182.61.201.90 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 182.61.201.90 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 25/100

Host and Network Information

  • View other sources: Spamhaus VirusTotal
  • Contained within other IP sets: coinbl_hosts_browser, coinbl_hosts

Malware Detected on Host

Count: 612 f9213c71c338c115e7b40cf1d3270ae361d7bf23d29db369e506f7ecc1d2b555 f6af9fb4528e22067e121249a71ef24d4fa3fce2b7b6bd40d2ea8b72012fff1a 4a051c15328726fefda0fcf7605b38b2e19466d5e0a02fb48960541bd46b1fba ea6fbeacc14590eb07b72d6072a567cd5e158593087fdbb788a270e0d4b3314f d43bced9b5441b2619e7d8980d9e231c8fefa4a0dd99a2f4826cc29779f57745 711f7f5f7a97bf6ab360978836397f3230c2ccb6d23437cc013958377afd6625 db406da83032dfb1eae295f72b2a96fc31dbf39215b7d96b4c7219b8f61ef887 117aa8959b6db6241062866313c2555d31bafd27b93cc92d24b07c2e237270bd c9a4d78a005b9b6047114bc477da92255662c3aa9f539ac11c4dd1369262b17a d5d062fe79c9ef2a88351f059eb3edef947d3f328372770476ea7a03dbb017b2

Open Ports Detected

443 80

CVEs Detected

CVE-2016-0742 CVE-2016-0746 CVE-2016-0747 CVE-2016-1247 CVE-2016-4450 CVE-2017-20005 CVE-2017-7529 CVE-2018-16845 CVE-2019-20372 CVE-2021-23017 CVE-2021-3618

Map

Whois Information

  • inetnum: 182.61.0.0 - 182.61.255.255
  • netname: Baidu
  • descr: Beijing Baidu Netcom Science and Technology Co., Ltd.
  • descr: Baidu Plaza, No.10, Shangdi 10th street,
  • descr: Haidian District Beijing,100080
  • country: CN
  • admin-c: BN261-AP
  • tech-c: BN261-AP
  • abuse-c: AC1601-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: MAINT-CNNIC-AP
  • mnt-irt: IRT-BAIDU-CN
  • mnt-lower: MAINT-CNNIC-AP
  • mnt-routes: MAINT-CNNIC-AP
  • last-modified: 2024-03-11T23:29:48Z
  • irt: IRT-Baidu-CN
  • address: 12f,lixiang building ,zhongguancun,beijing
  • e-mail: huxin05@baidu.com
  • abuse-mailbox: huxin05@baidu.com
  • admin-c: ZKY3-AP
  • tech-c: ZKY3-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2021-09-05T23:38:37Z
  • role: ABUSE CNNICCN
  • country: ZZ
  • address: Beijing, China
  • phone: +000000000
  • e-mail: ipas@cnnic.cn
  • admin-c: IP50-AP
  • tech-c: IP50-AP
  • nic-hdl: AC1601-AP
  • abuse-mailbox: ipas@cnnic.cn
  • mnt-by: APNIC-ABUSE
  • last-modified: 2024-07-30T11:55:46Z
  • person: Baidu Noc
  • address: Baidu Campus,NO.10 Shangdi 10th Street,Haidian District,Beijing The People’s Republic of China 100085
  • country: CN
  • phone: +86-18110062082
  • e-mail: noc@baidu.com
  • nic-hdl: BN261-AP
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2024-03-11T23:28:23Z
  • route: 182.61.192.0/19
  • descr: Baidu
  • country: CN
  • origin: AS38365
  • notify: zhangyukun@baidu.com
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2017-12-21T02:20:17Z
  • route: 182.61.192.0/19
  • descr: Baidu
  • country: CN
  • origin: AS55967
  • notify: zhangyukun@baidu.com
  • mnt-by: MAINT-CNNIC-AP
  • last-modified: 2017-12-21T02:20:22Z

Links to attack logs

****** ****** ******

Share on: