Network Report

AS197540 — netcup GmbH

What Predax has observed across this network's address space, and what it means for traffic screening.

Addresses observed
21
100% carried a flag

About this network

netcup GmbH (AS197540) is commercial hosting space — servers rented by whoever pays for them, not connections an ISP assigns to homes. Traffic from the 21 addresses we have observed here is almost always software: monitors, API clients, scrapers, and services someone deployed.

Of those addresses, 100% carry the datacenter flag and 1 is a Tor exit, and 1 (5%) carried a notable risk score of 40 or higher when last checked. Hosting space is neutral in itself — the same racks hold uptime monitors and credential-stuffing scripts — so the risk share, not the datacenter flag, is the number to read.

Observed
21
distinct addresses checked
Flagged
100%
21 with any threat flag
Notable risk
5%
1 scoring 40+
Countries
2
where addresses geolocate

Flag composition

Share of observed addresses carrying each classification when last checked.

VPN00%
Proxy00%
Tor15%
Datacenter21100%

Geography

Germany
15
Austria
6
Most-seen cities

Karlsruhe (Nordweststadt) (DE) · Nuremberg (DE) · Frankfurt am Main (DE) · Klagenfurt (AT) · Vienna (AT)

Observation window

Addresses on this network have been looked up through Predax between April 20, 2026 and September 13, 2026. Each figure on this page reflects an address's most recent check, not a permanent record.

Geographically, the observed addresses span 2 countries, with the largest share (15 of 21) geolocating to Germany.

Should you screen traffic from this network?

Traffic from hosting space is rarely a person on a browser, so friction here is cheap: rate limits, bot checks and challenges cost you almost no real visitors. Reserve outright blocks for addresses whose individual score justifies it.

Before blocking an address here, check whether it belongs to a service you actually rely on — uptime monitors, payment webhooks and integrations all live in networks like this one.

Addresses observed on this network

A sample of the most-looked-up addresses — each links to its full report. Capped at 12.

Check Another IP