Critical Alert
Security alert: 80.158.109.51 rated 10/10 based on 61 verified incidents.
Threat profile indicates sustained malicious activity with 100% confidence rating.
More threatening than 100% of monitored IPs
IP Address
80.158.109.51
IPv4
Public
DE
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Top 5% Most Dangerous
DE
Location
T-Systems International G...
ASN 6878
61
Reports
Honeypot
Data Source
Threat Categories
SSH
28
Hacking
8
Exploited Host
4
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
28. April 2026
Last Activity
21. May 2026
Recent (7 days)
4 incidents
High-Risk Network Association
This IP belongs to a network (ASN 6878) with elevated threat levels. The ISP T-Systems International GmbH hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
28. Apr 2026 - 21. May 2026
100%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking Exploited Host | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 80.158.109.51
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS6878
- ISP
- T-Systems International GmbH
DNS Information
- Reverse DNS
- ecs-80-158-109-51.reverse.open-telekom-cloud.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 61
- First Reported
- 22 Mar 2026
- Last Reported
- 21 May 2026, 12:40
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS6878
T-Systems International GmbH
DE
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
4
Total IPs Monitored
128
Total Reports
32
Reports per IP
Network Context
This IP address belongs to T-Systems International GmbH (AS6878), which manages 4 IP addresses in our monitoring system. Out of these, 128 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
⚠️ Network Warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 153,782 reported IPs worldwide
Threat Level
10/10
avg: 4.8
++
Total Reports
61
avg: 28
++
Network Comparison
Compared against 4 IPs in ASN 6878
Threat Level
10/10
network avg: 10.0
=
Total Reports
61
network avg: 40
++
Network T-Systems International GmbH has overall threat level 10/10
Geographic Comparison
Compared against 6,142 IPs in DE
Threat Level
10/10
country avg: 5.3
++
Total Reports
61
country avg: 68
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Apr 2026
4 reports
Daily Average
1
reports/day
Most Active
Sunday
12 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
55
Hacking
18
Exploited Host
8
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
145,232 threat incidents tracked globally • Last 24h: 19,885 Logs
FEED
Top Threat Sources
-
01
United States32,782 22.6% -
02
China23,507 16.2% -
03
India15,659 10.8% -
04
Brazil7,025 4.8% -
05
Germany6,142 4.2%
-
06
Singapore5,763 4% -
07
Indonesia4,027 2.8% -
08
Netherlands3,758 2.6% -
09
Russia3,704 2.6% -
10
United Kingdom3,678 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
3
Related IPs
10/10
Avg Threat
49%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
118.193.59.142
7/10
Confidence
100%
Reports
72
ISP
UCLOUD INFORMAT...
95.89.149.179
10/10
Confidence
100%
Reports
67
ISP
Vodafone GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
213.209.159.151
10/10
Confidence
100%
Reports
28
ISP
Dgn Teknoloji A.s.
207.154.230.149
10/10
Confidence
100%
Reports
25
ISP
DigitalOcean, LLC
84.233.216.142
8/10
Confidence
100%
Reports
16
ISP
Datacamp Limited
83.97.23.180
8/10
Confidence
100%
Reports
14
ISP
M247 Europe SRL
89.163.151.66
8/10
Confidence
100%
Reports
14
ISP
WIIT AG
130.12.181.102
8/10
Confidence
99%
Reports
1,225
ISP
Netiface LLC
130.12.181.101
8/10
Confidence
99%
Reports
1,208
ISP
Netiface LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
93.123.109.114
10/10
Confidence
100%
Reports
723
Location
BG
BG
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
222.165.190.235
8/10
Confidence
100%
Reports
491
Location
LK
LK
208.109.188.137
8/10
Confidence
100%
Reports
468
Location
US
US
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
416
Location
US
US
182.180.154.234
8/10
Confidence
100%
Reports
395
Location
PK
PK
74.91.224.220
8/10
Confidence
100%
Reports
393
Location
SG
SG
141.98.11.117
8/10
Confidence
100%
Reports
384
Location
LT
LT
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
103.76.120.219
8/10
Confidence
100%
Reports
310
Location
ID
ID
78.142.18.172
8/10
Confidence
100%
Reports
297
Location
BG
BG
116.118.2.113
8/10
Confidence
100%
Reports
296
Location
VN
VN
87.121.84.30
8/10
Confidence
100%
Reports
295
Location
US
US