2.63.203.156 has a threat confidence score of 16%. This IP address from Russia (AS12389, Rostelecom) has been observed in 6 honeypot sessions targeting SMB protocols. First observed on March 10, 2026, most recently active March 23, 2026.