95.211.209.158 Threat Intelligence and Host Information

Oct 21, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 95.211.209.158 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 45/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing, probing, scanning, webscan, webscanner bruteforce web app attack

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: cruzit_web_attacks, ipblacklistcloud_recent_30d, ipblacklistcloud_recent_7d, stopforumspam_365d

  • Country: Netherlands
  • Network: AS60781 leaseweb netherlands b.v.
  • Noticed: 1 times
  • Protcols Attacked: SSH
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: Ninja-World-Vpn.strangled.net

Malware Detected on Host

Count: 5 8d91329ba7b5c8467e46aa56d9d96e7294b54846c2872461d1f34a4f04ce353f ba522ad11649c444c30bebe49c1aa7f8ba92a8d65822396b9f7e26ead189b385 3d67d2e6bf2a358179675b17f78b52981c9b8043f8a70ef2e376c1fbb0a151c6 8eae08d6a895f2139a53f4982ca344b0ad4559644e2a16432fbab0cd6fb04de2 55c6ee4ad6e6248642b92b5c7b7ff2922e80446d1a8931ca954291c6bf36235a

Map

Whois Information

  • inetnum: 95.211.208.0 - 95.211.209.255
  • netname: LEASEWEB
  • descr: LeaseWeb Netherlands B.V.
  • country: NL
  • admin-c: LSW1-RIPE
  • tech-c: LSW1-RIPE
  • status: ASSIGNED PA
  • mnt-by: LEASEWEB-NL-MNT
  • created: 2011-11-07T11:58:10Z
  • last-modified: 2015-09-30T22:18:22Z
  • person: RIP Mean
  • address: P.O. Box 93054
  • address: 1090BB AMSTERDAM
  • address: Netherlands
  • phone: +31 20 3162880
  • fax-no: +31 20 3162890
  • nic-hdl: LSW1-RIPE
  • mnt-by: LEASEWEB-NL-MNT
  • created: 2005-06-07T14:36:03Z
  • last-modified: 2017-10-30T21:46:47Z
  • route: 95.211.0.0/16
  • descr: LEASEWEB
  • origin: AS60781
  • mnt-by: LEASEWEB-NL-MNT
  • created: 2014-03-11T14:28:00Z
  • last-modified: 2015-09-30T23:00:04Z
Share on: