202.4.127.172
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amber IT Limited
- Usage Type
- Fixed Line ISP
- ASN
- AS23956
- Domain Name
- amberit.com.bd
- Country
- 🇧🇩 Bangladesh
- City
- Narayanganj, Dhaka Division
Abuse Reports
Total reports
28 from
9 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 3rdKey |
OpenCanary honeypot hit on port 1433 (no legitimate service runs there); logtype 9001. Automated report.
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed across 3 source port(s); target port(s): 1433.
|
Brute-Force | |
| 🇺🇸 ISPLtd |
Oct 27 02:19:12 202.4.127.172 TCP SPT=44115 DPT=1433 SYN
Oct 27 02:19:13 202.4.127.172 TCP SPT=44115 DPT=1433 SYN
Oct 27 04:09:50 202.4.127.172 TCP SPT=21268 DPT=1433 SYN
...
|
Port Scan | |
| 🇫🇮 6kilowatti |
|
Port Scan | |
| 🇺🇸 azminawwar |
[202.4.127.172] triggered by honeypot on port [1433], Timestamp [2026-10-27T04:39:57Z](no payload)
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed across 3 source port(s); target port(s): 1433.
|
Brute-Force | |
| 🇨🇦 Arpan Sen |
Network port/address scan: probed 1 distinct port(s) across 29 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
|
Port Scan | |
| 🇨🇦 Arpan Sen |
Network port/address scan: probed 1 distinct port(s) across 61 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
|
Port Scan | |
| 🇸🇪 paardappel |
Repeated credential attempts (3+ in one day) against honeypot FTP/MSSQL services
|
Brute-Force | |
| 🇨🇦 Arpan Sen |
Network port/address scan: probed 1 distinct port(s) across 41 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 2 authentication events observed across 2 source port(s); target port(s): 1433.
|
Brute-Force | |
| 🇺🇸 3rdKey |
OpenCanary honeypot hit on port 1433 (no legitimate service runs there); logtype 9001. Automated report.
|
Port Scan Hacking | |
| 🇺🇸 cazae |
Unauthorized attempt on debian [1433/tcp]
Source port: 62007
TTL: 109
Packet length: 52
TOS: 0x08
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed across 3 source port(s); target port(s): 1433.
|
Brute-Force | |
| 🇨🇦 Arpan Sen |
Network port/address scan: probed 1 distinct port(s) across 62 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown