Elevated Risk
Elevated threat level 8/10 for IP 91.92.241.226 from 62 reported incidents.
Behavioral profile indicates cyber threat activity with 63% confidence.
More threatening than 78% of monitored IPs
IP Address
91.92.241.226
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
NL
Location
metaspinner net GmbH
ASN 209800
62
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
29
Email Spam
1
Hacking
1
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
3. June 2026
Last Activity
3. June 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 209800) with generally good reputation. The ISP metaspinner net GmbH maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
4/10
Low
Confidence Score
62%
High Confidence
Confidence History
13. Nov 2025 - 3. Jun 2026
63%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Email Spam Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 91.92.241.226
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
NL
- ASN
- AS209800
- ISP
- metaspinner net GmbH
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 62
- First Reported
- 13 Nov 2025
- Last Reported
- 3 Jun 2026, 21:41
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS209800
metaspinner net GmbH
NL
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
29
Total IPs Monitored
3,144
Total Reports
108.4
Reports per IP
Network Context
This IP address belongs to metaspinner net GmbH (AS209800), which manages 29 IP addresses in our monitoring system. Out of these, 3,144 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,388 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
62
avg: 23
++
Network Comparison
Compared against 29 IPs in ASN 209800
Threat Level
8/10
network avg: 9.1
=
Total Reports
62
network avg: 121
-
Network metaspinner net GmbH has overall threat level 1/10
Geographic Comparison
Compared against 4,356 IPs in NL
Threat Level
8/10
country avg: 6.0
+
Total Reports
62
country avg: 95
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
3 Jun 2026
1 reports
Daily Average
0
reports/day
Most Active
Thursday
61 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
61
Email Spam
1
Hacking
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 17 reports
Weekly Activity
Geographic Threat Distribution
187,137 threat incidents tracked globally • Last 24h: 19,005 Logs
FEED
Top Threat Sources
-
01
United States38,445 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,141 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,538 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.5/10
Avg Threat
72%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
158.94.209.202
10/10
Confidence
81%
Reports
51
Location
DE
DE
158.94.209.195
10/10
Confidence
80%
Reports
80
Location
DE
DE
158.94.209.199
10/10
Confidence
80%
Reports
63
Location
DE
DE
158.94.209.201
10/10
Confidence
79%
Reports
148
Location
DE
DE
91.92.242.56
10/10
Confidence
72%
Reports
50
Location
NL
NL
91.92.241.242
10/10
Confidence
71%
Reports
425
Location
NL
NL
91.92.240.131
10/10
Confidence
71%
Reports
100
Location
DE
DE
91.92.240.239
10/10
Confidence
71%
Reports
77
Location
DE
DE
91.92.240.237
10/10
Confidence
71%
Reports
73
Location
DE
DE
91.92.241.224
10/10
Confidence
71%
Reports
70
Location
NL
NL
91.92.241.206
10/10
Confidence
71%
Reports
56
Location
NL
NL
91.92.241.204
10/10
Confidence
71%
Reports
43
Location
NL
NL
91.92.240.127
10/10
Confidence
71%
Reports
42
Location
DE
DE
91.92.241.246
10/10
Confidence
71%
Reports
29
Location
NL
NL
91.92.240.133
10/10
Confidence
71%
Reports
28
Location
DE
DE
91.92.240.132
10/10
Confidence
71%
Reports
22
Location
DE
DE
91.92.240.199
10/10
Confidence
69%
Reports
19
Location
DE
DE
91.92.242.109
10/10
Confidence
68%
Reports
876
Location
NL
NL
158.94.208.11
5/10
Confidence
64%
Reports
100
Location
DE
DE
158.94.209.59
5/10
Confidence
61%
Reports
917
Location
DE
DE
IPs from the same subnet range, likely same network segment.
20
Related IPs
7.8/10
Avg Threat
53%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
91.92.241.59
10/10
Confidence
94%
Reports
348
Location
NL
NL
91.92.241.5
10/10
Confidence
85%
Reports
43
Location
NL
NL
91.92.241.242
10/10
Confidence
71%
Reports
425
Location
NL
NL
91.92.241.224
10/10
Confidence
71%
Reports
70
Location
NL
NL
91.92.241.206
10/10
Confidence
71%
Reports
56
Location
NL
NL
91.92.241.204
10/10
Confidence
71%
Reports
43
Location
NL
NL
91.92.241.246
10/10
Confidence
71%
Reports
29
Location
NL
NL
91.92.241.188
10/10
Confidence
63%
Reports
7
Location
NL
NL
91.92.241.148
10/10
Confidence
60%
Reports
7,812
Location
BG
BG
91.92.241.106
7/10
Confidence
53%
Reports
4
Location
NL
NL
91.92.241.196
8/10
Confidence
52%
Reports
4
Location
NL
NL
91.92.241.10
10/10
Confidence
43%
Reports
3
Location
NL
NL
91.92.241.118
6/10
Confidence
41%
Reports
2
Location
NL
NL
91.92.241.35
0/10
Confidence
40%
Reports
2
Location
NL
NL
91.92.241.44
7/10
Confidence
31%
Reports
3
Location
NL
NL
91.92.241.47
7/10
Confidence
31%
Reports
3
Location
NL
NL
91.92.241.45
7/10
Confidence
31%
Reports
3
Location
NL
NL
91.92.241.119
7/10
Confidence
30%
Reports
2
Location
NL
NL
91.92.241.232
0/10
Confidence
30%
Reports
2
Location
NL
NL
91.92.241.186
7/10
Confidence
30%
Reports
1
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
52.232.35.131
8/10
Confidence
100%
Reports
106
ISP
Microsoft Corpo...
158.94.210.72
8/10
Confidence
100%
Reports
77
ISP
Omegatech LTD
45.148.10.166
10/10
Confidence
100%
Reports
35
ISP
Techoff Srv Lim...
45.148.10.249
10/10
Confidence
100%
Reports
27
ISP
Techoff Srv Lim...
45.148.10.5
8/10
Confidence
100%
Reports
26
ISP
Techoff Srv Lim...
45.148.10.62
8/10
Confidence
100%
Reports
19
ISP
Techoff Srv Lim...
93.119.1.128
8/10
Confidence
100%
Reports
18
ISP
Signet B.V.
77.246.100.120
10/10
Confidence
100%
Reports
17
ISP
Servers Tech Fzco
20.224.168.82
10/10
Confidence
100%
Reports
16
ISP
Microsoft Corpo...
45.154.98.96
8/10
Confidence
100%
Reports
15
ISP
1337 Services GmbH
46.151.182.172
8/10
Confidence
100%
Reports
13
ISP
Ghosty Networks...
83.83.112.125
10/10
Confidence
100%
Reports
12
ISP
Vodafone Libert...
213.176.16.100
10/10
Confidence
99%
Reports
44
ISP
Global Connecti...
107.189.27.179
10/10
Confidence
99%
Reports
43
ISP
RouterHosting LLC
45.94.31.24
8/10
Confidence
99%
Reports
34
ISP
1337 Services GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
63%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
3.130.96.91
8/10
Confidence
63%
Reports
43,462
Location
US
US
3.134.148.59
8/10
Confidence
63%
Reports
14,980
Location
US
US
92.118.39.87
10/10
Confidence
63%
Reports
14,713
Location
US
US
87.120.191.13
10/10
Confidence
63%
Reports
13,131
Location
US
US
3.137.73.221
8/10
Confidence
63%
Reports
10,228
Location
US
US
3.132.23.201
8/10
Confidence
63%
Reports
9,576
Location
US
US
3.149.59.26
8/10
Confidence
63%
Reports
8,795
Location
US
US
167.250.224.25
10/10
Confidence
63%
Reports
8,244
Location
BR
BR
176.117.107.74
10/10
Confidence
63%
Reports
5,739
Location
NL
NL
142.202.188.211
10/10
Confidence
63%
Reports
4,136
Location
US
US
176.117.107.91
10/10
Confidence
63%
Reports
3,994
Location
NL
NL
196.251.70.234
10/10
Confidence
63%
Reports
3,796
Location
SC
SC
45.88.186.70
8/10
Confidence
63%
Reports
3,632
Location
NL
NL
2.57.122.209
10/10
Confidence
63%
Reports
2,573
Location
RO
RO
64.188.91.248
10/10
Confidence
63%
Reports
2,232
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203