IPMediumSignal 48/100
139.162.3.141
Location
SingaporeSingapore, North West
ASN
AS63949
Linode, LLC
First Seen
Apr 15, 2025
Last Seen
Jun 14, 2026
Found in 12 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
48%
Signal Score
48 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountrySingapore
SingaporeRegionSingapore, North West
ASNAS63949
OrganizationLinode, LLC
IP Category
⟲
Proxy
Proxy server
Feed Intelligence Summary
12 reports48% confidence
12
Source reports
48%
Confidence score
Category tags
abuseactive scanactive scanningandroxgh0st malwareasiaattachment phishingattackaustraliaautomated emailback orificeback orifice malwarebad reputationbad web botbase64base64 encodingbecbotnetbotnet activitybrute forcebrute force attackbrute-forcebulk emailc2c2 communicationchinacode executioncommand & controlcommand and controlcommand executioncommand injectioncommunication protocolcompromised hostcredential accesscredential harvestingcredential phishingcredential stuffingd-link device exploitationd-link vulnerabilitydata exfiltrationdata store exposureddosddos preparationdefense evasiondenial of servicedistributed attacksexfiltrationexploit attemptsexploitationexploitation activityexploited hostftpgpongpon router exploitationgpon vulnerabilityhackinghardcoded password vulnerabilityhnaphttp scannerhttpsidentity & access exploitationindiaindicatorinitial accessinjection activityintrusion detectioniot exploitationiot securityiot targetedlateral movementmalaysiamalicious activitymalicious ip activitymalicious softwaremalwaremalware distributionnetgear cgi rcenetgear device exploitationnetgear vulnerabilitynetworknetwork intrusionnetwork scanningnetwork securitynetworking devicesnorth americaoceaniaopen proxypasswordpassword attackspassword theftpayment fraudphishingphishing attackphishing campaignprice requestprice request scamprivilege escalationprocess injectionproxyransomwarercereconnaissanceremote accessremote code executionremote command injectionresearchedrouter exploitationscams & fraudscanscannerscanning activityschedule themescheduled task abusesecurity operationssgsingaporesipsoapsocial engineeringsoftware exploitationspamspam distributionsshssh attacksystembcsystembc botnett1003t1003.001t1016t1018t1021t1027t1040t1046t1047t1053t1055t1059t1068t1071t1071.001t1078t1078.001t1078.002t1078.004t1095t1105t1110t1110.001t1110.002t1110.003t1110.004t1133t1136t1189t1190t1192t1203t1204t1210t1486t1496t1499.001t1499.002t1499.003t1547t1555t1556t1565t1566t1566.001t1566.002t1566.003t1573t1592t1595t1595.001t1595.002t1595.003t1598t1598.003tariff server compromisetariff server themetariffs servertelecommunicationsthreat actorthreat intelligencetor nodeunited statesvoipvulnerabilityvulnerability scanweb app attackweb application attackweb exploitationweb trafficwetransfer abusezgrabzgrab scannerzivif
Activity Timeline
Jun 14Jun 14
Threat Activity Heatmap
· Peak: 2026-06-14LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
48
SIGNAL
Signal Score
48%
Confidence
12
Reports
First seenApr 15, 2025
Last seenJun 14, 2026
GeolocationSG
CountrySingapore
LocationSingapore, North West
ASNAS63949
OrgLinode, LLC
Coords1.2900, 103.8503
Proxy
VirusTotal
Not checked
WHOIS
- description
- IPV4 hosts detected performing scans on production environment located in Australia.
- raw
- inetnum: 139.0.0.0 - 139.255.255.255 netname: ERX-NETBLOCK descr: Early registration addresses country: AU admin-c: IANA1-AP tech-c: IANA1-AP abuse-c: AA1452-AP status: ALLOCATED PORTABLE remarks: ------------------------------------------------------ remarks: Important: remarks: remarks: Networks in this range were allocated by InterNIC remarks: prior to the formation of Regional Internet remarks: Registries (RIRs): AfriNIC, APNIC, ARIN, LACNIC and RIPE NCC. remarks: remarks: Address ranges from this historical space have now remarks: been transferred to the appropriate RIR database.remarks: remarks: If your search has returned this record, it means the remarks: address range is not administered by APNIC. remarks: remarks: Instead, please search one of the following databases: remarks: remarks: - AfriNIC (Africa) remarks: website: http://www.afrinic.net/ remarks: command line: whois.afrinic.net remarks: remarks: - ARIN (Northern America) remarks: website: http://www.arin.net/ remarks: command line: whois.arin.net remarks: remarks: - LACNIC (Latin America and the Carribean) remarks: website: http://www.lacnic.net/ remarks: command line: whois.lacnic.net remarks: remarks: - RIPE NCC (Europe) remarks: website: http://www.ripe.net/ remarks: command line: whois.ripe.net remarks: remarks: For information on the Early Registration Transfer remarks: (ERX) project, see: remarks: remarks: http://www.apnic.net/db/erx remarks: remarks: ------------------------------------------------------ mnt-by: APNIC-HM mnt-lower: APNIC-HM mnt-irt: IRT-APNIC-AP last-modified: 2023-04-16T10:23:23Z source: APNIC irt: IRT-APNIC-AP address: Brisbane, Australia e-mail: [email protected] abuse-mailbox: [email protected] admin-c: HM20-AP tech-c: NO4-AP auth: # Filtered remarks: APNIC is a Regional Internet Registry. remarks: We do not operate the referring network and remarks: are unable to investigate complaints of network abuse. remarks: For information about IRT, see www.apnic.net/irt remarks: [email protected] was validated on 2020-02-03 mnt-by: APNIC-HM last-modified: 2023-08-18T00:42:38Z source: APNIC role: ABUSE APNICAP address: Brisbane, Australia country: ZZ phone: +000000000 e-mail: [email protected] admin-c: HM20-AP tech-c: NO4-AP nic-hdl: AA1452-AP remarks: Generated from irt object IRT-APNIC-AP remarks: [email protected] was validated on 2020-02-03 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2023-08-18T19:08:30Z source: APNIC role: Internet Assigned Numbers Authority address: see http://www.iana.org. admin-c: IANA1-AP tech-c: IANA1-AP nic-hdl: IANA1-AP remarks: For more information on IANA services remarks: go to IANA web site at http://www.iana.org. mnt-by: MAINT-APNIC-AP last-modified: 2018-06-22T22:34:30Z source: APNIC
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 13 days ago
Appeared in 12 threat reports