JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

202.46.63.63

Neutral Activity

Abuse confidence score ?

0% Low Risk

25 reports

12 reporters · latest 10 months ago

ISP	263 Shanghai Communications Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55967
Hostname(s)	ptr.cnsat.com.cn
Domain Name	net263.com
Country	🇨🇳 China
City	Shenzhen, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

202.46.63.63 has been reported 25 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 202.46.63.63

This IP address has been reported a total of 25 times from 12 distinct sources. 202.46.63.63 was first reported on October 15th 2025, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 abassolsa	2025-11-25 21:59:56 (10 months ago)	202.46.63.63 - - [25/Nov/2025:21:53:44 +0000] "GET /tags/attitudes-career HTTP/1.1" 404 54376 "-" "M ... show more 202.46.63.63 - - [25/Nov/2025:21:53:44 +0000] "GET /tags/attitudes-career HTTP/1.1" 404 54376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" 202.46.63.63 - - [25/Nov/2025:21:59:55 +0000] "GET /tags/bioeconomy HTTP/1.1" 404 54364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" ... show less	Brute-Force Bad Web Bot SSH
🇩🇪 Reinhard	2025-11-25 00:37:21 (10 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇮🇪 abassolsa	2025-11-23 21:30:18 (10 months ago)	202.46.63.63 - - [23/Nov/2025:21:25:22 +0000] "GET /tags/resistances HTTP/1.1" 404 54707 "-" "Mozill ... show more 202.46.63.63 - - [23/Nov/2025:21:25:22 +0000] "GET /tags/resistances HTTP/1.1" 404 54707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" 202.46.63.63 - - [23/Nov/2025:21:30:17 +0000] "GET /tags/gender-equality-work HTTP/1.1" 404 54824 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" ... show less	Brute-Force Bad Web Bot SSH
🇺🇸 TPI-Abuse	2025-11-22 10:16:38 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 202.46.63.63 (ptr.cnsat.com.cn): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 202.46.63.63 (ptr.cnsat.com.cn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 22 05:16:32.983364 2025] [security2:error] [pid 11935:tid 11935] [client 202.46.63.63:62697] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.williamfitzsimmons.com\|F\|2"] [data ".thehowardtheatre.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.williamfitzsimmons.com"] [uri "/www.thehowardtheatre.com"] [unique_id "aSGNgHknYfcOq4K2nVs2ygAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SiliSoftware	2025-11-22 09:12:08 (10 months ago)	/phpBB3/viewforum.php?f=10	Web App Attack
🇮🇩 securejdprop	2025-11-22 08:12:42 (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨‍💻). Ip 202.46.63.63 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-11-22 08:12:37.446433794 +0000 UTC show less	Web App Attack
🇮🇩 securejdprop	2025-11-21 08:49:53 (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨‍💻). Ip 202.46.63.63 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-11-21 08:49:51.47969303 +0000 UTC show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-20 20:39:52 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 202.46.63.63 (ptr.cnsat.com.cn): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 202.46.63.63 (ptr.cnsat.com.cn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 15:39:48.684386 2025] [security2:error] [pid 17010:tid 17010] [client 202.46.63.63:4829] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.scoutinsignia.com"] [uri "/icons/WS_FTP.LOG"] [unique_id "aR98lMtg2CFFHO60-igUTgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2025-11-16 05:06:18 (10 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇮🇪 abassolsa	2025-11-14 21:28:59 (10 months ago)	202.46.63.63 - - [14/Nov/2025:21:21:59 +0000] "GET /resources/poverty-lawgorithms-poverty-lawyers-gu ... show more 202.46.63.63 - - [14/Nov/2025:21:21:59 +0000] "GET /resources/poverty-lawgorithms-poverty-lawyers-guide-fighting-automated-decision-making-harms-low HTTP/1.1" 404 43505 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 202.46.63.63 - - [14/Nov/2025:21:28:58 +0000] "GET /tags/urban-space HTTP/1.1" 404 54526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" ... show less	Brute-Force Bad Web Bot SSH
🇺🇸 nodepile	2025-11-14 14:10:20 (10 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1761821031/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1761821031/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-custom.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36') show less	Exploited Host Web App Attack
🇺🇸 octageeks.com	2025-11-14 05:10:16 (10 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇮🇪 abassolsa	2025-11-08 08:58:52 (10 months ago)	202.46.63.63 - - [08/Nov/2025:08:58:49 +0000] "GET /tags/research-synthesis-2-academic-and-science-c ... show more 202.46.63.63 - - [08/Nov/2025:08:58:49 +0000] "GET /tags/research-synthesis-2-academic-and-science-careers?page=1 HTTP/1.1" 404 54803 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 202.46.63.63 - - [08/Nov/2025:08:58:52 +0000] "GET /tags/research-synthesis-2-academic-and-science-careers?page=1 HTTP/1.1" 404 54902 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.42" ... show less	Brute-Force Bad Web Bot SSH
🇮🇪 abassolsa	2025-11-04 05:56:18 (10 months ago)	202.46.63.63 - - [04/Nov/2025:05:56:10 +0000] "GET /myuserpoints HTTP/1.1" 404 43330 "-" "Mozilla/5. ... show more 202.46.63.63 - - [04/Nov/2025:05:56:10 +0000] "GET /myuserpoints HTTP/1.1" 404 43330 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 202.46.63.63 - - [04/Nov/2025:05:56:17 +0000] "GET /myuserpoints HTTP/1.1" 404 43436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot SSH
🇮🇩 securejdprop	2025-11-04 04:03:41 (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨‍💻). Ip 202.46.63.63 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-11-04 04:03:39.482257641 +0000 UTC show less	Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 185.3.114.126

🇺🇸 142.111.152.174

🇮🇳 122.166.49.42

🇨🇳 118.145.99.252

🇮🇳 103.123.53.88

🇺🇸 66.132.186.211

🇱🇹 62.60.130.201

🇬🇧 35.203.210.204

🇳🇱 130.12.180.39

🇨🇳 124.95.146.204

🇳🇱 94.154.43.203

🇫🇷 91.231.89.102

🇳🇱 91.92.241.35

🇬🇧 89.37.172.135

🇺🇸 74.249.131.245

🇩🇪 69.5.169.87

🇮🇳 52.172.226.14

🇺🇸 20.42.116.42

🇱🇹 213.176.24.83

🇧🇷 201.16.238.49