Critical Alert
Security alert: 80.158.53.170 rated 10/10 based on 7 verified incidents.
Threat profile indicates sustained malicious activity with 33% confidence rating.
More threatening than 83% of monitored IPs
IP Address
80.158.53.170
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
DE
Location
T-Systems International G...
ASN 6878
7
Reports
Honeypot
Data Source
Threat Categories
Hacking
6
SSH
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
High-Risk Network Association
This IP belongs to a network (ASN 6878) with elevated threat levels. The ISP T-Systems International GmbH hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
33%
Medium Confidence
Confidence History
1. Sep 2025
33%
Current
Stable
Trend
Security Reports (7)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 80.158.53.170
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS6878
- ISP
- T-Systems International GmbH
DNS Information
- Reverse DNS
- ecs-80-158-53-170.reverse.open-telekom-cloud.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 7
- First Reported
- 1 Sep 2025
- Last Reported
- 1 Sep 2025, 06:38
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS6878
T-Systems International GmbH
DE
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
4
Total IPs Monitored
128
Total Reports
32
Reports per IP
Network Context
This IP address belongs to T-Systems International GmbH (AS6878), which manages 4 IP addresses in our monitoring system. Out of these, 128 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
83
%
Global Threat Ranking
This IP is more threatening than 83% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,699 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
7
avg: 23
--
Network Comparison
Compared against 4 IPs in ASN 6878
Threat Level
10/10
network avg: 10.0
=
Total Reports
7
network avg: 43
--
Network T-Systems International GmbH has overall threat level 10/10
Geographic Comparison
Compared against 7,144 IPs in DE
Threat Level
10/10
country avg: 5.8
++
Total Reports
7
country avg: 61
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
6
SSH
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
187,375 threat incidents tracked globally • Last 24h: 18,936 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,136 15.5% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8%
-
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
3
Related IPs
10/10
Avg Threat
71%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
130
ISP
Hetzner Online ...
5.83.135.249
8/10
Confidence
100%
Reports
116
ISP
active 1 GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
118.193.59.142
7/10
Confidence
100%
Reports
89
ISP
UCLOUD INFORMAT...
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
80.158.109.51
10/10
Confidence
100%
Reports
73
ISP
T-Systems Inter...
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
5.83.135.102
8/10
Confidence
100%
Reports
44
ISP
AltunHOST LTD
94.26.106.209
8/10
Confidence
100%
Reports
38
ISP
dataforest GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
33%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
91.230.168.74
7/10
Confidence
33%
Reports
146
Location
US
US
192.42.116.217
10/10
Confidence
33%
Reports
48
Location
NL
NL
45.149.173.203
8/10
Confidence
33%
Reports
33
Location
US
US
82.223.50.157
10/10
Confidence
33%
Reports
28
Location
ES
ES
45.135.232.10
8/10
Confidence
33%
Reports
25
Location
RU
RU
2a09:bac5:481:25c3::3c3:3
7/10
Confidence
33%
Reports
14
Location
BD
BD
192.145.125.68
8/10
Confidence
33%
Reports
11
Location
DE
DE
2a03:2880:f814:21::
8/10
Confidence
33%
Reports
11
Location
US
US
63.250.38.185
10/10
Confidence
33%
Reports
10
Location
US
US
195.178.110.68
10/10
Confidence
33%
Reports
9
Location
BG
BG
45.61.187.196
8/10
Confidence
33%
Reports
8
Location
US
US
165.154.110.67
5/10
Confidence
33%
Reports
8
Location
HK
HK
196.251.90.172
10/10
Confidence
33%
Reports
7
Location
NL
NL
118.232.123.57
5/10
Confidence
33%
Reports
7
Location
TW
TW
195.52.43.6
10/10
Confidence
33%
Reports
7
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203