AS138968 — rainbow network limited Threat Intelligence

Network Threat Summary

AS138968 (rainbow network limited) has 24,099 malicious IP addresses with 263,373 abuse reports across 5 countries. First activity recorded 2022-07-03, most recent activity 2026-09-20.

Threat Profile: The primary attack categories observed from this network are professional threat, malware infrastructure, reconnaissance. This network shows significant threat activity well above the global median, warranting enhanced monitoring. Affected countries include JP, HK, TW.

Risk Assessment: HIGH - Significant threat activity originates from this network. Enhanced monitoring and aggressive IP blocking are recommended.

Top Attack Categories

• Professional Threat 4,352 reports
• Malware Infrastructure 642 reports
• Reconnaissance 451 reports
• Reputation Low 104 reports
• Malware C2 85 reports

Top Affected Countries

• JP 7,873 reports
• HK 1,842 reports
• TW 891 reports

Most Reported IPs

• 212.115.54.84 654 reports
• 85.208.212.22 135 reports
• 93.177.76.22 104 reports
• 203.189.234.23 104 reports
• 103.100.156.22 104 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS138968 threat data into your security stack with our REST API.

See how we classify and verify threats →