This IP address has been reported a total of
36
times from
28 distinct
sources.
125.22.69.193 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 10
reports;
United States of America
with 4
reports;
Brazil
with 3
reports.
The most common categories in these recent reports were:
Port Scan
22
times;
Brute-Force
16
times;
Hacking
16
times;
SSH
2
times;
Email Spam
2
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unauthorized access attempt: automated MSSQL exploit and credential probe on TCP/1433 (MSSQL); dropp ...
show moreUnauthorized access attempt: automated MSSQL exploit and credential probe on TCP/1433 (MSSQL); dropped and source blocked. Observed 2026-10-11 17:31:12 UTC; blocked for 24h.
show less
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 113 | Len: 52B | W ...
show morePort Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 113 | Len: 52B | Win: 65535(1) | rDNS: aes-static-193.69.22.125.airtel.in | F2B/ufw-honeypot@2026-10-11T09:40:16Z
show less
Login failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: 125.22 ...
show moreLogin failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: 125.22.69.193]
show less
Brute-Force
Email Spam
Port Scan
Phishing
SQL Injection
Blocked by UFW (TCP on 1433)
Source port: 8112
TTL: 120
Packet length: 52
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 1433)
Source port: 8112
TTL: 120
Packet length: 52
TOS: 0x00
This report (for 125.22.69.193) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 112 | Len: 52B | W ...
show morePort Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 112 | Len: 52B | Win: 65535(1) | rDNS: aes-static-193.69.22.125.airtel.in | F2B/ufw-honeypot@2026-10-07T23:12:58Z
show less
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 116 | Len: 52B | W ...
show morePort Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 116 | Len: 52B | Win: 65535(1) | rDNS: aes-static-193.69.22.125.airtel.in | F2B/ufw-honeypot@2026-10-07T16:05:05Z
show less
Dermato Virtual CSIRT: Sustained brute-force authentication attacks against app.dermatovirtual.com.b ...
show moreDermato Virtual CSIRT: Sustained brute-force authentication attacks against app.dermatovirtual.com.br (MSSQL Port 1433). 46 failed login attempts recorded between 2026-10-06 13:47:45 UTC and 2026-10-06 13:50:21 UTC (rate: ~17,7 req/min). Perimeter firewall drop active.
Log sample:
[2026-10-06 13:49:55 UTC] IP: 125.22.69.193 - MSSQL EventID 18456: Login failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: 125.22.69.193]
[2026-10-06 13:50:02 UTC] IP: 125.22.69.193 - MSSQL EventID 18456: Login failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: 125.22.69.193]
[2026-10-06 13:50:07 UTC] IP: 125.22.69.193 - MSSQL EventID 18456: Login failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: 125.22.69.193]
show less
Dermato Virtual CSIRT: Sustained brute-force authentication attacks against app.dermatovirtual.com.b ...
show moreDermato Virtual CSIRT: Sustained brute-force authentication attacks against app.dermatovirtual.com.br (MSSQL Port 1433). 42 failed login attempts recorded between 2026-10-06 13:47:45 UTC and 2026-10-06 13:49:55 UTC (rate: ~19,4 req/min). Perimeter firewall drop active.
Log sample:
[2026-10-06 13:49:37 UTC] IP: 125.22.69.193 - MSSQL EventID 18456: Login failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: 125.22.69.193]
[2026-10-06 13:49:42 UTC] IP: 125.22.69.193 - MSSQL EventID 18456: Login failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: 125.22.69.193]
[2026-10-06 13:49:45 UTC] IP: 125.22.69.193 - MSSQL EventID 18456: Login failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: 125.22.69.193]
show less
