reports
