80.91.223.132

Classification: Malicious

80.91.223.132 is a malicious IP address in Berlin, DE. 198 sightings from 7 threat sources (Proxy, HTTP Spammer), last seen 2026-10-16.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
HTTP Attacker Blocklist.net.ua 2026-10-16 16:15:36 2026-10-16 16:15:36 attacker malicious-activity
HTTP Spammer StopForumSpam.com 2026-06-30 09:13:11 2026-10-11 11:16:36 attacker malicious-activity
Proxy IPWhois.io 2026-09-09 21:07:40 2026-09-09 21:07:40 anonymization proxy
Proxy FireHOL 2023-01-01 03:44:12 2025-10-06 11:39:25 anonymization
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2023-09-20 13:19:45 2023-09-20 13:19:45 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2023-09-20 13:19:37 2023-09-20 13:19:37 malicious-activity
Malicious Host CIArmy 2023-09-19 00:29:25 2023-09-20 07:44:57 malicious-activity
Anonymizer FireHol 2022-12-29 16:22:28 2022-12-30 03:52:29 anonymization

Tags

anonymization bot abuse

Whois information

AS name
AS49581 Ferdinand Zink trading as Tube-Hosting
AS registry
ripencc
AS date
2022-01-25 00:00:00
AS CIDR
80.91.223.0/24
Registrant
Ferdinand Zink trading as Tube-Hosting
City
Berlin
Postal code
10173
Country
DE — Germany 🇩🇪
First indexed
2022-12-29 16:22:28
Last updated
2026-10-16 16:15:36

Malicious IPs in the same CIDR

80.91.223.6 80.91.223.132