JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.4.115.194

202.4.115.194 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 100%: ?

100%

ISP	Amber IT Limited
Usage Type	Fixed Line ISP
ASN	AS23956
Domain Name	amberit.com.bd
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.4.115.194

Whois 202.4.115.194

IP Abuse Reports for 202.4.115.194:

This IP address has been reported a total of 60 times from 43 distinct sources. 202.4.115.194 was first reported on June 10th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-07-03 09:12:09 (13 hours ago)	Port Scan ...	Port Scan
🇹🇷 SeczarSecureOps	2026-07-03 09:10:40 (13 hours ago)	Seczar SecureOps — Database Service Brute Force (14 events) — quarantined 43200m on LEFKOSA	Brute-Force SSH
🇸🇪 Tsumugi Kotobuki	2026-07-02 23:53:02 (22 hours ago)	Port Scan on Honeypot \| Ports: 1433/MSSQL \| Proto: TCP(1) \| Flags: all SYN \| TTL: 42 \| Len: 40B \| Wi ... show more Port Scan on Honeypot \| Ports: 1433/MSSQL \| Proto: TCP(1) \| Flags: all SYN \| TTL: 42 \| Len: 40B \| Win: 64240(1) \| F2B/ufw-honeypot@2026-07-02T23:53:02Z show less	Port Scan Hacking
🇨🇭 SOC [GOLINE SA]	2026-07-02 21:45:08 (1 day ago)	[RoutePulse \| 2026-07-02T21:45:08Z] ATTACK: Port Scan Horizontal (port 1433) TARGET: 4 subnets: 185. ... show more [RoutePulse \| 2026-07-02T21:45:08Z] ATTACK: Port Scan Horizontal (port 1433) TARGET: 4 subnets: 185.54.80.0/24, 185.54.82.0/24, 185.54.83.0/24 SOURCE: 202.4.115.194 · AS23956 AmberIT Limited · Bangladesh EVIDENCE: severity=warning · 1024 flows · 41 KB · 1024 distinct targets · port 1433 INTEL: AbuseIPDB 100% (48 reports) \| RoutePulse score 60/100 CONVICTION: Tier 3, LLR 0.96, 0.5 independent groups (multi-source SPRT) MITRE: T1018 Remote System Discovery, T1046 Network Service Scanning DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Port Scan
🇪🇸 el-brujo	2026-07-02 19:48:09 (1 day ago)	07/02/2026-21:48:09.609845 202.4.115.194 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	Hacking
🇺🇸 cazae	2026-07-02 05:49:22 (1 day ago)	Unauthorized attempt on debian [1433/tcp] Source port: 45652 TTL: 43 Packet length: 40 TOS: 0x00 ht ... show more Unauthorized attempt on debian [1433/tcp] Source port: 45652 TTL: 43 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 OceanTreasure	2026-07-01 15:40:05 (2 days ago)	tcp/1433; SCAN Suspicious inbound to MSSQL port 1433 @ 2026-07-01T15:36:05Z	Brute-Force
🇫🇷 Hiigara	2026-07-01 15:00:47 (2 days ago)	connection attempt : 202.4.115.194 on port : tcp/1433 (MSSQL)	Port Scan
🇺🇸 xmission.com	2026-07-01 10:30:08 (2 days ago)	Blocked by UFW (TCP on 1433) Source port: 43212 TTL: 52 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 1433) Source port: 43212 TTL: 52 Packet length: 40 TOS: 0x00 This report (for 202.4.115.194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 Andrew	2026-07-01 02:34:55 (2 days ago)	Blocked by UFW (TCP on port 1433). Source port: 57890 TTL: 48 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW (TCP on port 1433). Source port: 57890 TTL: 48 Packet length: 40 TOS: 0x00 This report (for 202.4.115.194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-06-30 06:54:16 (3 days ago)	[RoutePulse \| 2026-06-30T06:54:16Z] ATTACK: Port Scan Horizontal (port 1433) TARGET: 4 subnets: 185. ... show more [RoutePulse \| 2026-06-30T06:54:16Z] ATTACK: Port Scan Horizontal (port 1433) TARGET: 4 subnets: 185.54.83.0/24, 185.54.81.0/24, 185.54.80.0/24 SOURCE: 202.4.115.194 · AS23956 AmberIT Limited · Bangladesh EVIDENCE: severity=warning · 1026 flows · 41 KB · 1024 distinct targets · port 1433 INTEL: AbuseIPDB 100% (48 reports) \| RoutePulse score 80/100 MITRE: T1018 Remote System Discovery, T1046 Network Service Scanning DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Port Scan
Anonymous	2026-06-27 15:13:11 (6 days ago)	Firewall - Suricata IDS [Priority 2 - High]: ET CINS Active Threat Intelligence Poor Reputation IP g ... show more Firewall - Suricata IDS [Priority 2 - High]: ET CINS Active Threat Intelligence Poor Reputation IP group 282 show less	Port Scan Hacking
🇪🇸 el-brujo	2026-06-27 14:56:38 (6 days ago)	06/27/2026-16:56:38.722611 202.4.115.194 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	Hacking
🇹🇭 Sawasdee	2026-06-25 14:45:06 (1 week ago)	Port Scan ...	Port Scan
🇹🇷 SeczarSecureOps	2026-06-25 11:53:19 (1 week ago)	Auto-blocked by Seczar SecureOps — Database Service Brute Force (5 events in 5min) at 2026-06-25 11: ... show more Auto-blocked by Seczar SecureOps — Database Service Brute Force (5 events in 5min) at 2026-06-25 11:53 show less	Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.86

🇳🇱 185.223.235.56

🇩🇪 116.203.117.103

🇸🇬 94.231.206.11

🇹🇷 94.154.43.66

🇺🇸 57.141.6.21

🇭🇰 46.247.61.219

🇨🇳 27.158.24.67

🇺🇸 135.119.106.236

🇫🇷 91.196.152.239

🇩🇪 45.135.194.113

🇺🇸 44.216.133.66

🇺🇸 44.205.85.247

🇧🇷 20.195.177.9

🇨🇳 14.103.64.177

🇺🇸 3.17.206.73

🇩🇪 213.209.159.11

🇩🇪 194.31.223.71

🇵🇭 160.25.95.171

🇸🇬 103.250.11.156