IP Address

91.198.171.204

IPv4 Public
NL NL
AS207829
Esmero Holding B.V.
3 Reports
This IP is under Observation Suspicious activity detected - monitor closely
5/10 Threat
38% Confidence
3 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Below Average Risk
NL
The Netherlands Location
Esmero Holding B.V. ASN 207829
3 Reports
Honeypot Data Source

Intermediate Threat

Threat level 5/10 for 91.198.171.204 from 3 reports.

Concerning behaviors alongside normal activity. 38% confidence.

More threatening than 49% of monitored IPs

Threat Categories

Email Spam 3

Technical Details

Email spam involves mass distribution of unwanted emails, often for advertising, phishing, or malware delivery.

Recommended Mitigations

Implement SPF, DKIM, DMARC, and use reputable email filtering services.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over less than a day indicates persistent threat actor operations.

First Observed 4. November 2026
Last Activity 4. November 2026
Recent (7 days) 3 incidents

Reputable Network

This IP is hosted on a network (ASN 207829) with generally good reputation. The ISP Esmero Holding B.V. maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Monitor for behavior pattern changes indicating escalation.

Long-term blocking recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 5/10 Medium
Medium
Activity Frequency 1/10 Very Low
Confidence Score 38% Medium Confidence

Confidence History

4. Nov 2026
38% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (3)

Date Categories Source Confidence
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%

Technical Details

Basic Information

IP Address
91.198.171.204
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
NL NL
ASN
AS207829
ISP
Esmero Holding B.V.

DNS Information

Reverse DNS
srv4.matten-online.nl
PTR Record
Yes
Connection Type
Static

Statistics

Total Reports
3
First Reported
4 Nov 2026
Last Reported
4 Nov 2026, 08:00

Comparative Analysis

How this IP compares to others in our threat intelligence database

49 %

Global Threat Ranking

This IP is more threatening than 49% of all IPs in our database.

Below Average Threat

Global Comparison

Compared against 1,324,722 reported IPs worldwide

Threat Level 5/10 avg: 6.0 -
Total Reports 3 avg: 7 --

Geographic Comparison

Compared against 21,126 IPs in NL

Threat Level 5/10 country avg: 6.3 -
Total Reports 3 country avg: 28 --
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

1,207,302 threat incidents tracked globally • Last 24h: 36,890 Logs

FEED

Top Threat Sources

  1. 01
    BR
    Brazil BR
    260,964 21.6%
  2. 02
    US
    United States US
    206,380 17.1%
  3. 03
    IN
    India IN
    103,451 8.6%
  4. 04
    CN
    China CN
    50,747 4.2%
  5. 05
    AR
    Argentina AR
    42,390 3.5%
  6. 06
    SC
    SC SC
    29,444 2.4%
  7. 07
    MX
    Mexico MX
    27,900 2.3%
  8. 08
    RU
    Russia RU
    26,954 2.2%
  9. 09
    DE
    Germany DE
    24,272 2%
  10. 10
    CO
    Colombia CO
    24,263 2%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs with similar threat level and confidence scores.

15 Related IPs
10/10 Avg Threat
38% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
147.79.114.30 10/10
Confidence 38%
Reports 4
Location FR FR
28 Oct 2026
78.141.212.188 10/10
Confidence 38%
Reports 3
Location NL NL
30 Oct 2026
102.209.58.22 10/10
Confidence 38%
Reports 4
Location KE KE
31 Oct 2026
169.58.218.3 10/10
Confidence 38%
Reports 4
Location FR FR
30 Oct 2026
138.99.37.166 10/10
Confidence 38%
Reports 4
Location CA CA
29 Oct 2026
8.234.134.68 10/10
Confidence 38%
Reports 5
Location US US
24 Oct 2026
103.158.162.171 10/10
Confidence 38%
Reports 3
Location ID ID
24 Oct 2026
193.188.123.151 10/10
Confidence 38%
Reports 3
Location BH BH
22 Oct 2026
180.149.219.185 10/10
Confidence 38%
Reports 3
Location PK PK
22 Oct 2026
102.88.114.28 10/10
Confidence 38%
Reports 3
Location NG NG
22 Oct 2026
179.238.27.227 10/10
Confidence 38%
Reports 3
Location BR BR
22 Oct 2026
152.59.143.96 10/10
Confidence 38%
Reports 3
Location IN IN
22 Oct 2026
149.3.81.153 10/10
Confidence 38%
Reports 3
Location GE GE
22 Oct 2026
41.142.34.149 10/10
Confidence 38%
Reports 3
Location MA MA
22 Oct 2026
154.244.83.219 10/10
Confidence 38%
Reports 3
Location DZ DZ
22 Oct 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "91.198.171.204",
    "threat_level": 5,
    "confidence_score": 38,
    "total_reports": 3,
    "country_code": "NL",
    "isp_name": "Esmero Holding B.V.",
    "asn": "207829",
    "first_reported": "2026-11-04 06:18:26",
    "last_reported": "2026-11-04 08:00:10",
    "exported_at": "2026-11-05T21:54:05+01:00",
    "source": "https://reportedip.com/ip/91.198.171.204/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses