# 116.179.32.197 — IP Intelligence Summary

116.179.32.197 is an IPv4 address operated by IRT-UNICOM-CN (AS4837), geolocated to Beijing 100140, China. It belongs to a mobile network with reverse DNS name baiduspider-116-179-32-197.crawl.baidu.com. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/116.179.32.197
- Last updated: 2026-10-07

## Ownership

- Organization: IRT-UNICOM-CN
- Network name: UNICOM
- Allocated block: 116.128.0.0/10
- ASN: AS4837 (https://ipdebrief.com/asn/4837)
- Regional registry: APNIC

## Location

- City: Beijing 100140
- Region: P.R.China
- Country: China
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- baiduspider-116-179-32-197.crawl.baidu.com
- Forward-confirmed: yes

## Analyst narrative

\# IP Intelligence Briefing: 116.179.32.197

**Classification:** Moderate Risk | **Risk Score:** 50 | **Status:** Active Observation

\---

\## Ownership & Infrastructure

| Attribute | Value |

|-----------|-------|

| ASN | 4837 (IRT-UNICOM-CN) |

| Organization | UNICOM (China United Network Communications) |

| Network Block | 116.128.0.0/10 |

| Country | China (CN) |

| Region | Beijing |

| Mobile Carrier | China Unicom (LTE/5G, MCC: 460, MNC: 01) |

\---

\## DNS & Service Profile

| Attribute | Value |

|-----------|-------|

| PTR Hostname | baiduspider-116-179-32-197.crawl.baidu.com |

| Forward Resolution | baidu.com (1 record) |

| Services | Firewalled / No Services Detected |

| Open Ports | None |

| TLS Certificate | None |

| DNSSEC Valid | Yes |

**Analysis:** The IP resolves to a Baidu search crawler hostname (baiduspider). However, no active HTTP services are detected, and the IP is classified as a mobile connection with no open ports.

\---

\## Threat Indicators

| Indicator | Status |

|-----------|--------|

| Known Attacker | No |

| Spam Source | No |

| Tor Exit Node | No |

| Abuse Confidence Score | Not Available |

| Blacklist Count | 0 |

| DNSBL Listed | 2 of 8 lists |

| Known Campaigns | None |

| Threat Feeds | None |

\---

\## Neighborhood Analysis

**Subnet:** 116.179.32.0/24

\- **Total Neighbors:** 100

\- **Abuse Density:** 0%

\- **Risk Distribution:** High (0) | Medium (35) | Low (35)

\- **Threat Siblings:** 0

**Observation:** The /24 subnet shows balanced risk distribution with no high-risk siblings. Abuse density is minimal.

\---

\## Relationship Graph

\- **Network:** UNICOM (Same Network)

\- **Hostname Association:** baiduspider-116-179-32-197.crawl.baidu.com (DNS Association)

\---

\## Historical Observations

| Metric | Value |

|--------|-------|

| Total Observations | 17 |

| Threat Observation Count | 1 |

| Threat Persistence Days | 0 |

| Is Persistently Malicious | No |

| Recent Activity | 2026-07-22 |

**Observation Pattern:** 17 signals observed on 2026-07-22, including geolocation, ownership, and operator score signals. No persistent malicious behavior detected.

\---

\## Recommended Security Actions

Based on risk profile (Score: 50), the following rules are recommended:

| Platform | Rule |

|----------|------|

| iptables | \`iptables -A INPUT -s 116.179.32.197 -j DROP\` |

| nftables | \`nft add rule inet filter input ip saddr 116.179.32.197 drop\` |

| nginx | \`deny 116.179.32.197;\` |

| pfSense | \`116.179.32.197/32\` |

| Cloudflare WAF | Block (expression: \`ip.src eq 116.179.32.197\`) |

| AWS WAF | IP Set: 116.179.32.197/32 |

**Note:** These recommendations are probabilistic and should be combined with additional context before enforcement.

\---

\## Intelligence Summary

IP 116.179.32.197 is a China Unicom mobile connection associated with Baidu's crawler infrastructure. The IP is flagged as moderate risk (50) and appears on 2 DNSBLs, but lacks confirmed malicious indicators. The hostname association (baiduspider) suggests legitimate search engine crawler activity, though the absence of open services and presence on DNSBLs warrants monitoring. The /24 subnet demonstrates low abuse density with balanced risk distribution.

**SOC Recommendation:** Monitor for anomalous outbound connections from this IP to internal resources. Consider allowing inbound traffic only if legitimate Baidu crawler activity is confirmed for your use case. Current risk level does not require immediate blocking if operational requirements permit.

## Nearby addresses

- 116.179.32.12 (https://ipdebrief.com/116.179.32.12)
- 116.179.32.13 (https://ipdebrief.com/116.179.32.13)
- 116.179.32.14 (https://ipdebrief.com/116.179.32.14)
- 116.179.32.15 (https://ipdebrief.com/116.179.32.15)
- 116.179.32.16 (https://ipdebrief.com/116.179.32.16)
- 116.179.32.17 (https://ipdebrief.com/116.179.32.17)
- 116.179.32.18 (https://ipdebrief.com/116.179.32.18)
- 116.179.32.19 (https://ipdebrief.com/116.179.32.19)
- 116.179.32.20 (https://ipdebrief.com/116.179.32.20)
- 116.179.32.21 (https://ipdebrief.com/116.179.32.21)
- 116.179.32.22 (https://ipdebrief.com/116.179.32.22)
- 116.179.32.23 (https://ipdebrief.com/116.179.32.23)

---

Source: IPDebrief, "116.179.32.197 IP intelligence", https://ipdebrief.com/116.179.32.197, updated 2026-10-07. Assessments are probabilistic.