South Korea (KR) Threat Intelligence

South Korea has 56,957 malicious IP addresses with 3,048,890 abuse reports. Top threat categories include suspicious activity, severe abuse, ssh bruteforce, moderate threat, high threat. Top attacking networks: Korea Telecom (18,007 IPs), LARUS Limited (11,235 IPs), Microsoft Corporation (2,817 IPs). Data collected since 2022-12-19, last activity 2026-09-06.

Threat Assessment: South Korea shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, ssh bruteforce. The majority of threats originate from networks operated by Korea Telecom and LARUS Limited.