AbuseIPDB » 202.61.253.63

202.61.253.63 was found in our database!

This IP was reported 1,153 times. Confidence of Abuse is 0%: ?

ISP	AWI Finance GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	db01.plexalytics.com
Domain Name	anexia-it.com
Country	Germany
City	Nuremberg, Bayern

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 202.61.253.63

Whois 202.61.253.63

IP Abuse Reports for 202.61.253.63:

This IP address has been reported a total of 1,153 times from 102 distinct sources. 202.61.253.63 was first reported on April 4th 2021, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Linuxmalwarehuntingnl	2024-07-03 08:54:24 (3 months ago)	Unauthorized connection attempt	Brute-Force
Roderic	2024-06-05 03:41:24 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 202.61.253.63 (DE/Ge ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 202.61.253.63 (DE/Germany/v220210466606148840.hotsrv.de) show less	Bad Web Bot
Rizzy	2024-04-23 21:05:50 (5 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
whost	2024-03-24 15:43:00 (6 months ago)	brute force attack	Brute-Force
Anonymous	2024-03-24 11:50:12 (6 months ago)	Bot / seems abusive / Apache connections: 26	DDoS Attack Web Spam Bad Web Bot Web App Attack
TPI-Abuse	2024-03-23 10:14:08 (6 months ago)	(mod_security) mod_security (id:210381) triggered by 202.61.253.63 (v220210466606148840.hotsrv.de): ... show more(mod_security) mod_security (id:210381) triggered by 202.61.253.63 (v220210466606148840.hotsrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 23 06:14:04.387750 2024] [security2:error] [pid 12682] [client 202.61.253.63:46024] [client 202.61.253.63] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.commforus.com\|F\|4"] [data "REQUEST_URI=/%PUSHLINE_SHOP_URL%/common/cmn/contact.php"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.commforus.com"] [uri "/%PUSHLINE_SHOP_URL%/common/cmn/contact.php"] [unique_id "Zf6rbLF3uZhU8f6gO5_zZgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Birdflew	2024-03-23 07:29:08 (6 months ago)	Port scanning	Hacking
Anonymous	2024-03-22 17:30:43 (6 months ago)	Excessive HTTP/HTTPS connections.	Bad Web Bot
Steve	2024-03-21 20:37:18 (6 months ago)	Excessive crawling - not obeying robots.txt	Bad Web Bot
ALSCO®️	2024-03-19 22:00:10 (6 months ago)	Report By ALSCO Security Team: Brute Force Login Attempt	Hacking
Secure Gateway®️	2024-03-19 22:00:10 (6 months ago)	Report By Secure Gateway Security Team: XSS Injection Attempt Detected	SQL Injection
TPI-Abuse	2024-03-18 21:41:56 (6 months ago)	(mod_security) mod_security (id:210381) triggered by 202.61.253.63 (v220210466606148840.hotsrv.de): ... show more(mod_security) mod_security (id:210381) triggered by 202.61.253.63 (v220210466606148840.hotsrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 18 17:41:48.775204 2024] [security2:error] [pid 3235:tid 47049556887296] [client 202.61.253.63:44868] [client 202.61.253.63] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|rosicrucian.net\|F\|4"] [data "REQUEST_URI=/%bh.url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rosicrucian.net"] [uri "/%bh.url%"] [unique_id "Zfi1HC1kpFmU2D93GZ9iEAAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
ghostwarriors	2024-03-16 08:20:03 (6 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
MAGIC	2024-03-16 01:06:44 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
AvonleaConsulting	2024-03-15 23:54:25 (6 months ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack