59.4.55.180

Classification: Malicious

59.4.55.180 is a malicious IP address. Reported by 9 threat sources, last seen 2026-09-06. Network: AS4766 Korea Telecom.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Barracuda 2022-12-30 02:44:51 2026-09-06 09:44:52 attacker malicious-activity
Malicious Host AbuseIPDB 2024-07-01 19:45:31 2024-07-21 19:30:47 malicious-activity
SSH Attacker Blocklist.net.ua 2023-04-08 04:07:56 2024-07-08 14:25:12 malicious-activity
SSH Attacker Blocklist.de 2022-12-30 02:44:50 2024-07-02 11:51:54 malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic UDP Emerging Threats 2024-06-25 19:38:12 2024-06-25 19:38:12 malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic TCP Emerging Threats 2024-06-25 19:38:04 2024-06-25 19:38:04 malicious-activity
Malicious Host CIArmy 2023-10-19 07:51:39 2023-12-03 08:18:21 malicious-activity
Mail Spammer Blocklist.de 2022-10-09 01:14:20 2023-07-11 03:38:55 malicious-activity
IMAP Attacker Blocklist.de 2022-10-25 02:23:02 2023-07-11 03:32:37 malicious-activity
Malicious Host HoneyDB 2023-04-23 00:00:00 2023-05-16 00:00:00 malicious-activity
Mail Spammer Abuseat.org 2022-12-30 02:44:51 2022-12-30 02:44:51
Bruteforce Maltiverse 2022-07-11 20:22:00 2022-10-09 01:00:25 malicious-activity
Port Scanner Maltiverse 2022-07-17 18:18:27 2022-10-08 11:26:10 anomalous-activity
HTTP Attacker Maltiverse 2022-07-11 20:39:47 2022-10-08 11:26:10 malicious-activity
Mail Spammer Maltiverse 2022-07-11 15:26:05 2022-10-08 11:26:10 malicious-activity
Hacking Maltiverse 2022-07-12 07:27:25 2022-10-08 11:02:46 malicious-activity
DDoS attack Maltiverse 2022-07-18 23:38:35 2022-10-06 13:59:14 malicious-activity
Malicious Host Maltiverse 2022-07-16 00:34:16 2022-10-05 02:16:43 compromised malicious-activity
SSH Attacker Maltiverse 2022-07-12 02:35:46 2022-10-02 12:30:46 malicious-activity
IMAP Attacker Maltiverse 2022-07-11 15:26:05 2022-07-11 15:26:05 malicious-activity

Tags

abuse ssh bruteforce bot mail spam attacker imap pop3 sasl

Whois information

AS name
AS4766 Korea Telecom
AS registry
apnic
AS date
2004-08-02 00:00:00
AS CIDR
59.0.0.0/13
CIDR
59.0.0.0/11
Registrant
Korea Telecom
Address
Jeollanam-do Naju-si Jinheung-gil
City
Suwon
Postal code
16295
Country
KR — Korea, Republic of 🇰🇷
Contact email
[email protected], [email protected]
First indexed
2022-10-09 01:14:20
Last updated
2026-09-06 09:44:53

Malicious IPs in the same CIDR

59.6.180.232 59.3.73.166 59.4.55.180 59.3.76.218 59.6.1.82 59.4.83.85 59.2.248.84 59.4.255.205 59.0.4.175 59.5.113.35 59.0.93.150 59.2.240.35 59.4.205.203 59.2.215.186 59.4.120.76 59.3.4.109