79.209.51.159
Classification: Malicious
79.209.51.159 is a malicious IP address in Stuttgart, DE. 5 sightings from 3 threat sources (Mail Spammer, SSH Attacker), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2023-02-22 02:45:46 | 2026-10-17 16:20:42 | attacker malicious-activity | |
| SSH Attacker | Blocklist.de | 2023-02-22 02:45:43 | 2023-02-23 02:46:05 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2023-02-22 02:45:46 | 2023-02-22 02:45:46 |
Tags
ssh bruteforce botWhois information
- AS name
- AS3320 Deutsche Telekom AG
- AS registry
- ripencc
- AS date
- 2007-06-06 00:00:00
- AS CIDR
- 79.192.0.0/10
- CIDR
- 79.192.0.0/11, 79.224.0.0/12, 79.240.0.0/14, 79.244.0.0/17, 79.244.128.0/18
- Registrant
- Deutsche Telekom AG
- Address
- Group Information Security, SDA/Abuse Deutsche Telekom Allee 9 DE 64295 Darmstadt
- City
- Stuttgart
- Postal code
- 70140
- Country
- DE — Germany 🇩🇪
- First indexed
- 2023-02-22 02:45:43
- Last updated
- 2026-10-17 16:20:42
Malicious IPs in the same CIDR
79.202.14.104 79.226.94.111 79.210.225.208 79.212.11.104 79.211.12.128 79.194.32.116 79.201.45.174 79.219.24.169 79.208.64.127 79.195.27.176 79.232.31.206 79.218.38.180 79.244.65.228 79.220.51.166 79.198.68.113 79.232.20.150 79.200.52.229 79.218.34.231 79.213.18.235 79.219.11.201 79.241.59.162 79.200.44.230 79.223.79.230 79.224.60.194 79.206.71.167