80.91.223.6
Classification: Malicious
80.91.223.6 is a malicious IP address in Berlin, DE. 108 sightings from 7 threat sources (HTTP Spammer, SSH Attacker), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | StopForumSpam.com | 2026-01-27 04:47:56 | 2026-10-17 11:17:33 | attacker malicious-activity | |
| Proxy | IPWhois.io | 2026-09-08 17:34:42 | 2026-09-08 17:34:42 | anonymization proxy | |
| Proxy | FireHOL | 2023-04-02 10:39:51 | 2023-05-29 07:52:07 | anonymization | |
| ET COMPROMISED Known Compromised or Hostile Host Traffic UDP | Emerging Threats | 2023-03-28 13:48:54 | 2023-04-24 08:54:30 | malicious-activity | |
| ET COMPROMISED Known Compromised or Hostile Host Traffic TCP | Emerging Threats | 2023-03-28 13:48:52 | 2023-04-24 08:54:27 | malicious-activity | |
| SSH Attacker | Blocklist.net.ua | 2023-03-23 06:57:35 | 2023-04-01 06:23:52 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2023-03-24 05:57:21 | 2023-03-25 06:00:20 | malicious-activity | |
| Malicious Host | HoneyDB | 2023-03-25 00:00:00 | 2023-03-25 00:00:00 | malicious-activity |
Tags
anonymization abuse ssh bruteforce botWhois information
- AS name
- AS49581 Ferdinand Zink trading as Tube-Hosting
- AS registry
- ripencc
- AS date
- 2022-01-25 00:00:00
- AS CIDR
- 80.91.223.0/24
- CIDR
- 80.91.223.0/24
- Registrant
- Ferdinand Zink trading as Tube-Hosting
- Address
- Schlesierstr. 7 97631 Bad Knigshofen i. Grabfeld GERMANY
- City
- Berlin
- Postal code
- 10173
- Country
- DE — Germany 🇩🇪
- First indexed
- 2023-03-23 06:57:35
- Last updated
- 2026-10-17 11:17:33