Critical Alert
Security alert: 80.158.109.51 rated 10/10 based on 73 verified incidents.
Threat profile indicates sustained malicious activity with 100% confidence rating.
More threatening than 100% of monitored IPs
IP Address
80.158.109.51
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
DE
Location
T-Systems International G...
ASN 6878
73
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Hacking
4
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
10. May 2026
Last Activity
6. June 2026
Recent (7 days)
6 incidents
High-Risk Network Association
This IP belongs to a network (ASN 6878) with elevated threat levels. The ISP T-Systems International GmbH hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
100%
Verified
Confidence History
5. May 2026 - 6. Jun 2026
100%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking Exploited Host | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 80.158.109.51
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS6878
- ISP
- T-Systems International GmbH
DNS Information
- Reverse DNS
- ecs-80-158-109-51.reverse.open-telekom-cloud.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 73
- First Reported
- 22 Mar 2026
- Last Reported
- 6 Jun 2026, 09:12
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS6878
T-Systems International GmbH
DE
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
4
Total IPs Monitored
128
Total Reports
32
Reports per IP
Network Context
This IP address belongs to T-Systems International GmbH (AS6878), which manages 4 IP addresses in our monitoring system. Out of these, 128 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 198,703 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
73
avg: 23
++
Network Comparison
Compared against 4 IPs in ASN 6878
Threat Level
10/10
network avg: 10.0
=
Total Reports
73
network avg: 43
++
Network T-Systems International GmbH has overall threat level 10/10
Geographic Comparison
Compared against 7,130 IPs in DE
Threat Level
10/10
country avg: 5.8
++
Total Reports
73
country avg: 61
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
3 reports
Daily Average
0.7
reports/day
Most Active
Tuesday
14 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
67
Hacking
18
Exploited Host
8
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
186,446 threat incidents tracked globally • Last 24h: 18,633 Logs
FEED
Top Threat Sources
-
01
United States38,320 20.6% -
02
India28,851 15.5% -
03
China25,960 13.9% -
04
Brazil10,202 5.5% -
05
Germany7,128 3.8%
-
06
Singapore6,451 3.5% -
07
Indonesia5,496 2.9% -
08
Russia4,690 2.5% -
09
Pakistan4,632 2.5% -
10
Netherlands4,350 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
3
Related IPs
10/10
Avg Threat
49%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
77.90.185.37
8/10
Confidence
100%
Reports
186
ISP
Inside Network LTD
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
116
ISP
Hetzner Online ...
5.83.135.249
8/10
Confidence
100%
Reports
116
ISP
active 1 GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
118.193.59.142
7/10
Confidence
100%
Reports
89
ISP
UCLOUD INFORMAT...
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
5.83.135.102
8/10
Confidence
100%
Reports
44
ISP
AltunHOST LTD
94.26.106.209
8/10
Confidence
100%
Reports
38
ISP
dataforest GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
78.142.18.172
8/10
Confidence
100%
Reports
571
Location
BG
BG
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
141.98.11.117
8/10
Confidence
100%
Reports
513
Location
LT
LT
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
123.30.233.13
8/10
Confidence
100%
Reports
318
Location
VN
VN
103.76.120.219
8/10
Confidence
100%
Reports
310
Location
ID
ID
123.30.233.12
8/10
Confidence
100%
Reports
303
Location
VN
VN
116.118.2.113
8/10
Confidence
100%
Reports
296
Location
VN
VN
87.121.84.30
8/10
Confidence
100%
Reports
295
Location
US
US
92.205.109.21
8/10
Confidence
100%
Reports
287
Location
FR
FR
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203