South Korea (KR) Threat Intelligence

South Korea has 35,318 malicious IP addresses with 1,488,586 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, rdp bruteforce, web attack, email abuse. Top attacking networks: LARUS Limited (10,202 IPs), Korea Telecom (9,201 IPs), None (2,662 IPs). Data collected since 2022-12-19, last activity 2026-04-16.

Threat Assessment: South Korea shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, generic bruteforce, rdp bruteforce. The majority of threats originate from networks operated by LARUS Limited and Korea Telecom.