AS17789 — CNCGROUP IP network of ShangHai IDC Threat Intelligence

Network Threat Summary

AS17789 (CNCGROUP IP network of ShangHai IDC) has 65,280 malicious IP addresses with 852,816 abuse reports across 1 countries. First activity recorded 2023-07-09, most recent activity 2026-03-20.

Threat Profile: The primary attack categories observed from this network are professional threat, spam, malware c2. This autonomous system is among the most prolific threat sources globally, with an exceptionally high concentration of malicious IP addresses. Affected countries include CN.

Risk Assessment: CRITICAL - This autonomous system is a major source of malicious activity, ranking in the top 1% of threat networks globally. Consider blocking the entire ASN or implementing strict rate limiting.

Top Attack Categories

• Professional Threat 852,576 reports
• Spam 222 reports
• Malware C2 6 reports
• Malicious 6 reports

Top Affected Countries

• CN 852,816 reports

Most Reported IPs

• 42.0.135.97 17 reports
• 42.0.135.193 17 reports
• 42.0.134.157 16 reports
• 42.0.134.149 16 reports
• 42.0.134.92 16 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS17789 threat data into your security stack with our REST API.

See how we classify and verify threats →