AS197540: netcup GmbH
HoneyLabs honeypots recorded 62 probes from AS197540 (netcup GmbH) in the last 7 days, originating from 8 distinct source IP addresses.
First observed 2026-11-04 05:38, most recently 2026-11-09 03:56 (UTC).
What the sensors show
Probes arrived on 6 of the 7 days in this window. The busiest day was 2026-11-09, with 24. Its 8 addresses probed 8 distinct ports. The most probed was port 6379, with 63% of the probes. One address, 202.61.242.125, sent 58% of them. None of the 8 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 6379 | 39 |
| 3389 | 9 |
| 22 | 5 |
| 6380 | 3 |
| 445 | 2 |
| 33390 | 2 |
| 80 | 1 |
| 10000 | 1 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 202.61.242.125 | 36 | Germany | |
| 152.53.32.182 | 11 | Germany | |
| 188.68.37.131 | 3 | Germany | |
| 159.195.44.215 | 3 | Germany | |
| 45.157.177.158 | 3 | Germany | |
| 159.195.10.174 | 3 | Germany | |
| 152.53.190.107 | 2 | Germany | |
| 89.58.16.22 | 1 | Austria |
Where it comes from
| Country | Probes |
|---|---|
| Germany | 61 |
| Austria | 1 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.3 | 1 |
| Mozilla/5.0 | 1 |
ASN report
ASN report
Loading