IPMediumSignal 59/100
149.129.252.11
Location
IndonesiaJakarta, JK
ASN
AS45102
Alibaba.com Singapore E-Commerce Private Limited
First Seen
Feb 28, 2025
Last Seen
Mar 19, 2026
Found in 5 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
59%
Signal Score
59 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryIndonesia
IndonesiaRegionJakarta, JK
ASNAS45102
OrganizationAlibaba.com Singapore E-Commerce Private Limited
Feed Intelligence Summary
5 reports59% confidence
5
Source reports
59%
Confidence score
Category tags
active scanningasiaattackbotnetbrute forcecommand and controlcommunication protocolcowrie honeypotcredential accesscredential harvestingcredential stuffingdata exfiltrationdecoy systemdionaea honeypotdistributed attacksftp scanindicatorindonesiamailoney honeypotmalicious activitymalicious login attemptsmalicious softwaremalwaremalware behaviourmalware capturenetworknetwork reconnaissancenetwork scanningnetwork securityphishingphishing attackphishing trapprocess injectionreconnaissanceresearchedresource hijackingsentrypeer botnetsftp attacksip brute forcesip scansocial engineeringssh attackssh monitoringssh scant1021t1040t1041t1055t1059t1071.001t1078t1110t1110.002t1187t1190t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1566.004t1595t1595.001t1595.002t1595.003tannertelecommunicationsthreat actorthreat intelligencevoipvoip attack
Activity Timeline
Mar 19Mar 19
Threat Activity Heatmap
· Peak: 2026-03-19LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
59
SIGNAL
Signal Score
59%
Confidence
5
Reports
First seenFeb 28, 2025
Last seenMar 19, 2026
GeolocationID
CountryIndonesia
LocationJakarta, JK
ASNAS45102
OrgAlibaba.com Singapore E-Commerce Private Limited
Coords-6.1741, 106.8296
VirusTotal
Not checked
WHOIS
- description
- 2025-03-02T10:04:18.178Z Honeypot : Dionaea : Source: 149.129.252.11 : Port: 81 Connection: {'protocol': 'httpd', 'type': 'accept', 'transport': 'tcp'}
- raw
- inetnum: 149.129.192.0 - 149.129.255.255 netname: ALICLOUD-ID descr: 21/F, Ciputra World 1 (DBS Tower), JalanProf. DR. Satrio Kav 3-5, Jakarta 12940, Indonesia country: ID admin-c: ASEP1-AP tech-c: ASEP1-AP abuse-c: AA1926-AP status: ASSIGNED NON-PORTABLE mnt-by: MAINT-ASEPL-SG mnt-irt: IRT-ASEPL-SG last-modified: 2021-04-14T01:11:45Z source: APNIC irt: IRT-ASEPL-SG address: 1 Raffles Place # 59-00 One Raffles Place, Tower One Singapore, Singapore e-mail: [email protected] abuse-mailbox: [email protected] admin-c: ASEP1-AP tech-c: ASEP1-AP auth: # Filtered remarks: [email protected] was validated on 2025-04-14 mnt-by: MAINT-ASEPL-SG last-modified: 2025-04-14T07:19:15Z source: APNIC role: ABUSE ASEPLSG country: ZZ address: 1 Raffles Place # 59-00 One Raffles Place, Tower One Singapore, Singapore phone: +000000000 e-mail: [email protected] admin-c: ASEP1-AP tech-c: ASEP1-AP nic-hdl: AA1926-AP remarks: Generated from irt object IRT-ASEPL-SG remarks: [email protected] was validated on 2025-04-14 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-04-14T07:19:41Z source: APNIC role: Alibabacom Singapore E-Commerce Private Limited a address: 1 Raffles Place #59-00 One Raffles Place, Tower One Singapore, Singapore country: SG phone: +86-571-85022088 fax-no: +86-571-85022088 e-mail: [email protected] admin-c: ASEP1-AP tech-c: ASEP1-AP nic-hdl: ASEP1-AP mnt-by: MAINT-ASEPL-SG last-modified: 2015-12-10T01:04:19Z source: APNIC route: 149.129.252.0/24 origin: AS45102 descr: Alibaba.com Singapore E-Commerce Private Limited 8 Shenton Way, #45-01 AXA Tower, Singapore 068811 mnt-by: MAINT-ASEPL-SG last-modified: 2020-01-16T14:50:20Z source: APNIC
- references
- https://github.com/telekom-security/tpotce
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 2 months ago
Appeared in 5 threat reports