# 116.179.32.158 — IP Intelligence Summary

116.179.32.158 is an IPv4 address operated by Xiaomin Zhou (AS4837), geolocated to Beijing 100140, China. It belongs to a mobile network with reverse DNS name baiduspider-116-179-32-158.crawl.baidu.com. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/116.179.32.158
- Last updated: 2026-10-07

## Ownership

- Organization: Xiaomin Zhou
- Network name: UNICOM
- Allocated block: 116.128.0.0/10
- ASN: AS4837 (https://ipdebrief.com/asn/4837)
- Regional registry: APNIC

## Location

- City: Beijing 100140
- Region: P.R.China
- Country: China
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- baiduspider-116-179-32-158.crawl.baidu.com
- Forward-confirmed: yes

## Analyst narrative

\# IP Intelligence Briefing: 116.179.32.158

\## Executive Summary

IP address 116.179.32.158 is a low-risk infrastructure endpoint associated with China Unicom's mobile network and Baidu's crawler infrastructure. No malicious indicators detected. Recommended action: monitor but no blocking required.

\---

\## Risk Assessment

| Metric | Value |

|--------|-------|

| Risk Score | 25/100 |

| Reputation | Low Risk |

| Abuse Confidence | None |

| Blacklist Count | 0 |

| Known Attacker | No |

| Spam Source | No |

\---

\## Ownership & Geolocation

\- **ASN:** 4837 (IRT-UNICOM-CN)

\- **Organization:** UNICOM (China United Network Communications)

\- **Country:** China (CN)

\- **City:** Beijing 100140

\- **CIDR Block:** 116.128.0.0/10

\- **Connection Type:** Mobile (China Unicom LTE/5G, MCC: 460, MNC: 01)

\---

\## DNS & Network Services

| Attribute | Value |

|-----------|-------|

| Reverse DNS | baiduspider-116-179-32-158.crawl.baidu.com |

| Forward Resolution | Confirmed |

| Hosted Domain | baidu.com |

| Open Ports | None detected |

| TLS Certificate | None |

| HTTP Services | None |

| Service Purpose | Firewalled / No Services |

\---

\## Threat Indicators

\- **Tor Exit Node:** No

\- **Known Campaigns:** None

\- **Threat Feeds:** None

\- **Persistence:** No persistent malicious activity observed

\- **Owner Stability:** Stable (0 ownership changes)

\---

\## Historical Observations (14 total)

Recent activity observed from 2026-07-24. Signal history indicates:

\- 0 threat observations recorded

\- Geographic consensus confirmed (CN)

\- Operator classification: Basic (score: 0.2609)

\- No escalation in risk profile over observation period

\---

\## Network Neighborhood Analysis (/24 Subnet)

\- **Total Siblings:** 100 IPs in 116.179.32.0/24

\- **Abuse Density:** 0%

\- **Risk Distribution:** 0 high / 40 medium / 50 low

\- **Threat Siblings:** 0

\- **Inherited Risk:** 0

Several neighboring IPs (116.179.32.12–16) show moderate risk scores (50), but these are infrastructure-level endpoints without confirmed malicious activity.

\---

\## Relationship Graph

\- **Network Association:** UNICOM (same network)

\- **DNS Association:** baiduspider-116-179-32-158.crawl.baidu.com

\- **Control Plane:** Origin ASN 4837, BGP prefix 116.179.0.0/16

\- **Route Stability:** Unstable (0 route changes in 30 days)

\---

\## Recommended Actions

**Security Operations:**

1. **Monitor:** Continue passive monitoring; no immediate action required

2. **Firewall Rules:** None recommended

3. **Classification:** Legitimate infrastructure (Baidu crawler on China Unicom mobile network)

**Context:** This IP represents Baidu's web crawler infrastructure operating from China Unicom's mobile network. The hostname pattern (baiduspider-*), absence of open ports, and association with established Baidu domain confirm legitimate spider activity. No blocking or filtering actions are warranted.

\---

\## Confidence Metrics

\- **Observation Confidence:** 0.85 (ownership), 0.52 (geolocation)

\- **DNS Forward Confirmation:** Yes

\- **Data Sufficiency:** 0.6667 (4 of 6 dimensions covered)

\- **GeoValidation:** Plausible (distance-based RRT validation pending)

## Nearby addresses

- 116.179.32.12 (https://ipdebrief.com/116.179.32.12)
- 116.179.32.13 (https://ipdebrief.com/116.179.32.13)
- 116.179.32.14 (https://ipdebrief.com/116.179.32.14)
- 116.179.32.15 (https://ipdebrief.com/116.179.32.15)
- 116.179.32.16 (https://ipdebrief.com/116.179.32.16)
- 116.179.32.17 (https://ipdebrief.com/116.179.32.17)
- 116.179.32.18 (https://ipdebrief.com/116.179.32.18)
- 116.179.32.19 (https://ipdebrief.com/116.179.32.19)
- 116.179.32.20 (https://ipdebrief.com/116.179.32.20)
- 116.179.32.21 (https://ipdebrief.com/116.179.32.21)
- 116.179.32.22 (https://ipdebrief.com/116.179.32.22)
- 116.179.32.23 (https://ipdebrief.com/116.179.32.23)

---

Source: IPDebrief, "116.179.32.158 IP intelligence", https://ipdebrief.com/116.179.32.158, updated 2026-10-07. Assessments are probabilistic.
