Elevated Risk
Elevated threat level 8/10 for IP 156.232.13.161 from 9 reported incidents.
Behavioral profile indicates cyber threat activity with 89% confidence.
More threatening than 81% of monitored IPs
IP Address
156.232.13.161
IPv4
Public
SC
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Seychelles
Location
YISU CLOUD LTD
ASN 138152
9
Reports
Honeypot
Data Source
Threat Categories
SSH
9
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
25. May 2026
Last Activity
8. June 2026
Recent (7 days)
5 incidents
Reputable Network
This IP is hosted on a network (ASN 138152) with generally good reputation. The ISP YISU CLOUD LTD maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
89%
Verified
Confidence History
25. May 2026 - 8. Jun 2026
89%
Current
Stable
Trend
Security Reports (9)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH | Honeypot | 75% |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 156.232.13.161
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SC
- ASN
- AS138152
- ISP
- YISU CLOUD LTD
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 9
- First Reported
- 25 May 2026
- Last Reported
- 8 Jun 2026, 14:23
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS138152
YISU CLOUD LTD
JP
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
44
Total IPs Monitored
1,800
Total Reports
40.9
Reports per IP
Network Context
This IP address belongs to YISU CLOUD LTD (AS138152), which manages 44 IP addresses in our monitoring system. Out of these, 1,800 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
81
%
Global Threat Ranking
This IP is more threatening than 81% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,698 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
9
avg: 23
--
Network Comparison
Compared against 52 IPs in ASN 138152
Threat Level
8/10
network avg: 7.1
=
Total Reports
9
network avg: 39
--
Network YISU CLOUD LTD has overall threat level 3/10
Geographic Comparison
Compared against 357 IPs in SC
Threat Level
8/10
country avg: 7.3
=
Total Reports
9
country avg: 91
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Jun 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Monday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,375 threat incidents tracked globally • Last 24h: 18,936 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,136 15.5% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.4/10
Avg Threat
91%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
103.143.231.24
10/10
Confidence
98%
Reports
72
Location
HK
HK
103.143.11.168
10/10
Confidence
98%
Reports
66
Location
HK
HK
156.232.13.218
10/10
Confidence
98%
Reports
54
Location
SC
SC
154.92.22.13
10/10
Confidence
98%
Reports
19
Location
HK
HK
103.143.11.150
10/10
Confidence
97%
Reports
61
Location
HK
HK
154.92.23.199
8/10
Confidence
97%
Reports
21
Location
HK
HK
156.227.237.16
8/10
Confidence
97%
Reports
19
Location
JP
JP
103.143.238.100
10/10
Confidence
96%
Reports
104
Location
HK
HK
103.143.231.57
8/10
Confidence
94%
Reports
240
Location
HK
HK
156.227.233.77
10/10
Confidence
94%
Reports
130
Location
JP
JP
103.144.28.85
10/10
Confidence
94%
Reports
90
Location
HK
HK
103.143.231.102
8/10
Confidence
93%
Reports
21
Location
HK
HK
156.227.237.226
8/10
Confidence
93%
Reports
16
Location
JP
JP
156.227.235.173
10/10
Confidence
92%
Reports
9
Location
SC
SC
156.227.232.198
10/10
Confidence
90%
Reports
133
Location
JP
JP
103.143.72.165
10/10
Confidence
81%
Reports
56
Location
HK
HK
156.236.75.188
10/10
Confidence
77%
Reports
78
Location
HK
HK
156.227.237.136
8/10
Confidence
77%
Reports
10
Location
JP
JP
103.143.10.79
10/10
Confidence
76%
Reports
12
Location
HK
HK
156.236.75.64
10/10
Confidence
75%
Reports
82
Location
HK
HK
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
98%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.245.246.50
10/10
Confidence
100%
Reports
68
ISP
VpsQuan L.L.C.
156.232.13.218
10/10
Confidence
98%
Reports
54
ISP
YISU CLOUD LTD
156.238.224.50
10/10
Confidence
98%
Reports
18
ISP
FASTNET DATA INC
156.239.225.149
10/10
Confidence
97%
Reports
115
ISP
Gcc Cloud Techn...
212.11.64.25
8/10
Confidence
97%
Reports
49
ISP
Global-Data Sys...
154.91.170.41
8/10
Confidence
97%
Reports
45
ISP
BitCommand LLC
212.11.64.155
8/10
Confidence
97%
Reports
42
ISP
Global-Data Sys...
193.39.208.26
10/10
Confidence
97%
Reports
27
ISP
Global Connecti...
69.5.189.125
8/10
Confidence
97%
Reports
26
ISP
Global-Data Sys...
156.238.246.218
8/10
Confidence
97%
Reports
24
ISP
COGNETCLOUD
69.5.189.131
8/10
Confidence
97%
Reports
21
ISP
Global-Data Sys...
5.61.209.33
10/10
Confidence
96%
Reports
49
ISP
Amarutu Technol...
156.238.252.133
10/10
Confidence
95%
Reports
125
ISP
FD-298-8796
154.198.162.75
10/10
Confidence
95%
Reports
104
ISP
Scloud Pte Ltd
5.61.209.224
10/10
Confidence
94%
Reports
2,497
ISP
Amarutu Technol...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
152.32.170.55
10/10
Confidence
89%
Reports
2,147
Location
HK
HK
165.227.188.42
8/10
Confidence
89%
Reports
1,540
Location
US
US
165.227.110.45
8/10
Confidence
89%
Reports
1,515
Location
US
US
137.184.112.103
8/10
Confidence
89%
Reports
1,469
Location
US
US
92.63.197.77
8/10
Confidence
89%
Reports
635
Location
UA
UA
45.153.34.32
10/10
Confidence
89%
Reports
622
Location
NL
NL
45.91.64.6
8/10
Confidence
89%
Reports
554
Location
RU
RU
206.189.106.82
8/10
Confidence
89%
Reports
477
Location
NL
NL
184.105.247.252
10/10
Confidence
89%
Reports
439
Location
US
US
64.62.197.152
8/10
Confidence
89%
Reports
420
Location
US
US
65.49.1.212
10/10
Confidence
89%
Reports
365
Location
US
US
185.50.38.135
10/10
Confidence
89%
Reports
267
Location
IR
IR
165.227.18.206
10/10
Confidence
89%
Reports
227
Location
US
US
176.65.149.45
10/10
Confidence
89%
Reports
224
Location
NL
NL
36.111.150.151
10/10
Confidence
89%
Reports
221
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203