AS138968 — rainbow network limited Threat Intelligence

Network Threat Summary

AS138968 (rainbow network limited) has 24,098 malicious IP addresses with 263,253 abuse reports across 5 countries. First activity recorded 2022-07-03, most recent activity 2026-09-06.

Threat Profile: The primary attack categories observed from this network are professional threat, suspicious activity, severe abuse. This network shows significant threat activity well above the global median, warranting enhanced monitoring. Affected countries include JP, CN, HK.

Risk Assessment: HIGH - Significant threat activity originates from this network. Enhanced monitoring and aggressive IP blocking are recommended.

Top Attack Categories

• Professional Threat 255,280 reports
• Suspicious Activity 630 reports
• Severe Abuse 555 reports
• Aggregated Threat 121 reports
• Malware C2 115 reports

Top Affected Countries

• JP 15,329 reports
• CN 8,788 reports
• HK 1,763 reports

Most Reported IPs

• 212.115.54.84 649 reports
• 85.208.212.22 122 reports
• 103.213.248.200 96 reports
• 203.189.234.23 91 reports
• 93.177.76.22 91 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS138968 threat data into your security stack with our REST API.

See how we classify and verify threats →