# 116.179.32.138 — IP Intelligence Summary 116.179.32.138 is an IPv4 address operated by IRT-UNICOM-CN (AS4837), geolocated to Beijing 100140, China. It belongs to a mobile network with reverse DNS name baiduspider-116-179-32-138.crawl.baidu.com. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/116.179.32.138 - Last updated: 2026-10-07 ## Ownership - Organization: IRT-UNICOM-CN - Network name: UNICOM - Allocated block: 116.128.0.0/10 - ASN: AS4837 (https://ipdebrief.com/asn/4837) - Regional registry: APNIC ## Location - City: Beijing 100140 - Region: P.R.China - Country: China - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: yes - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - baiduspider-116-179-32-138.crawl.baidu.com - Forward-confirmed: yes ## Analyst narrative \# INTELLIGENCE BRIEFING: 116.179.32.138 **Classification:** LOW RISK / BENIGN INFRASTRUCTURE **Date:** 2026-07-22 **Analysis Reference:** IPDebrief Intelligence Platform \--- \## EXECUTIVE SUMMARY IP 116.179.32.138 is classified as LOW RISK with an overall risk score of 25/100. The address resolves to Baidu search infrastructure (baiduspider-116-179-32-138.crawl.baidu.com) and represents legitimate crawler activity. No malicious threat indicators detected. No immediate action required for SOC monitoring. \--- \## TECHNICAL PROFILE \### Network Classification \- **IP Address:** 116.179.32.138/32 \- **Risk Score:** 25 (Low Risk) \- **Provider Score:** 0 \- **Authority Score:** 0 \- **Stability Score:** 0 \- **Network Role:** Firewalled / No Services \- **Cloud/CDN/VPN:** No \- **Infrastructure Type:** Unknown \### DNS Resolution \- **PTR Hostname:** baiduspider-116-179-32-138.crawl.baidu.com \- **Forward Resolution:** Confirmed \- **Forward Hostnames:** baiduspider-116-179-32-138.crawl.baidu.com \- **Domain:** baidu.com \- **Email Authentication:** SPF and DMARC records present \### Control Plane Data \- **Origin ASN:** 4837 \- **BGP Prefix:** 116.179.0.0/16 \- **RPKI State:** Valid \- **DNSSEC:** Valid \- **DNSBL Listings:** 1 of 8 total lists \- **Operator Score:** 0.2609 (Basic) \--- \## THREAT INTELLIGENCE \### Threat Indicators \- **Is Tor Exit Node:** No \- **Is Known Attacker:** No \- **Is Spam Source:** No \- **Abuse Confidence Score:** Not applicable \- **Threat Feeds:** None \- **Known Campaigns:** None \- **Blacklist Count:** 0 (current profile) \### Service Analysis \- **Open Ports:** None detected \- **TLS Certificate:** No certificate found \- **HTTP Title:** No response \- **Server Banner:** No banner detected \--- \## NEIGHBORHOOD ANALYSIS \### Subnet Context \- **Subnet:** 116.179.32.0/24 \- **Total Siblings:** 186 \- **Active Siblings:** 36 \- **Threat Siblings:** 22 \- **Abuse Density:** 0 (current snapshot) \- **Classification:** Mostly Clean \### Risk Distribution in Subnet \- **High Risk:** 0 IPs \- **Medium Risk:** 36 IPs \- **Low Risk:** 35 IPs \### Notable Neighbors Multiple neighboring IPs detected with elevated risk scores (50/100) and authority scores (60/100), including: \- 116.179.32.12-16 (riskScore: 50, authorityScore: 60) \--- \## OBSERVATION HISTORY \### Signal Timeline (11 Total Observations) **Most Recent Observation (2026-07-22):** \- **Subnet Classification:** Mostly Clean \- **Abuse Density:** 0.1183 (11.83%) \- **Inherited Risk:** 4/10 \- **Confidence Level:** 0.75 **Key Historical Signals:** \- **DNS Blacklist:** 1 listing detected (max severity: high) among 8 total lists \- **Operator Classification:** Basic (raw score: 0.3) \- **Certificate Analysis:** 0 certificates resolved via crt-sh \- **Ownership Changes:** 0 events recorded \- **Threat Persistence:** 0 days observed **Temporal Indicators:** \- **Is Persistently Malicious:** No \- **Threat Observation Count:** 0 \- **Threat Persistence Days:** 0 \--- \## RELATIONSHIP MAPPING \### Identified Associations \- **DNS Association:** baiduspider-116-179-32-138.crawl.baidu.com (repeated) \- **Organization:** Baidu (implied via hostname pattern) \### Campaign Correlation \- **Campaign Likelihood:** None \- **Certificate Matches:** 0 \- **Banner Matches:** 0 \- **Correlated IPs:** 0 \--- \## SECURITY RECOMMENDATIONS \### Current Status No immediate action required. The IP demonstrates benign characteristics consistent with Baidu search crawler infrastructure. \### Recommended Actions \- **Monitoring:** Continue standard traffic monitoring \- **Firewall Rules:** Not recommended (risk score below action threshold) \- **Threat Hunting:** No active investigation needed \### Mitigation Context The IP resolves to a recognized search engine crawler hostname with valid DNSSEC and email authentication. While 22 threat-sibling IPs exist in the /24 subnet, the target IP itself shows no malicious behavior indicators. \--- \## CONCLUSION IP 116.179.32.138 represents legitimate Baidu search crawler infrastructure. The address maintains a low-risk profile (25/100) with no evidence of malicious activity. DNS resolution to baiduspider confirms expected behavior for search engine crawlers. The subnet shows mixed risk distribution but no direct correlation to the target IP. **Recommendation:** Allow traffic; no security intervention required. ## Nearby addresses - 116.179.32.12 (https://ipdebrief.com/116.179.32.12) - 116.179.32.13 (https://ipdebrief.com/116.179.32.13) - 116.179.32.14 (https://ipdebrief.com/116.179.32.14) - 116.179.32.15 (https://ipdebrief.com/116.179.32.15) - 116.179.32.16 (https://ipdebrief.com/116.179.32.16) - 116.179.32.17 (https://ipdebrief.com/116.179.32.17) - 116.179.32.18 (https://ipdebrief.com/116.179.32.18) - 116.179.32.19 (https://ipdebrief.com/116.179.32.19) - 116.179.32.20 (https://ipdebrief.com/116.179.32.20) - 116.179.32.21 (https://ipdebrief.com/116.179.32.21) - 116.179.32.22 (https://ipdebrief.com/116.179.32.22) - 116.179.32.23 (https://ipdebrief.com/116.179.32.23) --- Source: IPDebrief, "116.179.32.138 IP intelligence", https://ipdebrief.com/116.179.32.138, updated 2026-10-07. Assessments are probabilistic.