Feed matches
1 source match
- Honeypot infrastructure watch · last seen Oct 21, 2026
AS197540 · netcup-AS - netcup GmbH, DE · 152.53.180.0/22 · AT registry
1 source match
1 observed relationship
AS197540 · 152.53.180.0/22
Snapshot pending
Not present in the current list
Popularity is neutral context, not threat evidence.
Observed relationships and popularity do not establish maliciousness.
Observed 9 times. Targeted ports: 3389. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 152.53.180.226 | ip | honeypot, historical | 2026-10-21 22:02:54 | |
Honeypot infrastructure watch: Observed 9 times. Targeted ports: 3389. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack. | ||||
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| v2202506282687353340.happysrv.de | 152.53.180.226 | Oct 2026First seen: Oct 2026 | 1 | CTIDAO DNS |
A · First seen Oct 2026
BGP origin and registry data from Team Cymru.
netcup-AS - netcup GmbH, DE
Registry country is RIR assignment data, not IP geolocation.
Checked 10/21/2026, 6:07:15 PM
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Current scanner state. Times mean last observed open, not open now.
Exposure data is being refreshed.
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence.