116.179.32.215📋 Copy

IP INTELLIGENCE BRIEFING

IP Address: 116.179.32.215/32

Date: 2026-07-24

Classification: Low Risk

EXECUTIVE SUMMARY

Target IP 116.179.32.215 is a mobile carrier infrastructure address assigned to China Unicom (ASN 4837, IRT-UNICOM-CN) with current risk score of 0. The IP is geolocated to Beijing, China, operates as a firewalled mobile carrier endpoint with no active services, and shows minimal threat indicators. No immediate blocking or mitigation actions recommended based on current risk profile.

OWNERSHIP & NETWORK CLASSIFICATION

• ASN: AS4837 (China Unicom / china unicom china169 backbone)
• Organization: IRT-UNICOM-CN
• CIDR Block: 116.128.0.0/10
• Network Type: Mobile Carrier (China Unicom, LTE/5G technology)
• Geolocation: Beijing, P.R. China (34.77°N, 113.72°E)
• Registration: APNIC RIR

THREAT POSTURE

• Overall Risk Score: 0 (Low Risk)
• Blacklist Status: 0 entries
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Threat Persistence: Not persistently malicious
• Threat Observation Count: 0

NETWORK SERVICES & DNS

• Open Ports: None detected (Firewalled / No Services)
• PTR Hostnames: None
• Forward Resolution: 0 records
• DNS Records: No hosted domains, no SPF/DMARC records
• TLS Certificates: None

HISTORICAL SIGNAL ANALYSIS

Six historical observations recorded on 2026-07-24. Analysis reveals:

• ASN and geographic data consistent across observations
• One signal (alienvault-otx) indicated potential threats with 14 pulse references, though overall risk scoring remained at 0
• Ownership data stable with abuse contact available via RDAP
• No significant changes in network classification or threat indicators

NETWORK NEIGHBORHOOD ANALYSIS

Subnet 116.179.32.0/24 analyzed:

• Total Neighbors: 100 IPs
• Risk Distribution: 0 High, 40 Medium, 50 Low
• Abuse Density: 0 (minimal)
• Classification: Provider infrastructure

Multiple neighboring IPs show risk score of 50 and authority score of 60, indicating moderate subnet activity typical of mobile carrier ranges.

RELATIONSHIP MAPPING

Single relationship identified:

• Network Affiliation: UNICOM (Same Network)
• No hostname, certificate, or organizational relationships detected

RECOMMENDED ACTIONS

• Firewall Rules: None required (risk score 0)
• Threat Intelligence: Continue monitoring; no immediate action
• SOC Guidance: Treat as legitimate carrier infrastructure. No blocking or alerting necessary based on current profile.

ASSESSMENT

IP 116.179.32.215 represents standard mobile carrier infrastructure with minimal threat indicators. The zero risk score, absence of blacklist entries, and lack of active services classify this as a benign provider endpoint. Historical signals indicate occasional threat associations in the broader mobile carrier ecosystem, but the specific IP shows no active malicious behavior. SOC analysts may log for reference but should not flag for investigation without additional context.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.