Run environment check
6 dimensions · leaks / fingerprint / consistency

ASN lookup result for AS197540 netcup GmbH — network size, BGP routing and registration

DEAS197540netcup GmbHIDC
WHOIS Topology

Germany · RIPE NCCnetcup.eu

RPKI filteringTor relaysVPN servicesVPS hosting

IPv4 addresses

214,272

258 announced prefixes

IPv6 addresses

3.96 × 10²⁹

16 announced prefixes

BGP neighbours

…

CAIDA rank

#13,179

Customer cone 1 ASNs

Estimated users

246K

APNIC Labs estimate

RPKI

99% valid

0 invalid · 3 not covered

Average purity

68

286 sampled IPs

IXPs / facilities

0 / 2

Operator self-reported

History

How prefixes were announced and changed hands, registration changes, and outage or hijack incidents.

Loading routing history…

IP ranges

Currently announced prefixes with their RIR registration and geolocation.

PrefixRPKIRegistrationGeolocationAddresses
37.120.160.0/19ValidDEDE-NETCUP-20120213RIPEDENuremberg8,192
5.45.96.0/20ValidDEDE-NETCUP-20120524RIPEDENuremberg4,096
37.120.160.0/20ValidDEDE-NETCUP-20120213RIPEDENuremberg4,096
46.38.224.0/20ValidDEDE-NETCUP-20101202RIPEDENuremberg4,096
152.53.128.0/20ValidDEAT-ANXHOLDING2-20210908RIPEDENuremberg4,096
188.68.32.0/20ValidDEDE-NETCUP-20090825RIPEDENuremberg4,096
202.61.224.0/20ValidDENETCUP-NETWORK-202-61-224-0-20RIPEDENuremberg4,096
37.120.184.0/21ValidDEDE-NETCUP-20120213RIPEDENuremberg2,048
37.221.192.0/21ValidDEDE-NETCUP-20120410RIPEDENuremberg2,048
46.38.232.0/21ValidDEDE-NETCUP-20101202RIPEDENuremberg2,048
46.38.240.0/21ValidDEDE-NETCUP-20101202RIPEDENuremberg2,048
89.58.16.0/21ValidDEDE-NETCUP-20051123RIPEATViennaCross-border2,048
188.68.48.0/21ValidDEDE-NETCUP-20090825RIPEDENuremberg2,048
2.56.96.0/22ValidDEDE-NETCUP-20190313RIPEDENuremberg1,024
5.45.96.0/22ValidDENETCUP_NET-8RIPEDENuremberg1,024
5.45.100.0/22ValidDENETCUP_NET-9RIPEDENuremberg1,024
5.45.104.0/22ValidDENETCUP_NET-10RIPEDENuremberg1,024
5.45.108.0/22ValidDENETCUP_NET-11RIPEDENuremberg1,024
5.181.48.0/22ValidDEDE-NETCUP-20190402RIPEDENuremberg1,024
5.252.224.0/22ValidDEDE-NETCUP-20190206RIPEDENuremberg1,024

/24 block profile

One square per /24: colour shows the risk type, shade how many addresses are flagged, stripes mark datacenter blocks. Click a square to see all 256 addresses.

/24s with data 346 / 837 （41%） · flagged 305

No risk flagsDatacenter (no flags)ProxyVPNAbuse / blocklistTorDarker = more flagged addresses; dashed = block screen only

152.53.128.0/2010/16 with data · 9 flagged

37.120.160.0/199/32 with data · 8 flagged

188.68.32.0/208/16 with data · 6 flagged

5.45.96.0/206/16 with data · 6 flagged

202.61.224.0/205/16 with data · 5 flagged

37.221.192.0/215/8 with data · 5 flagged

46.38.224.0/204/16 with data · 3 flagged

94.16.112.0/224/4 with data · 4 flagged

152.53.0.0/224/4 with data · 4 flagged

152.53.104.0/224/4 with data · 4 flagged

152.53.180.0/224/4 with data · 4 flagged

152.53.184.0/224/4 with data · 4 flagged

Hover a square for its numbers; click to see all 256 addresses.

Each prefix shows its 64 /24s with the most data. Built daily from lookups, neighbour sampling, public lists and block screening.

IP reputation

IPs from this network that CleanIP has analysed: purity, abuse reports and the riskiest /24 blocks.

Purity distribution

85–100 170–84 19750–69 610–49 27

3.15%

Share of IPv4 reported or blocklisted

6,729

Listed IPs

286

Analysed IPs

Flagged = VPN, proxy, Tor or purity below 50. Samples come from user lookups and neighbour sampling, not every address in this network.

Geography

Where this network’s IPv4 addresses are located.

  • DE Germany
  • AT Austria
  • NL Netherlands
  • US United States
Scope
Regional
In registered country
87.1%

Estimated by sampling IPv4 ranges against a geolocation database.

Traffic observation

AS197540 · Last 7 days
Mobile vs. Desktop
Desktop 91.7%Mobile 8.3%
Desktop91.7%Mobile8.3%
Bot vs. Human
Human 6.6%Bot 93.4%
Human6.6%Bot93.4%

Adoption & Usage

Adoption and usage of key protocols

Internet Protocol (IP) Version
IPv4 60.7%IPv6 39.3%39.3%IPv6
IPv460.7%IPv639.3%
HTTP Version
HTTP/1.x
55.6%HTTP/2
41.4%HTTP/3
3.0%
HTTP vs. HTTPS
86.5% HTTPS (encrypted)
Plain HTTP 13.5%
TLS Version
TLS 1.0/1.1< 0.1%TLS 1.24.2%TLS 1.392.3%QUIC3.5%

Security & Attacks

Insights into network and application layer attack traffic

Layer 7 Attacks
GET
77.5%POST
20.9%HEAD
1.5%Other
< 0.1%

BGP Announcements

Hourly BGP route announcements over the last 7 days

3,143,742
7-day total
178,603
Hourly peak

Data: Cloudflare Radar, licensed under CC BY-NC 4.0

Activity

Hourly traffic over the last 7 days, normalized to this network’s peak.

Fairly flat around the clock, typical of server or hosting networks.

00061218
Mon
Tue
Wed
Thu
Fri
Sat
Sun
Times in UTCLessMore
Peak hour
06:00–07:00
Active hours
24 hrs
Weekend vs weekday
Weekdays ≈ weekends
Busiest day
Fri

Datacenter Presence

Loading…

BGP upstreams and neighbours

AS197540Standalone page
Loading upstreams and neighbours…

WHOIS record

The registry’s record for this AS number: holder, status, dates and contacts.

Sources

Where the information on this page comes from and when it was updated.

InformationSourceUpdated
Registered countryRIR daily delegation statistics2026-10-22
Registered address & allocation dateRIR registration data (RDAP)2026-10-03
Organization & company countryAS-to-organization data2026-10-21
Network typeCleanIP ASN canon2026-10-22
Exchanges & facilitiesOperator self-reported interconnection data2026-10-21
Announced prefixes & BGP neighboursPublic BGP routing data2026-10-22
IPv4 geographyGeolocation database—
RPKI validationRPKI ROA validation data2026-10-22
Rank & customer coneCAIDA AS Rank2026-10-01
Estimated users (APNIC)APNIC Labs user estimates2026-10-19
Network tagsPublic routing data community tags2026-10-22
IP reputationCleanIP lookups and neighbour sampling—

The page is taking longer to start. Some resources may not have loaded. Please try reloading.

Reload page

Multi-source cross-checks · In-house reputation data · Real data only

mimetic
mimetic
mimetic