Network · AS9858

AS9858 Korea Internet Security Agency

AS9858 (Korea Internet Security Agency) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Network check ASN

AS9858

  • OwnerKorea Internet Security Agency
  • KindInternet service provider
  • Servers, not peopleno
  • IPv4 addresses4,864
  • IPv4 ranges11
  • IPv6 ranges1
Risk score0

Nothing suspicious found.

Largest IPv4 ranges

  • 49.8.8.0/21
  • 49.8.18.0/23
  • 49.8.4.0/24
  • 49.8.21.0/24
  • 49.8.2.0/24
  • 49.8.16.0/24
  • 49.8.0.0/24
  • 49.11.0.0/24
  • 202.20.85.0/24
  • 192.132.15.0/24
  • 110.92.23.0/24

Ranges and owner from DB-IP (CC BY 4.0), updated 2026-10-21.

Check an IP address →

Detect it in code

Spot AS9858 traffic at signup.

Send the visitor's IP. The response includes the ASN, the owner and flags.hosting.

curl https://veqen-app.com/v1/ip/check \
  -H "Authorization: Bearer $VEQEN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"ip": "203.0.113.7"}'
import os, requests

r = requests.post(
    "https://veqen-app.com/v1/ip/check",
    headers={"Authorization": f"Bearer {os.environ['VEQEN_API_KEY']}"},
    json={"ip": "203.0.113.7"},
    timeout=10,
)
result = r.json()
print(result["risk"]["verdict"], result["risk"]["reasons"])
const res = await fetch("https://veqen-app.com/v1/ip/check", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.VEQEN_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"ip": "203.0.113.7"}),
});
const result = await res.json();
console.log(result.risk.verdict, result.risk.reasons);
Questions

About AS9858

Is AS9858 a datacenter or VPN network?

AS9858 (Korea Internet Security Agency) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Who owns AS9858?

AS9858 is registered to Korea Internet Security Agency. It announces about 4,864 IPv4 addresses.

How do I detect traffic from AS9858?

Call the Veqen IP check with the visitor's address. The response includes the ASN, the owner and whether the network is a datacenter, VPN network, relay or ISP.