🇰🇷 South Korea: live cyber threat activity

Malicious IPs, malware and ransomware victims in South Korea.

1,306Malicious IPs listed#12 of 182 countries · 1.97% of the world
211New in the last 24hfirst seen by any feed
574Reported by 2+ feedsindependent sources agree
9Ransomware victimsposted in the last 30 days

View South Korea on the live map →All listed IPs in South KoreaRansomware victims in South Korea

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C216
  2. Malware55
  3. Phishing0
  4. Attacker1,235

By state or region

  1. Gyeonggi-do656
  2. Seoul288
  3. Jeju-do107
  4. Jeollanam-do60
  5. Gyeongsangbuk-do50
  6. Gyeongsangnam-do39
  7. Gangwon-do22
  8. Jeollabuk-do17
  9. Busan17
  10. Incheon11
  11. Daejeon9
  12. Gwangju8
  13. Chungcheongnam-do8
  14. North Chungcheong8
  15. Daegu3

By city

  1. Seongnam-si546
  2. Yongsan-dong146
  3. Seoul83
  4. Naju50
  5. Jeju-si47
  6. Yongin-si25
  7. Yeongju-si22
  8. Jeju City21
  9. Seogwipo-si20
  10. Anyang-si19
  11. Jinju-si19
  12. Chuncheon-si12
  13. Yangcheondong11
  14. Gwangmyeong9
  15. Suwon9

Networks hosting the most

NetworkIPs
AS4766 Korea Telecom 921
AS9318 SK Broadband Co Ltd 73
AS3786 LG DACOM Corporation 58
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 33
AS45102 Alibaba (US) Technology Co., Ltd. 21
AS9694 Seokyung Cable Television Co.. Ltd. 20
AS17858 LG POWERCOMM 19
AS31898 Oracle Corporation 18
AS132203 Shenzhen Tencent Computer Systems Company Limited 16
AS8075 Microsoft Corporation 11
AS38684 CMB Daejeon Broadcasting Co,.Ltd 8
AS9845 LG HelloVision Corp. 6
AS9946 KCTV JEJU BROADCASTING 5
AS38700 SMILESERV 5
AS17577 LG HelloVision Corp. 5

Malware families served from South Korea

  1. Urelas12
  2. Zard7
  3. Emotet6
  4. Mokes5
  5. Cobalt Strike5
  6. DanaBot3
  7. AsyncRAT2
  8. Loki2
  9. Danabot1
  10. Mydoom1
  11. Injuke1
  12. Havoc1
  13. Sliver1
  14. Abracadabra1
  15. Stop1

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
121.191.167[.]81AttackerAttacking hostJecheon-si, North ChungcheongAS4766 Korea Telecom1 feed2026-10-12 08:10
43.108.40[.]41AttackerAttacking hostYongsan-dong, SeoulAS45102 Alibaba (US) Technology Co., Ltd.1 feed2026-10-12 07:55
8.213.156[.]11AttackerAttacking hostYongsan-dong, SeoulAS45102 Alibaba (US) Technology Co., Ltd.1 feed2026-10-12 07:55
175.119.10[.]231MalwareMokesSeoul, SeoulAS9318 SK Broadband Co Ltd1 feed · 2,489 sandbox samples2026-10-12 07:53
211.171.233[.]129MalwareMokesYeoksam-dong, SeoulAS3786 LG DACOM Corporation1 feed · 1,150 sandbox samples2026-10-12 07:53
220.124.37[.]193AttackerAttacking hostSeongnam-si, Gyeonggi-doAS4766 Korea Telecom1 feed2026-10-12 07:50
123.140.161[.]243MalwareMokesYongsan-dong, SeoulAS3786 LG DACOM Corporation1 feed · 1,520 sandbox samples2026-10-12 07:26
211.119.84[.]111MalwareZardYongsan-dong, SeoulAS3786 LG DACOM Corporation1 feed · 1,271 sandbox samples2026-10-12 07:26
211.171.233[.]126MalwareZardYeoksam-dong, SeoulAS3786 LG DACOM Corporation1 feed · 1,232 sandbox samples2026-10-12 07:26
211.40.39[.]251MalwareZardYongsan-dong, SeoulAS3786 LG DACOM Corporation1 feed · 1,211 sandbox samples2026-10-12 07:26
218.38.121[.]17MalwareEmotetSeoul, SeoulAS9318 SK Broadband Co Ltd1 feed · 72 sandbox samples2026-10-12 07:26
222.236.49[.]124MalwareMokesSeoul, SeoulAS9318 SK Broadband Co Ltd1 feed · 933 sandbox samples2026-10-12 07:26
211.119.84[.]112MalwareMokesYongsan-dong, SeoulAS3786 LG DACOM Corporation1 feed · 1,350 sandbox samples2026-10-12 06:58
211.53.230[.]67MalwareZardYongsan-dong, SeoulAS3786 LG DACOM Corporation1 feed · 965 sandbox samples2026-10-12 06:58
61.76.136[.]25AttackerAttacking hostDaehap, Gyeongsangnam-doAS4766 Korea Telecom3 feeds2026-10-12 06:55
211.43.97[.]233:23C2MiraiSeongnam-si, Gyeonggi-doAS4766 Korea Telecom1 feed2026-10-12 06:11
121.185.91[.]80AttackerAttacking hostSeongnam-si, Gyeonggi-doAS4766 Korea Telecom1 feed2026-10-12 06:10
221.160.226[.]82AttackerAttacking hostSeongnam-si, Gyeonggi-doAS4766 Korea Telecom1 feed2026-10-12 06:10
58.230.189[.]186AttackerAttacking hostSeoul, SeoulAS9318 SK Broadband Co Ltd1 feed2026-10-12 06:10
118.40.55[.]91AttackerAttacking hostDuam-dong, GwangjuAS4766 Korea Telecom1 feed2026-10-12 06:10
175.207.203[.]204AttackerAttacking hostJeju-si, Jeju-doAS4766 Korea Telecom1 feed2026-10-12 06:10
59.26.147[.]247AttackerAttacking hostSeongnam-si, Gyeonggi-doAS4766 Korea Telecom1 feed2026-10-12 06:10
222.103.13[.]176AttackerAttacking hostSeongnam-si, Gyeonggi-doAS4766 Korea Telecom1 feed2026-10-12 05:35
119.195.48[.]94AttackerAttacking hostSeongnam-si, Gyeonggi-doAS4766 Korea Telecom1 feed2026-10-12 05:00
43.108.21[.]21AttackerAttacking hostYongsan-dong, SeoulAS45102 Alibaba (US) Technology Co., Ltd.1 feed2026-10-12 05:00

See every listed IP in South Korea →

Ransomware victims in South Korea

9 posted in the last 30 days, 24 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-10-03 06:27WOOSHIN SAFETY SYSTEMS CO LTDthegentlemenManufacturing
2026-09-30 07:51www.newyjh.comULose—
2026-09-30 03:40SamwumedthegentlemenHealthcare
2026-09-29 15:38spg.co.krlockbit5Other
2026-09-23 14:29ELANDRETAIL.COM-KMALL24.COMclopRetail & E-Commerce
2026-09-21 13:05HyVision System. IncmetaencryptorTechnology
2026-09-16 18:21dg.ac.krAuditTeamEducation
2026-09-16 18:21gownet.netAuditTeamOther
2026-09-15 11:59SFA Engineering CorporationmetaencryptorManufacturing
2026-09-09 16:51dg***krAuditTeam—
2026-09-09 16:50go***etAuditTeamTechnology
2026-09-05 06:33광명산업(주)BlackLocksManufacturing
2026-09-01 12:10iwinBlack XTechnology
2026-08-30 09:05i-oneBlack X—
2026-08-28 12:20Hanwha RenewablesemperadorEnergy & Utilities

All ransomware victims in South Korea →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →