AS17561 — LARUS Limited Threat Intelligence

Network Threat Summary

AS17561 (LARUS Limited) has 42,798 malicious IP addresses with 155,604 abuse reports across 17 countries. First activity recorded 2022-10-02, most recent activity 2026-10-03.

Threat Profile: The primary attack categories observed from this network are aggregated threat, reputation low, spam. This network shows significant threat activity well above the global median, warranting enhanced monitoring. Affected countries include US, KR, SC.

Risk Assessment: HIGH - Significant threat activity originates from this network. Enhanced monitoring and aggressive IP blocking are recommended.

Top Attack Categories

• Aggregated Threat 13,019 reports
• Reputation Low 9,147 reports
• Spam 6,329 reports
• Malware Infrastructure 456 reports
• Reconnaissance 295 reports

Top Affected Countries

• US 49,442 reports
• KR 30,780 reports
• SC 19,239 reports

Most Reported IPs

• 156.228.103.68 155 reports
• 156.228.100.193 154 reports
• 156.228.103.125 151 reports
• 154.216.188.24 150 reports
• 156.251.179.157 150 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS17561 threat data into your security stack with our REST API.

See how we classify and verify threats →