JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 59.16.4.138

59.16.4.138 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 74%: ?

74%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 59.16.4.138

Whois 59.16.4.138

IP Abuse Reports for 59.16.4.138:

This IP address has been reported a total of 129 times from 68 distinct sources. 59.16.4.138 was first reported on March 11th 2025, and the most recent report was 23 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 XICTRON	2026-07-24 23:15:02 (23 minutes ago)	SMTP brute-force attempt detected by Fail2Ban in Postfix jail	Brute-Force
Anonymous	2026-07-24 23:10:41 (27 minutes ago)	(smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-)	Brute-Force
🇩🇪 rh24	2026-07-24 17:37:49 (6 hours ago)	(smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-)	Brute-Force
🇩🇪 4server	2026-07-24 17:36:56 (6 hours ago)	IP reached maximum auth failures	Brute-Force
Anonymous	2026-07-24 17:34:50 (6 hours ago)	[da.kdns.gr] exim: logs=/var/log/exim/mainlog,/var/log/exim/rejectlog; samples=2026-07-24 20:32:10 p ... show more [da.kdns.gr] exim: logs=/var/log/exim/mainlog,/var/log/exim/rejectlog; samples=2026-07-24 20:32:10 plain authenticator failed for (DESKTOP-2U9AQ95) [59.16.4.138]: 535 Incorrect authentication data ([email protected]) \| 2026-07-24 20:32:17 plain authenticator failed for (DESKTOP-2U9AQ95) [59.16.4.138]: 535 Incorrect authentication data ([email protected]) \| 2026-07-24 20:32:27 plain authenticator failed for (DESKTOP-2U9AQ95) [59.16.4.138]: 535 Incorrect authentication data ([email protected]) show less	Email Spam Brute-Force
🇩🇪 iNetWorker	2026-07-24 17:32:09 (6 hours ago)	smtp	Brute-Force
🇺🇸 bigscoots.com	2026-07-24 07:29:30 (16 hours ago)	(smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-): 5 in the last 3600 secs; Port ... show more (smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-24 03:29:09 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:51978: 535 Incorrect authentication data ([email protected]) 2026-07-24 03:29:15 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:52653: 535 Incorrect authentication data ([email protected]) 2026-07-24 03:29:16 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:52741: 535 Incorrect authentication data ([email protected]) 2026-07-24 03:29:24 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:53390: 535 Incorrect authentication data ([email protected]) 2026-07-24 03:29:27 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:53777: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-24 04:22:21 (19 hours ago)	(smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-): 5 in the last 3600 secs; Port ... show more (smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-24 00:21:46 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:61938: 535 Incorrect authentication data ([email protected]) 2026-07-24 00:21:53 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:63114: 535 Incorrect authentication data ([email protected]) 2026-07-24 00:21:55 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:63381: 535 Incorrect authentication data ([email protected]) 2026-07-24 00:22:03 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:63937: 535 Incorrect authentication data ([email protected]) 2026-07-24 00:22:20 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:49970: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 Sparxx	2026-07-24 03:16:03 (20 hours ago)	2026-07-24T04:34:59.579924+02:00 srv postfix/submission/smtpd[3047150]: lost connection after CONNEC ... show more 2026-07-24T04:34:59.579924+02:00 srv postfix/submission/smtpd[3047150]: lost connection after CONNECT from unknown[59.16.4.138] 2026-07-24T04:47:09.509490+02:00 srv postfix/submission/smtpd[3048485]: lost connection after CONNECT from unknown[59.16.4.138] 2026-07-24T05:16:02.612598+02:00 srv postfix/submission/smtpd[3051928]: lost connection after CONNECT from unknown[59.16.4.138] ... show less	Brute-Force
🇺🇸 bigscoots.com	2026-07-23 21:16:31 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-): 5 in the last 3600 secs; Port ... show more (smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-23 17:16:24 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:49380: 535 Incorrect authentication data ([email protected]) 2026-07-23 17:16:28 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:49237: 535 Incorrect authentication data ([email protected]) 2026-07-23 17:16:28 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:49272: 535 Incorrect authentication data ([email protected]) 2026-07-23 17:16:28 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:49382: 535 Incorrect authentication data ([email protected]) 2026-07-23 17:16:28 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:49231: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-07-23 15:34:14 (1 day ago)	[ns1.skdns.gr] mail-brute: mail_auth_fails=12/15m	Email Spam Brute-Force
🇩🇪 Tha_14	2026-07-23 15:33:00 (1 day ago)	postfix/submission/smtpd[3953713]: SASL PLAIN authentication failed: (reason unavailable), sasl_user ... show more postfix/submission/smtpd[3953713]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=contact@ postfix/submission/smtpd[3953713]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=support@ \| postfix/submission/smtpd[3953713]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=info@ show less	Brute-Force
🇩🇪 rh24	2026-07-23 08:14:34 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-)	Brute-Force
🇺🇸 bigscoots.com	2026-07-23 06:10:18 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-): 5 in the last 3600 secs; Port ... show more (smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-23 02:10:12 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:64636: 535 Incorrect authentication data ([email protected]) 2026-07-23 02:10:12 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:64226: 535 Incorrect authentication data ([email protected]) 2026-07-23 02:10:16 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:64258: 535 Incorrect authentication data ([email protected]) 2026-07-23 02:10:16 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:64637: 535 Incorrect authentication data ([email protected]) 2026-07-23 02:10:16 dovecot_plain authenticator failed for H=(DESKTOP-2U9AQ95) [59.16.4.138]:64196: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 netclix.gr	2026-07-22 10:38:59 (2 days ago)	(smtpauth) Failed SMTP AUTH login from 59.16.4.138 (KR/South Korea/-)	Brute-Force

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 202.29.225.158

🇳🇱 185.93.89.71

🇫🇮 157.180.60.102

🇺🇸 135.237.122.43

🇺🇸 104.236.53.110

🇮🇳 103.137.16.162

🇫🇷 85.217.140.18

🇺🇸 8.230.116.39

🇵🇪 161.132.42.84

🇫🇷 149.202.63.35

🇨🇳 121.229.9.110

🇰🇷 112.217.164.58

🇧🇩 103.94.134.160

🇲🇲 103.59.163.133

🇩🇪 85.216.81.75

🇺🇸 52.53.238.93

🇳🇱 45.148.10.152

🇺🇸 2a10:3c0:5:0:1:24:0:5

🇭🇰 223.197.178.95

🇹🇭 202.29.220.126