China (CN) Threat Intelligence

CN

China has 263,252 malicious IP addresses with 13,898,758 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, email abuse, web attack, rdp bruteforce. Top attacking networks: Chinanet (84,685 IPs), CHINA UNICOM China169 Backbone (53,534 IPs), None (38,930 IPs). Data collected since 2022-07-02, last activity 2026-04-16.

Threat Assessment: China is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are ssh bruteforce, generic bruteforce, email abuse. The majority of threats originate from networks operated by Chinanet and CHINA UNICOM China169 Backbone.

Total Reports
13,898,758
Unique IPs
263,252
First Seen
2022-07-02
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 12,029
Generic Bruteforce 1,238
Email Abuse 404
Web Attack 397
Rdp Bruteforce 164

Top Attacking Networks

AS4134 Chinanet
84,685 IPs
AS4837 CHINA UNICOM China169 Backbone
53,534 IPs
AS0 None
38,930 IPs

Most Reported IPs in China

58.17.128.7 346 reports
124.163.255.210 295 reports
223.221.36.42 265 reports
124.251.110.186 261 reports
14.103.247.214 255 reports

Access this data via API

Get China threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/CN

View full API documentation

See how we classify and verify threats →

Check any IP from China

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS4134 Intelligence AS4837 Intelligence AS0 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...