180.76.236.214📋 Copy

IP Intelligence Briefing: 180.76.236.214

Date: 2026-06-02

---

**1. Core Profile**

• Reputation: Moderate Risk (Risk Score: 65)
• Ownership:

- ISP: Baidu Noc (ASN: 38365)

- Country: China (CN)

- Network: 180.76.0.0/16 (Baidu)

• Geolocation:

- Country: China

- Validation: ICMP blocked; geolocation inferred with 8,033 km distance.

• Threat Indicators:

- No malware, phishing, or spam associations.

- No DNSBL listings or known attacker campaigns.

---

**2. Network Behavior**

• Services:

- No open ports or TLS certificates detected.

- No HTTP server banners or email authentication records.

• Network Role:

- Classified as "Firewalled / No Services."

- Likely internal infrastructure (no CDN, VPN, or mobile carrier flags).

• BGP Analysis:

- Route origin: Baidu (ASN 38365).

- Route stability: Unstable (route changes in last 30 days).

- DNSSEC validation: Enabled.

---

**3. Observation History**

• Recent Activity (Last 7 Days):

- 15 observations, primarily ICMP and BGP data.

- Most signals have low confidence (≤ 0.85).

- No persistent malicious behavior or threat persistence.

• Notable Findings:

- ICMP validation failed, suggesting network restrictions.

- Minimal route stability issues (0 route changes in 30 days).

---

**4. Relationships**

• Linked Entities:

- Directly tied to Baidu Noc (ASN 38365).

- No external subnets, domains, or certificates associated.

• Threat Correlation:

- No linked campaigns, honeypots, or WAF violations.

---

**5. Neighborhood Analysis**

• Subnet: 180.76.236.214/24
• Neighbor Risk:

- 0 active IPs in subnet.

- No abuse density or risky siblings detected.

• Subnet Classification: "Mostly Clean" with no inherited risks.

---

**6. Recommendations**

• Monitoring:

- Track ICMP validation attempts, as the IP blocks ICMP requests.

- Monitor for unexpected BGP route changes or new service exposure.

• Mitigation:

- No immediate firewall rules or actions required.

- Validate if the IP is part of a larger network segment requiring internal controls.

---

Conclusion:

180.76.236.214 is a static, firewalled IP associated with Baidu’s internal infrastructure. While no malicious activity is detected, its geolocation in China and lack of service exposure warrant continued monitoring. SOC teams should focus on verifying network segmentation and ensuring no unintended access points exist.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.