JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.255.212.51

185.255.212.51 was found in our database!

This IP was reported 211 times. Confidence of Abuse is 74%: ?

74%

ISP	BG-KARNOBATNET
Usage Type	Fixed Line ISP
ASN	AS200475
Hostname(s)	185.255.212.51.ip.karnobat.net
Domain Name	karnobat.net
Country	🇧🇬 Bulgaria
City	Karnobat, Burgas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.255.212.51

Whois 185.255.212.51

IP Abuse Reports for 185.255.212.51:

This IP address has been reported a total of 211 times from 79 distinct sources. 185.255.212.51 was first reported on July 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇴 cyruz	2026-07-20 18:27:40 (1 day ago)	Email login Brute force	Hacking Brute-Force
🇩🇪 FeG Deutschland	2026-07-20 09:04:03 (1 day ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇬🇧 Shepley	2026-07-20 02:13:34 (1 day ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force
🇦🇺 AWW-Admin	2026-07-17 21:48:26 (4 days ago)	(imapd) Failed IMAP login from 185.255.212.51 (BG/Bulgaria/185.255.212.51.ip.karnobat.net)	Brute-Force
🇿🇦 hostsec_za	2026-07-16 09:25:12 (5 days ago)	IMAP/POP3 Auth Attack. 17 failed logins in 6 hours.	Brute-Force
Anonymous	2026-07-09 16:46:58 (1 week ago)	2026-07-09T18:46:57.303631+02:00 soli-gate cyrus/imaps[3266078]: badlogin: 185.255.212.51.ip.karnoba ... show more 2026-07-09T18:46:57.303631+02:00 soli-gate cyrus/imaps[3266078]: badlogin: 185.255.212.51.ip.karnobat.net [185.255.212.51] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Brute-Force
Anonymous	2026-07-07 08:56:18 (2 weeks ago)	IMAP password guessing	Brute-Force
🇮🇩 sockominfo	2026-07-07 08:00:52 (2 weeks ago)	Zimbra: Login failures from malicious IP: 185.255.212.51. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 185.255.212.51. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-07 07:00:52 (2 weeks ago)	Zimbra: Login failures from malicious IP: 185.255.212.51. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 185.255.212.51. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-07 06:00:09 (2 weeks ago)	Zimbra: Login failures from malicious IP: 185.255.212.51. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 185.255.212.51. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 TTWebhosting	2026-07-04 19:08:56 (2 weeks ago)	(imapd) Failed IMAP login from 185.255.212.51 (BG/Bulgaria/Burgas/Karnobat/185.255.212.51.ip.karnoba ... show more (imapd) Failed IMAP login from 185.255.212.51 (BG/Bulgaria/Burgas/Karnobat/185.255.212.51.ip.karnobat.net/[AS200475 Et Veselin Jelqzkov]): 2 in the last 3600 secs show less	Brute-Force Port Scan Hacking
🇫🇷 solution.it	2026-07-03 21:33:06 (2 weeks ago)	Jul 3 23:33:05 vps789997 dovecot: imap-login: Disconnected (auth failed, 2 attempts in 12 secs): us ... show more Jul 3 23:33:05 vps789997 dovecot: imap-login: Disconnected (auth failed, 2 attempts in 12 secs): user=<[email protected]>, method=PLAIN, rip=185.255.212.51, lip=51.77.194.251, TLS, session=<t0jOqrtVvcu5/9Qz> show less	Brute-Force
🇦🇺 AWW-Admin	2026-07-01 06:31:18 (2 weeks ago)	(imapd) Failed IMAP login from 185.255.212.51 (BG/Bulgaria/185.255.212.51.ip.karnobat.net)	Brute-Force
🇷🇺 DZBOT	2026-07-01 03:26:58 (2 weeks ago)	DZBOT: [MTA] Brute-force users	Brute-Force
🇩🇪 FeG Deutschland	2026-06-30 15:32:12 (3 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force

Showing 1 to 15 of 211 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 206.135.45.18

🇯🇵 202.239.44.123

🇹🇼 198.235.24.98

🇺🇸 157.230.4.139

🇸🇬 145.223.134.111

🇺🇸 104.23.213.115

🇩🇪 69.5.169.240

🇩🇪 69.5.169.98

🇺🇸 47.251.93.165

🇬🇧 45.133.173.60

🇺🇸 20.221.68.122

🇺🇸 20.65.193.206

🇲🇱 217.64.98.170

🇭🇰 199.45.155.111

🇺🇸 192.101.68.88

🇳🇮 190.212.140.35

🇬🇧 185.216.145.163

🇲🇩 176.123.6.142

🇵🇱 176.53.159.198

🇹🇼 172.69.221.193