Country
China
Aggregated network and security signals for China, sourced from BGP feeds, CT logs, our scan layer and honeypot network.
ASNs observed
490
last 30 d
Open IPs
4,435,579
last 90 d
Hosting share
32.6%
of open IPs
Threat hits
680
IOC matches
Top ASNs
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 612,547 |
| AS4134 | China Telecom | 296,729 |
| AS45090 | Tencent-CN | 188,600 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 155,074 |
| AS4837 | China Unicom | 112,564 |
| AS55990 | Huawei Cloud(China) | 34,794 |
| AS4812 | — | 23,426 |
| AS4538 | CERNET-CN | 21,549 |
| AS134762 | — | 16,756 |
| AS4808 | China Unicom Beijing Province Network | 14,008 |
| AS137718 | VOLCANO-ENGINE | 12,179 |
| AS23724 | IDC, China Telecommunications Corporation | 11,854 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 7,531 |
| AS4811 | — | 6,928 |
| AS4847 | CNIX-AP | 6,228 |
| AS17816 | CHINA169-GZ | 5,843 |
| AS135357 | — | 5,191 |
| AS141679 | — | 5,161 |
| AS136188 | — | 4,950 |
| AS17621 | China Unicom Shanghai Network | 4,674 |
Top Hosting Providers
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 612,547 |
| AS4134 | China Telecom | 296,729 |
| AS45090 | Tencent-CN | 188,600 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 155,074 |
| AS4837 | China Unicom | 112,564 |
| AS55990 | Huawei Cloud(China) | 34,794 |
| AS4538 | CERNET-CN | 21,549 |
| AS137718 | VOLCANO-ENGINE | 12,179 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 7,531 |
| AS13335 | Cloudflare | 1,536 |
| AS54994 | meteversecloud | 491 |
| AS59078 | Yunify Technologies Inc. | 223 |
| AS4809 | China Telecom / CN2 | 218 |
| AS31972 | Emagine Concept | 205 |
| AS63631 | Cloudbase | 203 |
Top open ports
Top Server headers
| Server | Hosts |
|---|---|
| nginx | 70,837 |
| openresty | 31,893 |
| Tengine | 15,678 |
| Lego Server | 10,915 |
| nginx/1.20.1 | 6,217 |
| Apache | 6,118 |
| nginx/1.24.0 (Ubuntu) | 5,199 |
| Byte-nginx | 4,986 |
| nginx/1.18.0 (Ubuntu) | 4,931 |
| CW | 4,740 |
| Microsoft-IIS/10.0 | 4,457 |
| Microsoft-HTTPAPI/2.0 | 4,136 |
| TencentEdgeOne | 3,848 |
| kngx/1.10.2 | 2,935 |
| ESA | 2,856 |
Top Attack Sources
| Feed | Category | Matched IPs |
|---|---|---|
| spamhaus-drop | spam | 367 |
| firehol-l1 | abuse | 313 |