Location, ISP, ASN, timezone and coordinates for 195.96.139.135.
This is the IP address of Driftnet Ltd (Netherlands Utrecht, AS211298).
This address does not match a known network type. Combine historical access patterns and contextual signals for a comprehensive judgment.
Independent offline databases (ip2region vs GeoLite2) may disagree on an IP's location; both are third-party judgments for reference only. The page's primary location prefers ip2region.
Data source: ip2region+GeoLite2 (local offline databases)
Security Assessment & Risk
Local Weather
Loading weather…
IP History Archive
- 2026-09-19 英国 Utrecht Driftnet Ltd · AS211298 End-user dynamic range
- 2026-09-09 英国 Utrecht Driftnet Ltd · AS211298 End-user dynamic range
- 2026-09-03 英国 Utrecht Driftnet Ltd · AS211298 End-user dynamic range
- 2026-09-01 英国 Utrecht Driftnet Ltd · AS211298 End-user dynamic range
- 2026-08-30 英国 Utrecht Driftnet Ltd · AS211298 End-user dynamic range
- 2026-08-29 英国 Utrecht Driftnet Ltd · AS211298 End-user dynamic range
- 2026-08-29 英国 Utrecht Driftnet Ltd · AS211298 Botnet / compromised
- 2026-08-27 英国 Utrecht Driftnet Ltd · AS211298 Botnet / compromised
- 2026-08-27 英国 Utrecht Driftnet Ltd · AS211298 Spam source
- 2026-08-26 英国 Utrecht Driftnet Ltd · AS211298 Botnet / compromised
- 2026-08-26 英国 Utrecht Driftnet Ltd · AS211298 End-user dynamic range
- 2026-08-25 英国 Utrecht Driftnet Ltd · AS211298 Botnet / compromised
- 2026-08-24 英国 Utrecht Driftnet Ltd · AS211298 End-user dynamic range
- 2026-08-24 英国 Utrecht Driftnet Ltd · AS211298 Botnet / compromised
- 2026-08-23 英国 Utrecht Driftnet Ltd · AS211298 Botnet / compromised
Deep Analysis
AS211298 (Driftnet Ltd) manages the 195.96.138.0/23 prefix block (approximately 512 addresses) in the Other category. AS211298 independently controls its routing policy, peering relationships and IP allocation — Driftnet Ltd is directly responsible for traffic to and from addresses in the 195.96.138.0/23 block. The IP 195.96.139.135 resides in Netherlands Utrecht (timezone Europe/London); its position within this block determines routing behavior and connectivity characteristics.
The reverse DNS record resolves to r5-135-87.monitoring.internet-measurement.com, which may reflect a different service layer or hosting configuration. The mismatch between PTR and provider name may cause elevated scrutiny from mail servers and WAFs during reverse verification.
As a Home broadband address, it is part of the ISP's dynamic pool — multiple users may share the same external IP over time, and geolocation accuracy is limited to the ISP's registered region rather than the individual subscriber's location. Residential IPs carry high fraud-prevention value but low geolocation precision; prioritize behavioral signals over address reputation.
Recommendation: 195.96.139.135 is a residential IP — prioritize behavioral signals over IP reputation. Monitor for abnormal request velocity, repeated failed logins or automated patterns. Avoid blanket blocking of residential IPs even when Spamhaus lists them (PBL entries are informational, not indicative of abuse).
If you operate a website or service that receives traffic from this IP, note that the same external address may represent multiple different subscribers behind CGNAT. Blocking this IP could unintentionally exclude legitimate users — consider applying rate-limiting per session rather than per-IP.
Online Tools
Port Scan
Network Diagnostics
Supports connectivity testing, port scanning and DNS latency comparison.
Open Tool →WHOIS Info
Querying WHOIS registration info...
Location Map
Map location unavailable (limited IP geolocation accuracy)