Country
China
Aggregated network and security signals for China, sourced from BGP feeds, CT logs, our scan layer and honeypot network.
ASNs observed
490
last 30 d
Open IPs
4,473,190
last 90 d
Hosting share
33.5%
of open IPs
Threat hits
680
IOC matches
Top ASNs
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 630,636 |
| AS4134 | China Telecom | 308,192 |
| AS45090 | Tencent-CN | 197,193 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 160,749 |
| AS4837 | China Unicom | 118,931 |
| AS55990 | Huawei Cloud(China) | 36,434 |
| AS4812 | — | 24,471 |
| AS4538 | CERNET-CN | 22,580 |
| AS134762 | — | 16,757 |
| AS4808 | China Unicom Beijing Province Network | 14,670 |
| AS137718 | VOLCANO-ENGINE | 12,738 |
| AS23724 | IDC, China Telecommunications Corporation | 12,454 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 7,879 |
| AS4811 | — | 7,251 |
| AS4847 | CNIX-AP | 6,509 |
| AS17816 | CHINA169-GZ | 6,156 |
| AS141679 | — | 5,402 |
| AS135357 | — | 5,193 |
| AS136188 | — | 5,082 |
| AS17621 | China Unicom Shanghai Network | 4,891 |
Top Hosting Providers
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 630,636 |
| AS4134 | China Telecom | 308,192 |
| AS45090 | Tencent-CN | 197,193 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 160,749 |
| AS4837 | China Unicom | 118,931 |
| AS55990 | Huawei Cloud(China) | 36,434 |
| AS4538 | CERNET-CN | 22,580 |
| AS137718 | VOLCANO-ENGINE | 12,738 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 7,879 |
| AS13335 | Cloudflare | 1,536 |
| AS54994 | meteversecloud | 495 |
| AS59078 | Yunify Technologies Inc. | 233 |
| AS4809 | China Telecom / CN2 | 231 |
| AS63631 | Cloudbase | 208 |
| AS31972 | Emagine Concept | 205 |
Top open ports
Top Server headers
| Server | Hosts |
|---|---|
| nginx | 75,702 |
| openresty | 33,700 |
| Tengine | 16,745 |
| Lego Server | 11,562 |
| nginx/1.20.1 | 6,664 |
| Apache | 6,574 |
| nginx/1.24.0 (Ubuntu) | 5,536 |
| nginx/1.18.0 (Ubuntu) | 5,302 |
| Byte-nginx | 5,300 |
| CW | 5,068 |
| Microsoft-IIS/10.0 | 4,807 |
| Microsoft-HTTPAPI/2.0 | 4,457 |
| TencentEdgeOne | 4,086 |
| kngx/1.10.2 | 3,095 |
| AliyunOSS | 3,063 |
Top Attack Sources
| Feed | Category | Matched IPs |
|---|---|---|
| spamhaus-drop | spam | 367 |
| firehol-l1 | abuse | 313 |