Liso · Country

Attacks observed in South Korea

Liso attack observations affecting networks in South Korea: targeted prefixes, affected operators, attack methods, and timing over the last 30 days.

114 observations · Last 30 days · Latest observation 2026-11-04 12:44:14 UTC

Most affected networks

Walrus Lab LLCAS40279060
TEFEXIA Co., Ltd.AS21642528
YUJUN KIM trading as ALCLOUDAS19884017
The Constant Company, LLCAS204738
PacketStream KoreaAS1396481

Most observed methods

Raw TCP ACK83
Large UDP datagrams11
TCP session holding8
Raw TCP SYN8
TCP connection and data pool2
TCP handshake then raw packets1
Raw TCP FIN/PSH/ACK1

Recent observations

2026-11-04 12:44:14 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 12:14:13 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 11:59:12 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 11:44:12 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 11:42:03 UTCRaw TCP ACK158.247.194.6/32TCP/801mSouth Korea
2026-11-04 11:29:11 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 11:14:10 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 11:12:18 UTCRaw TCP ACK158.247.194.6/32TCP/801mSouth Korea
2026-11-04 11:03:51 UTCRaw TCP ACK158.247.194.6/32TCP/801mSouth Korea
2026-11-04 11:01:35 UTCRaw TCP ACK158.247.194.6/32TCP/801mSouth Korea
2026-11-04 10:59:10 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 10:52:31 UTCRaw TCP ACK158.247.194.6/32TCP/801mSouth Korea
2026-11-04 10:50:30 UTCRaw TCP ACK158.247.194.6/32TCP/801mSouth Korea
2026-11-04 10:48:01 UTCRaw TCP ACK158.247.194.6/32TCP/801mSouth Korea
2026-11-04 10:44:09 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 10:43:39 UTCRaw TCP ACK158.247.194.6/32TCP/801mSouth Korea
2026-11-04 10:29:08 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 10:14:08 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 09:59:07 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 09:44:07 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 09:29:06 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 09:14:05 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 08:59:04 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 08:44:04 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 08:29:03 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 08:14:02 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 07:59:01 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 07:44:01 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 07:29:00 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 07:13:59 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 06:58:59 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 06:43:58 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 06:28:57 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 06:13:56 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 05:58:55 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 05:43:55 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 05:28:54 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 05:13:53 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 04:58:53 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea
2026-11-04 04:43:52 UTCRaw TCP ACK104.234.10.0/24TCP/RANDOM15sSouth Korea

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.