61.72.145.38

Classification: Malicious

61.72.145.38 is a malicious IP address. Reported by 2 threat sources, last seen 2026-09-08. Network: AS4766 Korea Telecom.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
IMAP Attacker Blocklist.de 2025-12-24 06:54:40 2026-09-08 11:02:05 attacker malicious-activity
Mail Spammer Blocklist.de 2025-12-24 07:14:38 2026-09-07 12:02:34 attacker malicious-activity
Malicious Host AbuseIPDB 2025-12-21 05:47:04 2026-06-07 22:38:46 compromised malicious-activity
Bruteforce login attacker Blocklist.de 2026-05-17 05:03:14 2026-05-24 05:02:11 malicious-activity
HTTP Attacker Blocklist.de 2026-05-17 03:03:09 2026-05-24 03:02:06 malicious-activity
Mail Spammer AbuseIPDB 2025-12-21 17:48:30 2026-04-02 21:48:06 malicious-activity
Bruteforce AbuseIPDB 2025-12-20 20:00:13 2026-04-02 21:48:06 malicious-activity
IMAP Attacker AbuseIPDB 2025-12-26 12:58:58 2026-04-02 07:50:41 malicious-activity
Port Scanner AbuseIPDB 2025-12-21 06:00:25 2026-04-01 10:46:21 anomalous-activity
Hacking AbuseIPDB 2025-12-20 21:56:42 2026-03-31 15:01:53 malicious-activity
SSH Attacker AbuseIPDB 2025-12-23 01:01:30 2026-03-30 01:11:47 malicious-activity
HTTP Attacker AbuseIPDB 2025-12-22 20:44:01 2026-03-27 02:01:58 malicious-activity
Phishing AbuseIPDB 2026-01-19 09:00:34 2026-03-25 21:01:19 malicious-activity
DDoS Attacker AbuseIPDB 2026-01-14 01:49:34 2026-03-24 17:12:56 malicious-activity

Tags

attacker imap pop3 sasl bot mail spam apache ddos rfi login bruteforce joomla wordpress

Whois information

AS name
AS4766 Korea Telecom
Registrant
Korea Telecom
City
Seoul
Postal code
04523
Country
KR — Korea, Republic of 🇰🇷
First indexed
2025-12-24 04:33:02
Last updated
2026-09-08 11:02:05