Country
China
Aggregated network and security signals for China, sourced from BGP feeds, CT logs, our scan layer and honeypot network.
ASNs observed
488
last 30 d
Open IPs
4,382,640
last 90 d
Hosting share
34.4%
of open IPs
Threat hits
914
IOC matches
Top ASNs
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 630,407 |
| AS4134 | China Telecom | 313,658 |
| AS45090 | Tencent-CN | 194,738 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 162,946 |
| AS4837 | China Unicom | 121,799 |
| AS55990 | Huawei Cloud(China) | 37,334 |
| AS4812 | — | 24,973 |
| AS4538 | CERNET-CN | 23,033 |
| AS134762 | — | 16,758 |
| AS4808 | China Unicom Beijing Province Network | 14,991 |
| AS137718 | VOLCANO-ENGINE | 13,030 |
| AS23724 | IDC, China Telecommunications Corporation | 12,773 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 8,058 |
| AS4811 | — | 7,416 |
| AS4847 | CNIX-AP | 6,585 |
| AS17816 | CHINA169-GZ | 6,354 |
| AS141679 | — | 5,500 |
| AS135357 | — | 5,221 |
| AS136188 | — | 5,162 |
| AS17621 | China Unicom Shanghai Network | 5,036 |
Top Hosting Providers
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 630,407 |
| AS4134 | China Telecom | 313,658 |
| AS45090 | Tencent-CN | 194,738 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 162,946 |
| AS4837 | China Unicom | 121,799 |
| AS55990 | Huawei Cloud(China) | 37,334 |
| AS4538 | CERNET-CN | 23,033 |
| AS137718 | VOLCANO-ENGINE | 13,030 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 8,058 |
| AS13335 | Cloudflare | 1,536 |
| AS54994 | meteversecloud | 502 |
| AS59078 | Yunify Technologies Inc. | 250 |
| AS4809 | China Telecom / CN2 | 230 |
| AS63631 | Cloudbase | 220 |
| AS31972 | Emagine Concept | 205 |
Top open ports
Top Server headers
| Server | Hosts |
|---|---|
| nginx | 64,034 |
| openresty | 29,429 |
| Tengine | 14,189 |
| Lego Server | 9,998 |
| Apache | 5,541 |
| nginx/1.20.1 | 5,520 |
| nginx/1.24.0 (Ubuntu) | 4,704 |
| Byte-nginx | 4,556 |
| nginx/1.18.0 (Ubuntu) | 4,449 |
| CW | 4,317 |
| Microsoft-IIS/10.0 | 3,972 |
| Microsoft-HTTPAPI/2.0 | 3,734 |
| TencentEdgeOne | 3,566 |
| kngx/1.10.2 | 2,684 |
| ESA | 2,628 |
Top Attack Sources
| Feed | Category | Matched IPs |
|---|---|---|
| spamhaus-drop | spam | 494 |
| firehol-l1 | abuse | 420 |