AS4837 — CHINA UNICOM China169 Backbone Threat Intelligence

Network Threat Summary

AS4837 (CHINA UNICOM China169 Backbone) has 176,133 malicious IP addresses with 3,247,366 abuse reports across 3 countries. First activity recorded 2022-06-27, most recent activity 2026-04-05.

Threat Profile: The primary attack categories observed from this network are suspicious activity, severe abuse, botnet c2. This autonomous system is among the most prolific threat sources globally, with an exceptionally high concentration of malicious IP addresses. Affected countries include CN, AF, RU.

Risk Assessment: CRITICAL - This autonomous system is a major source of malicious activity, ranking in the top 1% of threat networks globally. Consider blocking the entire ASN or implementing strict rate limiting.

Top Attack Categories

• Suspicious Activity 2,398,201 reports
• Severe Abuse 209,013 reports
• Botnet C2 162,269 reports
• Aggregated Threat 83,866 reports
• Malware C2 60,811 reports

Top Affected Countries

• CN 3,244,853 reports
• AF 469 reports
• RU 4 reports

Most Reported IPs

• 116.169.212.7 6,830 reports
• 58.22.95.25 1,196 reports
• 124.67.254.109 1,196 reports
• 222.132.26.84 1,130 reports
• 211.91.60.69 1,079 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS4837 threat data into your security stack with our REST API.

See how we classify and verify threats →