116.179.32.197
116.179.32.197 is an IPv4 address operated by IRT-UNICOM-CN (AS4837), geolocated to Beijing 100140, China. It belongs to a mobile network with reverse DNS name baiduspider-116-179-32-197.crawl.baidu.com. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 116.179.32.197
Classification: Moderate Risk | Risk Score: 50 | Status: Active Observation
---
## Ownership & Infrastructure
| Attribute | Value |
|---|---|
| ASN | 4837 (IRT-UNICOM-CN) |
| Organization | UNICOM (China United Network Communications) |
| Network Block | 116.128.0.0/10 |
| Country | China (CN) |
| Region | Beijing |
| Mobile Carrier | China Unicom (LTE/5G, MCC: 460, MNC: 01) |
---
## DNS & Service Profile
| Attribute | Value |
|---|---|
| PTR Hostname | baiduspider-116-179-32-197.crawl.baidu.com |
| Forward Resolution | baidu.com (1 record) |
| Services | Firewalled / No Services Detected |
| Open Ports | None |
| TLS Certificate | None |
| DNSSEC Valid | Yes |
Analysis: The IP resolves to a Baidu search crawler hostname (baiduspider). However, no active HTTP services are detected, and the IP is classified as a mobile connection with no open ports.
---
## Threat Indicators
| Indicator | Status |
|---|---|
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Abuse Confidence Score | Not Available |
| Blacklist Count | 0 |
| DNSBL Listed | 2 of 8 lists |
| Known Campaigns | None |
| Threat Feeds | None |
---
## Neighborhood Analysis
Subnet: 116.179.32.0/24
- Total Neighbors: 100
- Abuse Density: 0%
- Risk Distribution: High (0) | Medium (35) | Low (35)
- Threat Siblings: 0
Observation: The /24 subnet shows balanced risk distribution with no high-risk siblings. Abuse density is minimal.
---
## Relationship Graph
- Network: UNICOM (Same Network)
- Hostname Association: baiduspider-116-179-32-197.crawl.baidu.com (DNS Association)
---
## Historical Observations
| Metric | Value |
|---|---|
| Total Observations | 17 |
| Threat Observation Count | 1 |
| Threat Persistence Days | 0 |
| Is Persistently Malicious | No |
| Recent Activity | 2026-07-22 |
Observation Pattern: 17 signals observed on 2026-07-22, including geolocation, ownership, and operator score signals. No persistent malicious behavior detected.
---
## Recommended Security Actions
Based on risk profile (Score: 50), the following rules are recommended:
| Platform | Rule |
|---|---|
| iptables | `iptables -A INPUT -s 116.179.32.197 -j DROP` |
| nftables | `nft add rule inet filter input ip saddr 116.179.32.197 drop` |
| nginx | `deny 116.179.32.197;` |
| pfSense | `116.179.32.197/32` |
| Cloudflare WAF | Block (expression: `ip.src eq 116.179.32.197`) |
| AWS WAF | IP Set: 116.179.32.197/32 |
Note: These recommendations are probabilistic and should be combined with additional context before enforcement.
---
## Intelligence Summary
IP 116.179.32.197 is a China Unicom mobile connection associated with Baidu's crawler infrastructure. The IP is flagged as moderate risk (50) and appears on 2 DNSBLs, but lacks confirmed malicious indicators. The hostname association (baiduspider) suggests legitimate search engine crawler activity, though the absence of open services and presence on DNSBLs warrants monitoring. The /24 subnet demonstrates low abuse density with balanced risk distribution.
SOC Recommendation: Monitor for anomalous outbound connections from this IP to internal resources. Consider allowing inbound traffic only if legitimate Baidu crawler activity is confirmed for your use case. Current risk level does not require immediate blocking if operational requirements permit.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-UNICOM-CN |
| ASN | AS4837 |
| Network Name | UNICOM |
| CIDR Block | 116.128.0.0/10 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | baiduspider-116-179-32-197.crawl.baidu.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | baiduspider-116-179-32-197.crawl.baidu.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS4837 |
| Network Prefix | 116.179.0.0/16 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 14% | 1 | 3 |
| geolocation | 12% | 2 | 2 |
| Overall | 13% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:20:39 UTC |
| Last Seen | 2026-10-07 11:31:41 UTC |
| Profile Built | 2026-10-07 11:31:59 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 116.179.32.197
Who owns the IP address 116.179.32.197?
116.179.32.197 is registered to IRT-UNICOM-CN. The address falls within the 116.128.0.0/10 network block. Registration is held at APNIC.
Where is 116.179.32.197 located?
Geolocation data places 116.179.32.197 in Beijing 100140, P.R.China, China. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 116.179.32.197 malicious or safe?
116.179.32.197 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 116.179.32.197?
The reverse DNS (PTR) record for 116.179.32.197 is baiduspider-116-179-32-197.crawl.baidu.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 116.179.32.197 a VPN, proxy, or data center address?
116.179.32.197 is classified as a mobile network based on network ownership and behavioural analysis.