95.211.120.98

Classification: Malicious

95.211.120.98 is a malicious IP address. Reported by 7 threat sources, last seen 2026-09-09. Network: AS60781 LeaseWeb Netherlands B.V..

Current activity

  • Command & Control server — Used by cybercriminals to control victim computers.
  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Barracuda 2023-10-16 07:36:01 2026-09-09 22:09:11 attacker malicious-activity
XWorm ThreatFox Abuse.ch 2026-09-09 18:20:39 2026-09-09 18:25:04 botnet malicious-activity
Suspicious Host AbuseIPDB 2024-09-28 19:37:30 2024-11-20 00:35:29 anomalous-activity
Malicious Host HoneyDB 2023-11-05 00:00:00 2023-11-05 00:00:00 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2023-10-17 13:16:16 2023-10-22 13:09:07 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2023-10-17 13:16:08 2023-10-22 13:08:58 malicious-activity
Malicious Host CIArmy 2023-10-16 07:35:59 2023-10-21 07:36:31 malicious-activity
Mail Spammer Abuseat.org 2023-10-16 07:36:01 2023-10-16 07:36:01

Tags

xworm port:7004

Whois information

AS name
AS60781 LeaseWeb Netherlands B.V.
AS registry
ripencc
AS date
2009-02-05 00:00:00
AS CIDR
95.211.0.0/16
CIDR
95.211.119.128/25, 95.211.120.0/24, 95.211.121.0/26
Registrant
LeaseWeb Netherlands B.V.
Address
[email protected]. To ensure proper processing of your abuse notification, please visit the website www.leaseweb.com/abuse for notification requirements. All police and other government agency requests must be sent to [email protected].
City
Amsterdam
Postal code
1012
Country
NL — Netherlands 🇳🇱
First indexed
2023-10-16 07:35:59
Last updated
2026-09-09 22:09:12

Malicious IPs in the same CIDR

95.211.120.98 95.211.194.14 95.211.210.72 95.211.19.179 95.211.211.182 95.211.26.159 95.211.172.88 95.211.203.214 95.211.195.196 95.211.243.182 95.211.149.153