Country
China
Aggregated network and security signals for China, sourced from BGP feeds, CT logs, our scan layer and honeypot network.
ASNs observed
489
last 30 d
Open IPs
4,394,026
last 90 d
Hosting share
34.7%
of open IPs
Threat hits
680
IOC matches
Top ASNs
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 636,525 |
| AS4134 | China Telecom | 317,004 |
| AS45090 | Tencent-CN | 197,337 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 164,653 |
| AS4837 | China Unicom | 123,660 |
| AS55990 | Huawei Cloud(China) | 37,803 |
| AS4812 | — | 25,254 |
| AS4538 | CERNET-CN | 23,351 |
| AS134762 | — | 16,758 |
| AS4808 | China Unicom Beijing Province Network | 15,169 |
| AS137718 | VOLCANO-ENGINE | 13,207 |
| AS23724 | IDC, China Telecommunications Corporation | 12,917 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 8,164 |
| AS4811 | — | 7,550 |
| AS4847 | CNIX-AP | 6,662 |
| AS17816 | CHINA169-GZ | 6,448 |
| AS141679 | — | 5,572 |
| AS135357 | — | 5,221 |
| AS136188 | — | 5,202 |
| AS17621 | China Unicom Shanghai Network | 5,103 |
Top Hosting Providers
| ASN | Name | Open IPs |
|---|---|---|
| AS37963 | Alibaba (China) | 636,525 |
| AS4134 | China Telecom | 317,004 |
| AS45090 | Tencent-CN | 197,337 |
| AS9808 | China Mobile Communications Group Co., Ltd. | 164,653 |
| AS4837 | China Unicom | 123,660 |
| AS55990 | Huawei Cloud(China) | 37,803 |
| AS4538 | CERNET-CN | 23,351 |
| AS137718 | VOLCANO-ENGINE | 13,207 |
| AS38365 | Baidu Netcom Science and Technology Co., Ltd. | 8,164 |
| AS13335 | Cloudflare | 1,536 |
| AS54994 | meteversecloud | 503 |
| AS59078 | Yunify Technologies Inc. | 250 |
| AS4809 | China Telecom / CN2 | 230 |
| AS63631 | Cloudbase | 228 |
| AS31972 | Emagine Concept | 207 |
Top open ports
Top Server headers
| Server | Hosts |
|---|---|
| nginx | 65,715 |
| openresty | 29,956 |
| Tengine | 14,541 |
| Lego Server | 10,179 |
| nginx/1.20.1 | 5,673 |
| Apache | 5,659 |
| nginx/1.24.0 (Ubuntu) | 4,837 |
| Byte-nginx | 4,654 |
| nginx/1.18.0 (Ubuntu) | 4,549 |
| CW | 4,437 |
| Microsoft-IIS/10.0 | 4,093 |
| Microsoft-HTTPAPI/2.0 | 3,819 |
| TencentEdgeOne | 3,628 |
| kngx/1.10.2 | 2,737 |
| ESA | 2,687 |
Top Attack Sources
| Feed | Category | Matched IPs |
|---|---|---|
| spamhaus-drop | spam | 367 |
| firehol-l1 | abuse | 313 |