IPMediumSignal 56/100
139.59.99.99
Location
Singapore, South West
ASN
AS14061
DigitalOcean, LLC
First Seen
Jan 17, 2025
Last Seen
May 3, 2026
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
56%
Signal Score
56 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
Country
Singapore
RegionSingapore, South West
ASNAS14061
OrganizationDigitalOcean, LLC
Feed Intelligence Summary
10 reports56% confidence
10
Source reports
56%
Confidence score
Category tags
active scanasiabotnetbotnet activitybrute forcec2command & controlcommand and controlcredential harvestingcredential phishingcredential stuffingdata encryptiondata exfiltrationdata store exposuredata theftdistributed attacksencryptionexploitation activityextortionform submissionidentity & access exploitationindicatorinfrastructure acquisitionreconnaissanceinjection activitylogin page phishinglogin panelmalicious softwaremalwaremanualnetworkopen directoryphishingphishing attackphishing attack detectionphishing campaign detectionprocess injectionransomwareresearchedsgshodansingaporesocial engineeringsystem disruptiont1055t1059.001t1071.001t1078t1078.001t1189t1199t1486t1490t1496t1499.002t1499.003t1539t1565t1566t1566.001t1566.002t1566.003t1587.001t1590.001t1598t1598.003tor nodeunauthorized accessweb phishing
Activity Timeline
May 3May 3
Threat Activity Heatmap
· Peak: 2026-05-03LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
56
SIGNAL
Signal Score
56%
Confidence
10
Reports
First seenJan 17, 2025
Last seenMay 3, 2026
GeolocationSG
CountrySingapore
LocationSingapore, South West
ASNAS14061
OrgDigitalOcean, LLC
Coords1.3078, 103.6818
VirusTotal
Not checked
WHOIS
- description
- Go Phish Login Panels from Shodan
- raw
- inetnum: 139.59.96.0 - 139.59.111.255 netname: DIGITALOCEAN-AP descr: DigitalOcean, LLC country: SG admin-c: DOIA2-AP tech-c: DOIA2-AP abuse-c: AD699-AP status: ASSIGNED NON-PORTABLE mnt-by: MAINT-DIGITALOCEAN-AP mnt-irt: IRT-DIGITALOCEAN-AP last-modified: 2020-05-31T21:36:27Z source: APNIC irt: IRT-DIGITALOCEAN-AP address: 105 Edgeview Drive, Suite 425, Broomfield, Colorado 80021 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: DOIA2-AP tech-c: DOIA2-AP auth: # Filtered remarks: [email protected] is invalid remarks: [email protected] is invalid mnt-by: MAINT-DIGITALOCEAN-AP last-modified: 2026-03-04T13:09:28Z source: APNIC role: ABUSE DIGITALOCEANAP country: ZZ address: 105 Edgeview Drive, Suite 425, Broomfield, Colorado 80021 phone: +000000000 e-mail: [email protected] admin-c: DOIA2-AP tech-c: DOIA2-AP nic-hdl: AD699-AP remarks: Generated from irt object IRT-DIGITALOCEAN-AP remarks: [email protected] is invalid remarks: [email protected] is invalid abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2026-03-04T13:11:16Z source: APNIC role: Digital Ocean Inc administrator address: 105 Edgeview Drive, Suite 425, Broomfield, Colorado 80021 country: US phone: +1 646-827-4366 fax-no: +1 646-827-4366 e-mail: [email protected] admin-c: DOIA2-AP tech-c: DOIA2-AP nic-hdl: DOIA2-AP mnt-by: MAINT-DIGITALOCEAN-AP last-modified: 2025-04-11T18:24:27Z source: APNIC
- references
- https://threatfox.abuse.ch/export/csv/recent/
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 1 month ago
Appeared in 10 threat reports