Critical Alert
Security alert: 80.158.109.51 rated 10/10 based on 83 verified incidents.
Threat profile indicates sustained malicious activity with 15% confidence rating.
More threatening than 93% of monitored IPs
IP Address
80.158.109.51
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
DE
Location
T-Systems International G...
ASN 6878
83
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Hacking
3
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
High-Risk Network Association
This IP belongs to a network (ASN 6878) with elevated threat levels. The ISP T-Systems International GmbH hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
10%
Low Confidence
Confidence History
10. May 2026 - 13. Jul 2026
15%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Exploited Host SSH Hacking | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 80.158.109.51
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS6878
- ISP
- T-Systems International GmbH
DNS Information
- Reverse DNS
- ecs-80-158-109-51.reverse.open-telekom-cloud.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 83
- First Reported
- 22 Mar 2026
- Last Reported
- 13 Jul 2026, 01:34
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS6878
T-Systems International GmbH
DE
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
4
Total IPs Monitored
128
Total Reports
32
Reports per IP
Network Context
This IP address belongs to T-Systems International GmbH (AS6878), which manages 4 IP addresses in our monitoring system. Out of these, 128 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 867,282 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
83
avg: 9
++
Network Comparison
Compared against 5 IPs in ASN 6878
Threat Level
10/10
network avg: 10.0
=
Total Reports
83
network avg: 37
++
Network T-Systems International GmbH has overall threat level 10/10
Geographic Comparison
Compared against 19,247 IPs in DE
Threat Level
10/10
country avg: 7.3
+
Total Reports
83
country avg: 29
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
16 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
77
Hacking
21
Exploited Host
10
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 11 reports
Weekly Activity
Geographic Threat Distribution
788,264 threat incidents tracked globally • Last 24h: 36,007 Logs
FEED
Top Threat Sources
-
01
United States153,497 19.5% -
02
Brazil113,837 14.4%
-
03
India92,531 11.7%
-
04
China47,363 6%
-
05
SC29,282 3.7%
-
06
Germany19,262 2.4%
-
07
Pakistan18,978 2.4%
-
08
Netherlands18,597 2.4%
-
09
Argentina16,867 2.1%
-
10
Indonesia15,708 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
4
Related IPs
10/10
Avg Threat
16%
Avg Confidence
4
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,215
ISP
Feo Prest SRL
193.24.211.218
10/10
Confidence
100%
Reports
135
ISP
Data Campus Lim...
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
35.246.213.80
8/10
Confidence
100%
Reports
42
ISP
Google LLC
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
35.234.68.116
10/10
Confidence
100%
Reports
38
ISP
Google LLC
34.159.0.93
8/10
Confidence
100%
Reports
37
ISP
Google LLC
34.185.254.148
8/10
Confidence
100%
Reports
27
ISP
Google LLC
2a0f:ca80:b00b:eff9::5
8/10
Confidence
100%
Reports
17
ISP
TechTies Inc.
167.233.195.205
8/10
Confidence
100%
Reports
15
ISP
Hetzner Online ...
194.94.79.252
8/10
Confidence
100%
Reports
15
ISP
Verein zur Foer...
213.209.159.42
10/10
Confidence
100%
Reports
14
ISP
Feo Prest SRL
57.129.120.143
8/10
Confidence
99%
Reports
20
ISP
OVH SAS
104.248.132.98
10/10
Confidence
99%
Reports
18
ISP
DigitalOcean, LLC
45.140.42.24
10/10
Confidence
99%
Reports
16
ISP
Clouvider Limited
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
15%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.22.107.47
10/10
Confidence
15%
Reports
3
Location
SG
SG
94.73.39.231
10/10
Confidence
15%
Reports
3
Location
ES
ES
154.47.20.206
10/10
Confidence
15%
Reports
3
Location
JP
JP
2a00:1678:2470:29:a00f:a550:f004:3728
10/10
Confidence
15%
Reports
4
Location
NL
NL
34.125.41.142
10/10
Confidence
15%
Reports
3
Location
US
US
104.196.115.188
10/10
Confidence
15%
Reports
5
Location
US
US
35.196.113.126
10/10
Confidence
15%
Reports
5
Location
US
US
20.206.73.37
10/10
Confidence
15%
Reports
3
Location
BR
BR
102.88.109.27
10/10
Confidence
15%
Reports
3
Location
NG
NG
136.117.234.4
10/10
Confidence
15%
Reports
3
Location
US
US
2405:201:6800:e008:a0f1:38b5:d84a:766d
10/10
Confidence
15%
Reports
3
Location
IN
IN
103.65.236.217
10/10
Confidence
15%
Reports
7
Location
ID
ID
2a02:c7c:6e08:d100:bd3c:ad2f:16bf:950c
10/10
Confidence
15%
Reports
3
Location
GB
GB
154.110.203.58
10/10
Confidence
15%
Reports
3
Location
TN
TN
49.43.228.12
10/10
Confidence
15%
Reports
3
Location
IN
IN