AS197540 — netcup GmbH Threat Intelligence

Network Threat Summary

AS197540 (netcup GmbH) has 11,030 malicious IP addresses with 163,679 abuse reports across 4 countries. First activity recorded 2022-09-25, most recent activity 2026-09-21.

Threat Profile: The primary attack categories observed from this network are reconnaissance, reputation low, aggregated threat. This network shows significant threat activity well above the global median, warranting enhanced monitoring. Affected countries include DE, AT, NL.

Risk Assessment: HIGH - Significant threat activity originates from this network. Enhanced monitoring and aggressive IP blocking are recommended.

Top Attack Categories

• Reconnaissance 56,070 reports
• Reputation Low 20,472 reports
• Aggregated Threat 6,603 reports
• Malware Infrastructure 3,452 reports
• Suspicious Activity 1,174 reports

Top Affected Countries

• DE 129,710 reports
• AT 14,895 reports
• NL 1,016 reports

Most Reported IPs

• 152.53.3.237 880 reports
• 152.53.191.99 806 reports
• 94.16.115.121 795 reports
• 89.58.26.216 773 reports
• 89.58.41.156 771 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS197540 threat data into your security stack with our REST API.

See how we classify and verify threats →