AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User thekoko89 joined AbuseIPDB in December 2025 and has reported 3 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇳🇱 185.136.15.31	09 Nov 2026	Hello, We are reporting repeated unauthorized brute-force login attempts against a Microsoft SQL Ser ... show more Hello, We are reporting repeated unauthorized brute-force login attempts against a Microsoft SQL Server operated by our company. Source IP address: 185.136.15. Additional source IPs involved in the same activity: 138.226.239.17 138.226.239.47 Target service: Microsoft SQL Server (TCP/1433) The source addresses repeatedly attempted to authenticate using the privileged SQL account "sa" with invalid passwords. The attempts occurred continuously, in some cases every few seconds, and ultimately caused the SQL account to become locked. Example log entries: 2026-11-09 13:46:46 – Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: 138.226.239.17] 2026-11-09 13:46:53 – Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: 138.226.239.47] 2026-11-09 13:46:49 – Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: 185.136.15.31] A large number of repeated attempts were recorded show less	Brute-Force Port Scan Hacking
🇳🇱 138.226.239.47	09 Nov 2026	Hello, We are reporting repeated unauthorized brute-force login attempts against a Microsoft SQL Ser ... show more Hello, We are reporting repeated unauthorized brute-force login attempts against a Microsoft SQL Server operated by our company. Source IP address: 138.226.239.47 Additional source IPs involved in the same activity: 138.226.239.17 185.136.15.31 Target service: Microsoft SQL Server (TCP/1433) The source addresses repeatedly attempted to authenticate using the privileged SQL account "sa" with invalid passwords. The attempts occurred continuously, in some cases every few seconds, and ultimately caused the SQL account to become locked. Example log entries: 2026-11-09 13:46:46 – Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: 138.226.239.17] 2026-11-09 13:46:53 – Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: 138.226.239.47] 2026-11-09 13:46:49 – Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: 185.136.15.31] A large number of repeated attempts were recorded show less	Brute-Force Port Scan Hacking
🇳🇱 138.226.239.17	09 Nov 2026	Hello, We are reporting repeated unauthorized brute-force login attempts against a Microsoft SQL Ser ... show more Hello, We are reporting repeated unauthorized brute-force login attempts against a Microsoft SQL Server operated by our company. Source IP address: 138.226.239.17 Additional source IPs involved in the same activity: 138.226.239.47 185.136.15.31 Target service: Microsoft SQL Server (TCP/1433) The source addresses repeatedly attempted to authenticate using the privileged SQL account "sa" with invalid passwords. The attempts occurred continuously, in some cases every few seconds, and ultimately caused the SQL account to become locked. Example log entries: 2026-11-09 13:46:46 – Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: 138.226.239.17] 2026-11-09 13:46:53 – Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: 138.226.239.47] 2026-11-09 13:46:49 – Login failed for user 'sa'. Reason: Password did not match that for the login provided. [CLIENT: 185.136.15.31] A large number of repeated attempts were recorded. show less	Brute-Force Port Scan Hacking