AS138152 — YISU CLOUD LTD Threat Intelligence

Network Threat Summary

AS138152 (YISU CLOUD LTD) has 1,118 malicious IP addresses with 34,082 abuse reports across 5 countries. First activity recorded 2022-08-21, most recent activity 2026-07-05.

Threat Profile: The primary attack categories observed from this network are severe abuse, suspicious activity, ssh bruteforce. This network exhibits moderate threat activity within expected ranges for networks of this size. Affected countries include US, HK, SC.

Risk Assessment: MEDIUM - Moderate threat activity detected. Regular monitoring with automated blocking for repeat offenders is advised.

Top Attack Categories

• Severe Abuse 8,668 reports
• Suspicious Activity 3,068 reports
• Ssh Bruteforce 1,774 reports
• Rdp Bruteforce 1,314 reports
• Attacks 521 reports

Top Affected Countries

• US 9,532 reports
• HK 7,408 reports
• SC 6,098 reports

Most Reported IPs

• 103.143.11.150 410 reports
• 103.143.238.100 399 reports
• 156.227.232.198 395 reports
• 156.232.13.218 395 reports
• 103.143.231.24 394 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS138152 threat data into your security stack with our REST API.

See how we classify and verify threats →