JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.238.5.57

46.238.5.57 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	A1 Bulgaria EAD
Usage Type	Fixed Line ISP
ASN	AS29580
Domain Name	a1.bg
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.238.5.57

Whois 46.238.5.57

IP Abuse Reports for 46.238.5.57:

This IP address has been reported a total of 17 times from 16 distinct sources. 46.238.5.57 was first reported on December 1st 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-02-26 06:43:48 (2 years ago)	Illegitimate and/or suspicious requests.	Hacking
Anonymous	2024-02-21 10:18:18 (2 years ago)	2024-02-21 5:18:17 107300772 [Warning] Access denied for user 'root'@'46.238.5.57' (using password: ... show more 2024-02-21 5:18:17 107300772 [Warning] Access denied for user 'root'@'46.238.5.57' (using password: YES) 2024-02-21 5:18:18 107300773 [Warning] Access denied for user 'root'@'46.238.5.57' (using password: YES) 2024-02-21 5:18:18 107300774 [Warning] Access denied for user 'root'@'46.238.5.57' (using password: YES) ... show less	Brute-Force
🇧🇾 stroytrest	2024-02-21 08:03:13 (2 years ago)	2024-02-21T11:03:12.183276mx1 kernel: [4757498.174012] nftables: SCAN-SQL IN=ens192 OUT= MAC= SRC=46 ... show more 2024-02-21T11:03:12.183276mx1 kernel: [4757498.174012] nftables: SCAN-SQL IN=ens192 OUT= MAC= SRC=46.238.5.57 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x08 PREC=0x40 TTL=46 ID=63201 DF PROTO=TCP SPT=55444 DPT=3306 WINDOW=64240 RES=0x00 SYN URGP=0 MARK=0x64 ... show less	Port Scan
🇱🇹 NotACaptcha	2024-02-13 07:49:44 (2 years ago)	Unauthorised access (Feb 13 09:49) SRC=46.238.5.57 LEN=60 TTL=56 ID=30504 DF TCP DPT=3306 WINDOW=642 ... show more Unauthorised access (Feb 13 09:49) SRC=46.238.5.57 LEN=60 TTL=56 ID=30504 DF TCP DPT=3306 WINDOW=64240 SYN show less	Port Scan
🇺🇸 WhiteFireOCN1	2024-02-07 20:53:39 (2 years ago)	2 unauthorized connection attempts to port 3306 TCP/3306 - 46[.]238[.]5[.]57:56740 - 2024-02-07T20:4 ... show more 2 unauthorized connection attempts to port 3306 TCP/3306 - 46[.]238[.]5[.]57:56740 - 2024-02-07T20:48:40 TCP/3306 - 46[.]238[.]5[.]57:56742 - 2024-02-07T20:48:41 show less	Port Scan
🇮🇳 Mr.Singh	2024-02-06 10:30:59 (2 years ago)	NFT blocked 46.238.5.57 on 06-Feb-2024..	Port Scan Brute-Force
🇺🇸 brantknudson.org	2024-01-18 17:28:00 (2 years ago)	Client attempted attack using request path '/phpMyAdmin-5.1.0/index.php' to honeypot.	Web App Attack
Anonymous	2024-01-18 10:34:16 (2 years ago)	[Thu Jan 18 11:34:15.329434 2024] [authz_core:error] [pid 23926] [client 46.238.5.57:50818] AH01630: ... show more [Thu Jan 18 11:34:15.329434 2024] [authz_core:error] [pid 23926] [client 46.238.5.57:50818] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Jan 18 11:34:15.360502 2024] [authz_core:error] [pid 23926] [client 46.238.5.57:50818] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Jan 18 11:34:15.391950 2024] [authz_core:error] [pid 23926] [client 46.238.5.57:50818] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇩🇪 Mr-Money	2024-01-07 07:53:07 (2 years ago)	46.238.5.57 - - [07/Jan/2024:08:53:06 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 436 " ... show more 46.238.5.57 - - [07/Jan/2024:08:53:06 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 mhhdr	2024-01-06 05:10:50 (2 years ago)	Web attack: GET /sql/webadmin/index.php?lang=en.	Web App Attack
🇺🇸 Nightreaver	2024-01-05 21:21:14 (2 years ago)	46.238.5.57 - - [05/Jan/2024:22:21:13 0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 ... show more 46.238.5.57 - - [05/Jan/2024:22:21:13 0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 46.238.5.57 - - [05/Jan/2024:22:21:13 0100] "GET /phpMyAdmin-4.9.10-all-languages/index.php?lang=en HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 46.238.5.57 - - [05/Jan/2024:22:21:14 0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 46.238.5.57 - - [05/Jan/2024:22:21:14 0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 46.238.5.57 - - [05/Jan/2024:22:21:14 0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 438 "-" "Mozilla/5.0[...] show less	Bad Web Bot Web App Attack
🇪🇸 domotuto.com	2024-01-01 01:04:02 (2 years ago)	Mikrotik port scanner detected. EA4GKQ	Port Scan
🇩🇪 Mr-Money	2023-12-14 18:36:23 (2 years ago)	46.238.5.57 - - [14/Dec/2023:19:36:22 +0100] "GET /phpMyAdmin-latest-all-languages/index.php?lang=en ... show more 46.238.5.57 - - [14/Dec/2023:19:36:22 +0100] "GET /phpMyAdmin-latest-all-languages/index.php?lang=en HTTP/1.1" 404 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇩🇪 mclo	2023-12-14 18:04:57 (2 years ago)	46.238.5.57 - - [14/Dec/2023:19:04:56 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 19 ... show more 46.238.5.57 - - [14/Dec/2023:19:04:56 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 46.238.5.57 - - [14/Dec/2023:19:04:56 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 46.238.5.57 - - [14/Dec/2023:19:04:56 +0100] "GET /phpMyAdmin-latest-english/index.php?lang=en HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇩🇪 reger-men	2023-12-03 00:04:40 (2 years ago)	IP & Port Scan.	Port Scan Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.220.59

🇧🇬 193.24.211.218

🇧🇷 170.84.239.68

🇮🇳 103.121.156.110

🇫🇷 84.17.60.251

🇸🇪 2.248.205.246

🇰🇷 211.34.180.79

🇺🇸 172.71.22.49

🇳🇬 154.118.52.189

🇰🇷 118.219.233.147

🇺🇦 109.254.131.77

🇩🇪 45.135.193.198

🇺🇸 35.87.222.222

🇨🇳 221.229.52.157

🇮🇳 182.73.176.186

🇺🇸 172.110.223.156

🇺🇸 172.71.22.48

🇦🇫 149.54.62.86

🇬🇧 139.59.173.98

🇨🇳 94.231.206.158