Extreme Threat
IP 154.221.23.112 classified at threat level 10/10 with 3 documented attacks.
Advanced threat indicators confirmed with 51% certainty.
More threatening than 87% of monitored IPs
IP Address
154.221.23.112
IPv4
Public
SC
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Seychelles
Location
YISU CLOUD LTD
ASN 142403
3
Reports
Honeypot
Data Source
Threat Categories
Hacking
2
Exploited Host
1
SSH
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
23. May 2026
Last Activity
23. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 142403) with generally good reputation. The ISP YISU CLOUD LTD maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
7/10
High
Confidence Score
39%
Medium Confidence
Confidence History
23. May 2026
51%
Current
Stable
Trend
Security Reports (3)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Exploited Host Hacking | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 154.221.23.112
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SC
- ASN
- AS142403
- ISP
- YISU CLOUD LTD
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 3
- First Reported
- 23 May 2026
- Last Reported
- 23 May 2026, 15:49
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS142403
YISU CLOUD LTD
HK
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
36
Total IPs Monitored
1,493
Total Reports
41.5
Reports per IP
Network Context
This IP address belongs to YISU CLOUD LTD (AS142403), which manages 36 IP addresses in our monitoring system. Out of these, 1,493 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
87
%
Global Threat Ranking
This IP is more threatening than 87% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,737 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
3
avg: 23
--
Network Comparison
Compared against 55 IPs in ASN 142403
Threat Level
10/10
network avg: 7.9
+
Total Reports
3
network avg: 30
--
Network YISU CLOUD LTD has overall threat level 3/10
Geographic Comparison
Compared against 357 IPs in SC
Threat Level
10/10
country avg: 7.3
+
Total Reports
3
country avg: 91
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
23 May 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Saturday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
2
SSH
1
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 15:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.4/10
Avg Threat
89%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
154.83.13.181
10/10
Confidence
100%
Reports
21
Location
HK
HK
103.146.159.14
10/10
Confidence
98%
Reports
59
Location
HK
HK
154.92.17.58
10/10
Confidence
98%
Reports
38
Location
HK
HK
103.100.209.142
10/10
Confidence
98%
Reports
19
Location
HK
HK
154.209.4.195
8/10
Confidence
97%
Reports
50
Location
HK
HK
154.209.4.208
8/10
Confidence
97%
Reports
43
Location
HK
HK
154.221.23.179
10/10
Confidence
97%
Reports
21
Location
HK
HK
39.109.104.252
10/10
Confidence
95%
Reports
107
Location
HK
HK
154.92.15.23
10/10
Confidence
94%
Reports
39
Location
HK
HK
154.83.14.111
10/10
Confidence
93%
Reports
10
Location
SC
SC
154.221.23.232
8/10
Confidence
89%
Reports
9
Location
SC
SC
154.221.28.214
10/10
Confidence
88%
Reports
96
Location
HK
HK
154.221.27.234
10/10
Confidence
87%
Reports
85
Location
HK
HK
154.83.12.193
8/10
Confidence
83%
Reports
11
Location
HK
HK
103.146.159.173
10/10
Confidence
81%
Reports
7
Location
HK
HK
154.211.13.102
10/10
Confidence
81%
Reports
6
Location
SC
SC
154.83.16.160
10/10
Confidence
80%
Reports
7
Location
SC
SC
154.92.17.30
10/10
Confidence
78%
Reports
5
Location
HK
HK
103.100.208.88
8/10
Confidence
77%
Reports
10
Location
HK
HK
154.221.19.162
8/10
Confidence
73%
Reports
14
Location
HK
HK
IPs from the same subnet range, likely same network segment.
3
Related IPs
6/10
Avg Threat
74%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.245.246.50
10/10
Confidence
100%
Reports
68
ISP
VpsQuan L.L.C.
156.232.13.218
10/10
Confidence
98%
Reports
54
ISP
YISU CLOUD LTD
156.238.224.50
10/10
Confidence
98%
Reports
18
ISP
FASTNET DATA INC
156.239.225.149
10/10
Confidence
97%
Reports
115
ISP
Gcc Cloud Techn...
212.11.64.25
8/10
Confidence
97%
Reports
49
ISP
Global-Data Sys...
154.91.170.41
8/10
Confidence
97%
Reports
45
ISP
BitCommand LLC
212.11.64.155
8/10
Confidence
97%
Reports
42
ISP
Global-Data Sys...
193.39.208.26
10/10
Confidence
97%
Reports
27
ISP
Global Connecti...
69.5.189.125
8/10
Confidence
97%
Reports
26
ISP
Global-Data Sys...
156.238.246.218
8/10
Confidence
97%
Reports
24
ISP
COGNETCLOUD
69.5.189.131
8/10
Confidence
97%
Reports
21
ISP
Global-Data Sys...
5.61.209.33
10/10
Confidence
96%
Reports
49
ISP
Amarutu Technol...
156.238.252.133
10/10
Confidence
95%
Reports
125
ISP
FD-298-8796
154.198.162.75
10/10
Confidence
95%
Reports
104
ISP
Scloud Pte Ltd
5.61.209.224
10/10
Confidence
94%
Reports
2,497
ISP
Amarutu Technol...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
51%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
112.12.101.0
10/10
Confidence
51%
Reports
870
Location
CN
CN
165.245.141.230
10/10
Confidence
51%
Reports
390
Location
US
US
142.93.31.95
10/10
Confidence
51%
Reports
139
Location
US
US
57.130.20.252
8/10
Confidence
51%
Reports
127
Location
FR
FR
107.189.5.145
8/10
Confidence
51%
Reports
124
Location
LU
LU
161.97.99.226
10/10
Confidence
51%
Reports
122
Location
FR
FR
66.116.196.162
10/10
Confidence
51%
Reports
122
Location
IN
IN
45.79.67.44
10/10
Confidence
51%
Reports
79
Location
US
US
158.252.108.242
10/10
Confidence
51%
Reports
67
Location
AE
AE
64.227.73.84
10/10
Confidence
51%
Reports
65
Location
NL
NL
134.209.81.84
8/10
Confidence
51%
Reports
50
Location
NL
NL
69.163.140.2
8/10
Confidence
51%
Reports
49
Location
US
US
192.81.210.129
10/10
Confidence
51%
Reports
47
Location
US
US
212.90.120.25
10/10
Confidence
51%
Reports
46
Location
FR
FR
185.220.100.253
8/10
Confidence
51%
Reports
46
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203