IOC Radar
IPMediumSignal 72/100

95.211.96.182

Location
NetherlandsNetherlands
Amsterdam, Noord-Holland
ASN
AS60781
LeaseWeb
First Seen
Mar 3, 2025
Last Seen
Jun 6, 2026
Mar 3
First Seen
466d ago
Jun 6
Last Seen
7d ago
8
Reports
source reports
72%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
72%
Signal Score
72 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryNLNetherlands
RegionAmsterdam, Noord-Holland
ASNAS60781
OrganizationLeaseWeb

IP Category

⊕
VPN
VPN exit node

Feed Intelligence Summary

8 reports72% confidence
8
Source reports
72%
Confidence score
Category tags
active scanbad web botblog spambotnet activitybrute forcebrute-forcebruteforceddosddos attackeuropeexploitation activityexploited hosthackingindicatorinjection activitynetherlandsnetworknlresearchedscannerself-signedspamsql injectionsshtargeting databasevpnvpn ipweb app attackweb spam

Activity Timeline

1 total obs
Jun 6Jun 6

Threat Activity Heatmap

· Peak: 2026-06-06
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
72
SIGNAL
Signal Score
72%
Confidence
8
Reports
First seenMar 3, 2025
Last seenJun 6, 2026
GeolocationNL
CountryNetherlands
LocationAmsterdam, Noord-Holland
ASNAS60781
OrgLeaseWeb
Coords52.3785, 4.9000
VPN

VirusTotal

Not checked

WHOIS

raw
inetnum: 95.211.96.0 - 95.211.97.255 netname: LEASEWEB descr: LeaseWeb Netherlands B.V. remarks: Please send all abuse notifications to the following email address: [email protected]. To ensure proper processing of your abuse notification, please visit the website www.leaseweb.com/abuse for notification requirements. All police and other government agency requests must be sent to [email protected]. country: NL admin-c: LSW1-RIPE tech-c: LSW1-RIPE status: ASSIGNED PA mnt-by: LEASEWEB-NL-MNT created: 2011-11-01T14:45:47Z last-modified: 2015-09-30T22:26:13Z source: RIPE person: RIP Mean address: P.O. Box 93054 address: 1090BB AMSTERDAM address: Netherlands phone: +31 20 3162880 fax-no: +31 20 3162890 nic-hdl: LSW1-RIPE mnt-by: LEASEWEB-NL-MNT created: 2005-06-07T14:36:03Z last-modified: 2017-10-30T21:46:47Z source: RIPE # Filtered route: 95.211.0.0/16 descr: LEASEWEB origin: AS60781 remarks: LeaseWeb mnt-by: LEASEWEB-NL-MNT created: 2014-03-11T14:28:00Z last-modified: 2015-09-30T23:00:04Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 7 days ago
Appeared in 8 threat reports