Country
China
Aggregated network and security signals for China, sourced from BGP feeds, CT logs, our scan layer and honeypot network.
ASNs observed
490
last 30 d
Open IPs
4,402,424
last 90 d
Hosting share
34.9%
of open IPs
Threat hits
914
IOC matches
Top ASNs
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 640,362 |
| AS4134 | China Telecom | 319,379 |
| AS45090 | Tencent-CN | 199,161 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 165,796 |
| AS4837 | China Unicom | 124,871 |
| AS55990 | Huawei Cloud(China) | 38,156 |
| AS4812 | — | 25,476 |
| AS4538 | CERNET-CN | 23,549 |
| AS134762 | — | 16,759 |
| AS4808 | China Unicom Beijing Province Network | 15,308 |
| AS137718 | VOLCANO-ENGINE | 13,320 |
| AS23724 | IDC, China Telecommunications Corporation | 13,019 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 8,228 |
| AS4811 | — | 7,621 |
| AS4847 | CNIX-AP | 6,717 |
| AS17816 | CHINA169-GZ | 6,509 |
| AS141679 | — | 5,605 |
| AS136188 | — | 5,233 |
| AS135357 | — | 5,222 |
| AS17621 | China Unicom Shanghai Network | 5,164 |
Top Hosting Providers
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 640,362 |
| AS4134 | China Telecom | 319,379 |
| AS45090 | Tencent-CN | 199,161 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 165,796 |
| AS4837 | China Unicom | 124,871 |
| AS55990 | Huawei Cloud(China) | 38,156 |
| AS4538 | CERNET-CN | 23,549 |
| AS137718 | VOLCANO-ENGINE | 13,320 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 8,228 |
| AS13335 | Cloudflare | 1,536 |
| AS54994 | meteversecloud | 503 |
| AS59078 | Yunify Technologies Inc. | 252 |
| AS4809 | China Telecom / CN2 | 231 |
| AS63631 | Cloudbase | 229 |
| AS31972 | Emagine Concept | 207 |
Top open ports
Top Server headers
| Server | Hosts |
|---|---|
| nginx | 66,704 |
| openresty | 30,329 |
| Tengine | 14,765 |
| Lego Server | 10,329 |
| nginx/1.20.1 | 5,770 |
| Apache | 5,752 |
| nginx/1.24.0 (Ubuntu) | 4,899 |
| Byte-nginx | 4,725 |
| nginx/1.18.0 (Ubuntu) | 4,629 |
| CW | 4,498 |
| Microsoft-IIS/10.0 | 4,167 |
| Microsoft-HTTPAPI/2.0 | 3,872 |
| TencentEdgeOne | 3,672 |
| kngx/1.10.2 | 2,775 |
| ESA | 2,726 |
Top Attack Sources
| Feed | Category | Matched IPs |
|---|---|---|
| spamhaus-drop | spam | 494 |
| firehol-l1 | abuse | 420 |