154.85.60.150 Threat Intelligence and Host Information

Dec 27, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 154.85.60.150 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 70/100

Host and Network Information

  • Mitre ATT&CK IDs: T1041 - Exfiltration Over C2 Channel, T1059.001 - PowerShell, T1072 - Software Deployment Tools, T1110.001 - Password Guessing, T1110.002 - Password Cracking, T1110.003 - Password Spraying, T1110.004 - Credential Stuffing, T1590.004 - Network Topology, T1590.005 - IP Addresses, T1595.001 - Scanning IP Blocks, T1595.002 - Vulnerability Scanning

  • Tags: akamaias, akamaiasn1, amazon02, as15169, as16509, as20940, as3359, as8075, as852, cuba, facebook, geoip, ghost, google, indonesia, level3, Malicious, media, mexico, mini, proton, public url, seznam, telecom, twitter, ukraine, win32, win64

  • View other sources: Spamhaus VirusTotal

Malware Detected on Host

Count: 57 bfc3713ba77e19a3b5c46f9ee3bfd361bad6591993509bf2ab705730a049eb1b 23f944897fc4a7e561f76d98ee8d59548589096f1eedb0307f8419735f9737c6 af7dac0b75e6b802c0c4fa5d59b0be9077bf417ad796af9202c94c9f44addaf2 40053fafa834b6f46d3570c9b5ba8bf06e5bcdc037a98fa4a10b605ac81975aa 26fc34a87887eae06992782b7de9056542aa6cb769a11cff0bb44498a3c51df7 924213e2dd0b4ad820dbf3910891989369a8be0beed32ca70048acc814c04e0b 5e934b2482284f1c550616980e42e77b117ad75b2c2f0c2052aad0e3153bf330 1986b219d00c12c43fe6ad6fd693bb31a90e1d51c8cd4df529f40ada17e25875 75f2bae6386fccb0ea85ad247f29dd0b56fc5856bbabdda5f8ee52f3f6a77a01 ae306c43432223f40d3421f571f583dcd48a6df8f7fccfc0b23a6072cccdaf78

Open Ports Detected

22 80

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2016-20012 CVE-2019-16905 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2025-26465 CVE-2025-32728

Map

Whois Information

  • inetnum: 154.85.60.0 - 154.85.60.255
  • netname: Beijing_Baidu_Netcom_Science_and_Technology_Co_Ltd
  • descr: Beijing Baidu Netcom Science and Technology Co., Ltd.
  • country: SG
  • admin-c: CIS1-AFRINIC
  • tech-c: CIS1-AFRINIC
  • status: ASSIGNED PA
  • mnt-by: CIL1-MNT
  • mnt-by: LARUS-SERVICE-MNT
  • parent: 154.80.0.0 - 154.95.255.255
  • person: Cloud Innovation Support
  • address: Ebene
  • address: MU
  • address: Mahe
  • address: Seychelles
  • phone: tel:+248-4-610-795
  • nic-hdl: CIS1-AFRINIC
  • abuse-mailbox: abuse@cloudinnovation.org
  • mnt-by: CIL1-MNT
Share on: