95.211.214.155📋 Copy

# Intelligence Briefing: 95.211.214.155

Classification: Low Risk

Date: 2026-07-30

Analyst: IPDebrief SOC Intelligence

## Executive Summary

Target 95.211.214.155 is a low-risk infrastructure IP associated with LEASEWEB hosting infrastructure in the Netherlands. The address exhibits no malicious indicators, zero blacklist associations, and operates as a single-service host with only RDP (port 3389) open. No security actions are recommended at this time.

## Ownership and Infrastructure

• ASN: 60781 (LEASEWEB-NL-MNT)
• Organization: LEASEWEB
• CIDR Block: 95.211.213.128/25
• RIR: RIPE
• Country: NL (Netherlands)
• Coordinates: 52.13°N, 5.29°E
• Timezone: Europe/Amsterdam

## Network Classification

• Service Type: Single-Service Host
• Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Abuse Confidence: None detected
• Threat Indicators: None
• Blacklist Status: Clean (0 listings)

## Threat Assessment

Positive Indicators:

• Zero threat indicators across all evaluated feeds
• No known attacker or spam source designation
• No Tor exit node activity
• No known campaign affiliations
• No malicious threat feed matches

Neutral Observations:

• Open port 3389 (RDP) present—standard for hosting infrastructure
• DNS records point to hostdzire.com domain
• DMARC record present but SPF not configured

## Neighborhood Analysis

• Subnet: 95.211.214.155/24
• Abuse Density: 0% (Clean classification)
• Total Siblings: 1
• Threat Siblings: 0
• Risk Distribution: No high/medium risk neighbors detected

## Historical Observation Summary

Analysis of 19 observations reveals consistent low-risk behavior:

• Recent Activity: 2026-07-30
• Persistence: 0 threat persistence days
• Malicious Classification: Not persistently malicious
• Geo Validation: Plausible with 95ms average RTT
• Route Stability: Unstable (route changes detected in last 30 days)

## DNS Analysis

• PTR Records: hosted-by.hostdzire.com
• Forward Resolution: 1 confirmed hostname
• DNSSEC: Valid
• Email Auth: DMARC configured, SPF absent

## Recommended Actions

No immediate security actions required. Standard monitoring practices advised:

1. Traffic Monitoring: Allow inbound RDP (3389) only from approved sources

2. DNS Verification: Validate forward resolution consistency for hostdzire.com domain

3. Network Baseline: Establish baseline for LEASEWEB infrastructure traffic patterns

Status: No further action required. IP maintains clean classification.

---

*Intelligence generated via IPDebrief automated analysis. Data accuracy verified through multi-signal inference.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.