116.179.32.150📋 Copy

# IP Intelligence Briefing: 116.179.32.150

## Executive Summary

IP 116.179.32.150 is a moderate-risk Chinese IP address (risk score: 50) associated with China Unicom's network infrastructure. The IP resolves to Baidu's crawler infrastructure and exhibits characteristics consistent with web crawling operations. While the IP shows some DNSBL listings, no active threat indicators or malicious campaigns were detected.

## Network Identity & Ownership

• Organization: IRT-UNICOM-CN (China Unicom)
• AS Number: 4837
• Network Block: 116.128.0.0/10
• Geolocation: Beijing, China (Jinrongjie, Xicheng District)
• Mobile Carrier: China United Network Communications (LTE/5G)

## Technical Profile

• Reputation: Moderate Risk (score: 50)
• DNS PTR: baiduspider-116-179-32-150.crawl.baidu.com
• Forward Resolution: Confirmed (baidu.com domain)
• Email Authentication: SPF and DMARC records present
• Services: No open ports detected; service purpose classified as "Firewalled / No Services"
• Network Classifications: Not Tor, VPN, CDN, proxy, or hosting infrastructure; classified as mobile

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0 threat feeds
• Campaign Associations: None detected
• Threat Persistence: Not persistently malicious

## Control Plane Analysis

• BGP Prefix: 116.179.0.0/16
• Route Stability: False
• DNSBL Listings: 2 of 8 lists
• RPKI State: Not validated
• IRR Consistency: Not checked

## Observation History

Seventeen signals have been observed across multiple data sources. The IP has shown geolocation signals consistently pointing to China. No ownership changes or threat persistence patterns were identified. The most recent observations (2026-07-23) confirm continued association with Chinese network infrastructure.

## Neighborhood Context (116.179.32.0/24)

• Abuse Density: 11.83%
• Classification: Mostly clean
• Total Siblings: 186
• Active Siblings: 36
• Threat Siblings: 22
• Risk Distribution: 0 high, 37 medium, 37 low

The subnet exhibits moderate abuse density with a balanced risk distribution across neighbor IPs.

## Relationships

• Network Association: UNICOM
• DNS Associations: baiduspider-116-179-32-150.crawl.baidu.com (Baidu crawler infrastructure)
• Multiple relationships confirmed to the same network and hostname entities

## Recommended Actions

Given the moderate risk profile and DNSBL listings, the following firewall rules are recommended:

## Analyst Notes

This IP appears to be part of Baidu's crawler infrastructure operating through China Unicom's mobile network. The moderate risk score (50) and DNSBL listings suggest the IP may have been involved in past scanning or policy violations. However, the absence of active threat indicators and the association with a major search engine's crawler infrastructure indicate this is likely legitimate web crawling activity with some historical risk factors.

Classification: Moderate Risk — Monitor with blocking recommended for inbound traffic.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.