JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.46.63.67

202.46.63.67 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	263 Shanghai Communications Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55967
Hostname(s)	ptr.cnsat.com.cn
Domain Name	net263.com
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.46.63.67

Whois 202.46.63.67

IP Abuse Reports for 202.46.63.67:

This IP address has been reported a total of 30 times from 17 distinct sources. 202.46.63.67 was first reported on October 16th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 abassolsa	2025-11-25 14:09:18 (7 months ago)	202.46.63.67 - - [25/Nov/2025:14:09:08 +0000] "GET /tags/perspectiva-de-genero HTTP/1.1" 404 54386 " ... show more 202.46.63.67 - - [25/Nov/2025:14:09:08 +0000] "GET /tags/perspectiva-de-genero HTTP/1.1" 404 54386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" 202.46.63.67 - - [25/Nov/2025:14:09:18 +0000] "GET /tags/perspectiva-de-genero HTTP/1.1" 404 54288 "-" "Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36" ... show less	Brute-Force Bad Web Bot SSH
🇺🇸 octageeks.com	2025-11-25 05:06:37 (7 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
Anonymous	2025-11-24 10:56:24 (7 months ago)	Reported from Nginx log analysis 18. Log: 202.46.63.67 - - [24/Nov/2025:xx:xx:xx 0100] "GET /2024/0 ... show more Reported from Nginx log analysis 18. Log: 202.46.63.67 - - [24/Nov/2025:xx:xx:xx 0100] "GET /2024/05/14/aurora-extravaganza-weekends-northern-lightssolar-storms-phenomenon/ HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" "-" "CN China -" "AS55967" "Beijing Baidu Netcom Science and Technology Co., Ltd." show less	Port Scan Brute-Force SSH
🇮🇪 abassolsa	2025-11-22 20:00:28 (7 months ago)	202.46.63.67 - - [22/Nov/2025:20:00:13 +0000] "GET /tags/global-knowledge-economy HTTP/1.1" 404 5488 ... show more 202.46.63.67 - - [22/Nov/2025:20:00:13 +0000] "GET /tags/global-knowledge-economy HTTP/1.1" 404 54885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" 202.46.63.67 - - [22/Nov/2025:20:00:24 +0000] "GET /tags/global-knowledge-economy HTTP/1.1" 404 54787 "-" "Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36" ... show less	Brute-Force Bad Web Bot SSH
🇺🇸 SiliSoftware	2025-11-22 09:12:10 (7 months ago)	/phpBB3/app.php/help/faq?sid=601383475a5f6e07ddc9d25a159968d9	Web App Attack
🇮🇩 securejdprop	2025-11-22 08:12:43 (7 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨‍💻). Ip 202.46.63.67 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-11-22 08:12:37.534506035 +0000 UTC show less	Web App Attack
🇺🇸 PREPAIDIFY	2025-11-21 20:27:19 (7 months ago)	Blocked by automated security system - AbuseIPDB: High abuse score (71% confidence, 23 reports)	Port Scan
Anonymous	2025-11-21 16:56:37 (7 months ago)	Reported from Nginx log analysis 18. Log: 202.46.63.67 - - [21/Nov/2025:xx:xx:xx 0100] "GET /2022/1 ... show more Reported from Nginx log analysis 18. Log: 202.46.63.67 - - [21/Nov/2025:xx:xx:xx 0100] "GET /2022/10/12/new-zealands-climate-proposal-tax-on-cows-farts-and-burps/ HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" "-" "CN China -" "AS55967" "Beijing Baidu Netcom Science and Technology Co., Ltd." show less	Port Scan Brute-Force SSH
🇮🇩 securejdprop	2025-11-21 08:49:54 (7 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨‍💻). Ip 202.46.63.67 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-11-21 08:49:51.480821746 +0000 UTC show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-20 18:53:34 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 202.46.63.67 (ptr.cnsat.com.cn): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 202.46.63.67 (ptr.cnsat.com.cn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 13:53:27.359542 2025] [security2:error] [pid 6263:tid 6263] [client 202.46.63.67:27730] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.scoutinsignia.com"] [uri "/bkground/WS_FTP.LOG"] [unique_id "aR9jp5eR6msja_UmA3EpRgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 ketovoila.pl	2025-11-20 01:35:19 (7 months ago)	ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/dieta-ketogenna-tylko-nowa ... show more ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/dieta-ketogenna-tylko-nowa-moda-czy-rzeczywisty-sposob-na-zdrowie_3365; UA=Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.1122.37 Safari/537.36; window=2025-11-20T01:23:00Z..2025-11-20T01:23:00Z show less	Port Scan Hacking Brute-Force
🇩🇪 stinpriza	2025-11-19 16:05:44 (7 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-11-19 10:11:57 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 202.46.63.67 (ptr.cnsat.com.cn): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 202.46.63.67 (ptr.cnsat.com.cn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 19 05:11:53.088511 2025] [security2:error] [pid 27733:tid 27733] [client 202.46.63.67:2403] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|williamfitzsimmons.com\|F\|2"] [data ".shawnfeeney.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/0410-william-fitzsimmons-spring-tour-update/www.shawnfeeney.com"] [unique_id "aR2X6eTGeMcQwppaxl5W7wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Reinhard	2025-11-18 15:50:03 (7 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇮🇪 abassolsa	2025-11-16 20:48:51 (7 months ago)	202.46.63.67 - - [16/Nov/2025:20:35:21 +0000] "GET /tags/sexual-dimorphism HTTP/1.1" 404 54658 "-" " ... show more 202.46.63.67 - - [16/Nov/2025:20:35:21 +0000] "GET /tags/sexual-dimorphism HTTP/1.1" 404 54658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 202.46.63.67 - - [16/Nov/2025:20:48:50 +0000] "GET /resources/guidelines-how-set-gender-equality-committee HTTP/1.1" 404 43333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" ... show less	Brute-Force Bad Web Bot SSH

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 185.132.186.55

🇳🇱 160.119.71.92

🇩🇪 151.243.11.52

🇷🇴 80.94.92.55

🇦🇷 45.238.106.167

🇺🇸 43.130.64.35

🇬🇧 35.203.211.11

🇺🇸 24.131.189.128

🇺🇸 198.199.123.141

🇩🇪 195.63.31.199

🇳🇱 176.65.148.136

🇭🇰 150.5.145.9

🇺🇸 8.228.116.153

🇩🇪 213.209.159.228

🇨🇳 180.169.100.182

🇻🇳 171.243.149.144

🇳🇱 78.31.250.156

🇨🇳 36.32.3.97

🇮🇩 35.219.111.231

🇺🇸 13.89.125.231