Autonomous system
AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone
Mobile DROP-listed space APNIC
Summary
China Unicom (China169)
isp eyeball backbone
China Unicom's China169 backbone (CHINA169-BACKBONE) — the second of China's big state-owned carriers, serving fixed broadband especially in the north.
What it's used for
- Fixed-line broadband and backbone connectivity for a very large subscriber base across China.
Notable
- State-owned "eyeball" network; international traffic is subject to China's national filtering.
- Together with China Telecom (AS4134) and China Mobile (AS9808), it carries the bulk of Chinese consumer internet.
Interesting
- China Unicom historically dominated the northern provinces while China Telecom led the south — a split that still shapes domestic routing.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 3 exchanges in 3 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| DE-CIX Frankfurt | Frankfurt, Germany | 80.81.195.58 |
| LINX LON1 | London, United Kingdom | 195.66.227.72 |
| AMS-IX Amsterdam | Amsterdam, Netherlands | 80.249.211.239 |
Transit providers
30 upstream, 94 downstream and 204 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 3,753 prefixes · 57.27M addresses IPv6 2,149 prefixes
| Country | Name | Prefixes |
|---|---|---|
| CN | China | 5,902 |
Registry
Allocation record
- Registry
- APNIC
- Handle
AS4837- Registry name
- CHINA169-Backbone
- Abuse contact
- hqs-ipabuse@chinaunicom.cn
- Registered
- 2008-09-04
- Last changed
- 2024-02-06
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 97% valid · 2,104 valid, 57 with no ROA 5 RPKI-invalid
- ROAs
- 2,273 authorising AS4837
- ASPA
- no ASPA record
- IRR
- 96% registered · 2,083 of 2,166 announcements 4 other origin
- Route objects
- 2,813 naming AS4837
Reputation
Classification and threat
Mobile Cellular carrier. Addresses are shared by many handsets via CGNAT.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
1 DROP match Announced space overlapping the DROP prefix list.
| Announced | DROP entry | Record |
|---|---|---|
| 180.178.252.0/22 | 180.178.192.0/18 | SBL240529 |
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 440 networks and 1,773 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
20 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
112.80.50.138 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
119.116.159.217 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
123.12.90.227 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
171.120.88.137 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
218.26.159.254 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
220.250.44.62 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
36.249.156.117 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
36.249.156.122 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
36.249.156.159 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
36.249.156.178 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
Showing the first 10 of 20.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere