AS9829 — National Internet Backbone Threat Intelligence

Network Threat Summary

AS9829 (National Internet Backbone) has 75,621 malicious IP addresses with 402,216 abuse reports across 1 countries. First activity recorded 2022-06-29, most recent activity 2026-04-05.

Threat Profile: The primary attack categories observed from this network are suspicious activity, aggregated threat, severe abuse. This autonomous system is among the most prolific threat sources globally, with an exceptionally high concentration of malicious IP addresses. Affected countries include IN.

Risk Assessment: CRITICAL - This autonomous system is a major source of malicious activity, ranking in the top 1% of threat networks globally. Consider blocking the entire ASN or implementing strict rate limiting.

Top Attack Categories

• Suspicious Activity 239,188 reports
• Aggregated Threat 27,596 reports
• Severe Abuse 26,022 reports
• Malware C2 11,749 reports
• Botnet C2 10,870 reports

Top Affected Countries

• IN 401,808 reports

Most Reported IPs

• 59.98.83.57 509 reports
• 117.216.211.19 454 reports
• 117.247.111.70 436 reports
• 59.98.148.5 406 reports
• 61.2.44.54 391 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS9829 threat data into your security stack with our REST API.

See how we classify and verify threats →