116.179.32.238
116.179.32.238 is an IPv4 address operated by IRT-UNICOM-CN (AS4837), geolocated to Beijing 100140, China. It belongs to a mobile network with reverse DNS name baiduspider-116-179-32-238.crawl.baidu.com. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 116.179.32.238
Date: 2026-07-22
Classification: Low Risk
Risk Score: 25/100
## Executive Summary
IP address 116.179.32.238 is associated with China Unicom's mobile network infrastructure and resolves to a Baidu search engine crawler hostname. The IP presents low overall risk with no active threat indicators, though neighborhood analysis reveals elevated risk activity in the surrounding /24 subnet.
## Network Attribution
| Attribute | Value |
|---|---|
| ASN | AS4837 (IRT-UNICOM-CN) |
| Organization | UNICOM / China United Network Communications |
| Network Block | 116.128.0.0/10 |
| Country/Region | China / Beijing |
| Connection Type | Mobile (LTE/5G) |
| Carrier | China Unicom (MCC 460, MNC 01) |
## DNS Resolution
- PTR Record: baiduspider-116-179-32-238.crawl.baidu.com
- Forward Resolution: Confirmed to baidu.com
- Status: Active crawler infrastructure
## Threat Assessment
| Indicator | Status |
|---|---|
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Blacklist Count | 0 |
| Open Ports | None detected |
| Service Banner | None |
| DNSBL Listed | 1/8 lists |
## Risk Signals
Analysis of 17 historical observations identified:
- One signal flagged with threat indicators (has_threats: true, pulse_count: 33)
- Geographic signals consistently resolve to China (CN)
- No persistent malicious activity detected
- Average threat observation count: 1
## Neighborhood Analysis
Subnet: 116.179.32.0/24
- Total Siblings: 100 IPs
- Abuse Density: 0%
- Risk Distribution: 0 high, 35 medium, 35 low
Notable neighbors include IPs 116.179.32.12 through 116.179.32.16, all scoring 50/100 risk with 60/100 authority. These elevated-risk neighbors suggest the /24 block may host mixed legitimate and suspicious traffic patterns.
## Relationships
- Network: UNICOM
- DNS Hostnames: baiduspider-116-179-32-238.crawl.baidu.com (6 associations)
## Recommended Actions
No immediate defensive actions required. The IP resolves to legitimate Baidu crawler infrastructure. SOC analysts should:
1. Allow traffic from this IP if Baidu crawler access is legitimate for your organization
2. Monitor the /24 subnet (116.179.32.0/24) for elevated-risk neighbors
3. Correlate with known Baidu spider user-agent patterns if web traffic inspection is in scope
4. Review historical observations for any emerging threat patterns over time
---
*Intelligence generated from IPDebrief platform. Data current as of 2026-07-22.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-UNICOM-CN |
| ASN | AS4837 |
| Network Name | UNICOM |
| CIDR Block | 116.128.0.0/10 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | baiduspider-116-179-32-238.crawl.baidu.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | baiduspider-116-179-32-238.crawl.baidu.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS4837 |
| Network Prefix | 116.179.0.0/16 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 14% | 1 | 3 |
| geolocation | 12% | 2 | 2 |
| Overall | 13% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:20:39 UTC |
| Last Seen | 2026-10-07 09:47:18 UTC |
| Profile Built | 2026-10-07 09:47:48 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 116.179.32.238
Who owns the IP address 116.179.32.238?
116.179.32.238 is registered to IRT-UNICOM-CN. The address falls within the 116.128.0.0/10 network block. Registration is held at APNIC.
Where is 116.179.32.238 located?
Geolocation data places 116.179.32.238 in Beijing 100140, P.R.China, China. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 116.179.32.238 malicious or safe?
116.179.32.238 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 116.179.32.238?
The reverse DNS (PTR) record for 116.179.32.238 is baiduspider-116-179-32-238.crawl.baidu.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 116.179.32.238 a VPN, proxy, or data center address?
116.179.32.238 is classified as a mobile network based on network ownership and behavioural analysis.