JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.255.215.119

185.255.215.119 was found in our database!

This IP was reported 247 times. Confidence of Abuse is 85%: ?

85%

ISP	BG-KARNOBATNET
Usage Type	Fixed Line ISP
ASN	AS200475
Domain Name	karnobat.net
Country	🇧🇬 Bulgaria
City	Karnobat, Burgas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.255.215.119

Whois 185.255.215.119

IP Abuse Reports for 185.255.215.119:

This IP address has been reported a total of 247 times from 89 distinct sources. 185.255.215.119 was first reported on May 17th 2025, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-07-13 10:49:26 (17 hours ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇩🇪 jasperedv.de	2026-07-12 22:47:57 (1 day ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇬🇧 gaztronics	2026-07-12 12:10:13 (1 day ago)	2026-07-12T12:10:11.039592 liberator auth[3189814]: pam_unix(dovecot:auth): authentication failure; ... show more 2026-07-12T12:10:11.039592 liberator auth[3189814]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=185.255.215.119 ... show less	Brute-Force
🇮🇩 sockominfo	2026-07-11 18:00:52 (2 days ago)	Zimbra: Login failures from malicious IP: 185.255.215.119. Threat Score: 6.4/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 185.255.215.119. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 75%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇦🇹 joe-abuse	2026-07-08 01:43:06 (6 days ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-06 04:00:15 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-06 04:00:15. Events: 21. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇮🇹 www.tana.it	2026-07-07 12:46:54 (6 days ago)	dictionary attack	Brute-Force
🇩🇪 FeG Deutschland	2026-07-07 12:02:04 (6 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇯🇵 rafled	2026-07-07 02:23:52 (1 week ago)	Jul 7 02:23:51 internal-mail-rafled-com dovecot: imap-login: Disconnected (auth failed, 3 attempts ... show more Jul 7 02:23:51 internal-mail-rafled-com dovecot: imap-login: Disconnected (auth failed, 3 attempts in 16 secs): user=<[email protected]>, method=PLAIN, rip=185.255.215.119, lip=10.0.0.239, TLS, session=<+Nz8E/xVJ6O5/9d3> ... show less	Brute-Force SSH
🇮🇩 sockominfo	2026-07-05 22:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 185.255.215.119. Threat Score: 6.2/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 185.255.215.119. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-05 21:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 185.255.215.119. Threat Score: 6.3/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 185.255.215.119. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 75%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-05 20:00:08 (1 week ago)	Zimbra: Login failures from malicious IP: 185.255.215.119. Threat Score: 5.9/10 (MEDIUM). Reported b ... show more Zimbra: Login failures from malicious IP: 185.255.215.119. Threat Score: 5.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇦🇹 joe-abuse	2026-07-05 01:37:30 (1 week ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-03 02:00:09 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-03 02:00:09. Events: 21. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇷🇺 DZBOT	2026-07-04 23:22:42 (1 week ago)	DZBOT: [MTA] Brute-force users	Brute-Force
Anonymous	2026-07-04 13:25:31 (1 week ago)	(imapd) Failed IMAP login from 185.255.215.119 (BG/Bulgaria/-)	Brute-Force
🇦🇹 joe-abuse	2026-07-02 03:20:01 (1 week ago)	2026-07-02T05:20:00.555193+02:00 ucs1 dovecot: auth: pam([email protected],185.255.215.119,<1 ... show more 2026-07-02T05:20:00.555193+02:00 ucs1 dovecot: auth: pam([email protected],185.255.215.119,<122ISJhVSJq5/9d3>): unknown user (given password: Hamlet2122021) ... show less	Brute-Force

Showing 1 to 15 of 247 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 102.129.52.75

🇺🇸 91.230.168.54

🇮🇩 69.5.7.218

🇳🇱 45.148.10.200

🇷🇺 37.77.109.108

🇺🇸 34.58.124.191

🇲🇾 202.187.157.136

🇧🇪 198.235.24.209

🇧🇪 198.235.24.148

🇺🇸 185.198.240.51

🇺🇸 162.216.149.201

🇻🇳 113.164.225.5

🇺🇸 100.28.153.226

🇲🇾 47.250.93.74

🇬🇧 35.203.211.127

🇺🇸 195.184.76.35

🇬🇧 188.240.59.61

🇸🇾 185.225.41.192

🇺🇸 185.198.240.59

🇵🇱 176.53.159.198