DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

CITY REPORT — Seo-gu / Gwangju / South Korea · Seo-gu / Gwangju / South Korea

First sighted: May 31, 2023, 3 a.m. · Last sighted: Aug. 12, 2025, 3 a.m.

Risk
10 (low)
Total hits
57
Total errors
0
Distinct IPs
9
Distinct ASNs
2
Country
South Korea
Region
Gwangju
City
Seo-gu

Risk

Model: v1 Computed: 2026-01-15 09:35:10
Risk score
10
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Command injection attempts
Request content resembles attempts to execute OS commands via an application.
cmdi
Hits 3
Points 71.40
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 45
Points 39.60
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 5
Points 24.20
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 56
Points 9.68
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 2
Points 1.80

Top Organizations Operating In The City

Most-observed organizations in this city
Kornet Korea Telecom Jeonnambonbujang ORG_UNKNOWN Cmbkwangjunet

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this city.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
0
3xx
54
4xx
0
5xx
0
Unique URLs
55
Total hits
57
First seen
May 31, 2023, 3 a.m.
Last seen
Aug. 12, 2025, 3 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Command injection attempts cmdi
Request content resembles attempts to execute OS commands via an application.
hits 3 pts 71.40
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 3 1 71.40 May 31, 2023, 12:45 p.m. Aug. 15, 2023, 12:36 a.m.
cmdi 3
Protocol anomaly proto
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 45 pts 39.60
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
11 45 1 39.60 March 3, 2025, 7:49 a.m. March 3, 2025, 7:50 a.m.
proto 45
Sensitive file probing sfp
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 5 pts 24.20
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
22 5 1 24.20 March 3, 2025, 7:49 a.m. March 3, 2025, 7:50 a.m.
sensitive_file 5
User-Agent anomaly ua
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 56 pts 9.68
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
8 46 1 7.36 March 3, 2025, 7:49 a.m. Aug. 12, 2025, 1:12 a.m.
ua 46
14 7 1 1.96 Jan. 6, 2025, 4:49 a.m. April 23, 2025, 2:53 a.m.
ua 7
6 3 1 0.36 May 31, 2023, 12:45 p.m. Aug. 15, 2023, 12:36 a.m.
ua 3
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 2 pts 1.80
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 1 1 1.80 March 3, 2025, 7:50 a.m. March 3, 2025, 7:50 a.m.
scan_velocity 1
0 1 1 0.00 March 3, 2025, 7:50 a.m. March 3, 2025, 7:50 a.m.
scan_velocity 1

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Uses totals aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this Org snapshot (peer IPs with coordinates).

Loading map…

Top Autonomous System Networks

Most-observed networks in this city
AS4766 · Korea Telecom AS10054 · CMB Kwangju Broadcasting

Interesting IPs

Top risky peers inside this city (latest snapshot). Sorted by risk score, then hits.

220.93.167.144 low
Open report
3 /100
Last seen 2025-03-04 02:00
Hits
45
Errors
0
Country
South Korea
ASN
AS4766
AS Org
Korea Telecom
121.148.72.213 low
Open report
1 /100
Last seen 2023-08-15 03:00
Hits
1
Errors
0
Country
South Korea
ASN
AS4766
AS Org
Korea Telecom
59.0.77.58 low
Open report
1 /100
Last seen 2023-06-29 03:00
Hits
1
Errors
0
Country
South Korea
ASN
AS4766
AS Org
Korea Telecom
59.3.10.156 low
Open report
1 /100
Last seen 2023-06-01 03:00
Hits
1
Errors
0
Country
South Korea
ASN
AS4766
AS Org
Korea Telecom
222.105.23.49 low
Open report
0 /100
Last seen 2025-04-23 03:00
Hits
3
Errors
0
Country
South Korea
ASN
AS4766
AS Org
Korea Telecom
121.148.200.133 low
Open report
0 /100
Last seen 2025-04-09 03:00
Hits
2
Errors
0
Country
South Korea
ASN
AS4766
AS Org
Korea Telecom
218.149.51.41 low
Open report
0 /100
Last seen 2025-01-07 02:00
Hits
2
Errors
0
Country
South Korea
ASN
AS4766
AS Org
Korea Telecom
49.246.38.18 low
Open report
0 /100
Last seen 2025-08-12 03:00
Hits
1
Errors
0
Country
South Korea
ASN
AS10054
AS Org
CMB Kwangju Broadcasting
112.164.58.100 low
Open report
0 /100
Last seen 2025-01-07 02:00
Hits
1
Errors
0
Country
South Korea
ASN
AS4766
AS Org
Korea Telecom