Host

2.56.97.65

Tags: Blocklisted Botnet C2 Hosting

As of our latest check on 2026-05-16, 2.56.97.65 (netcup GmbH, AS197540, Germany) had 1 open port (443) and no known CVEs. It is on 1 current blocklist.

Known CVEs on this host

1open port
0names pointing here
0known CVEs
0known exploited

Open ports and CVEs as of our latest check of this host, 2026-05-16.

No known CVEs on this host.

Network
netcup GmbH AS197540
Open ports
443 · at our latest check, 2026-05-16
Location
Germany DE
Hostname
v2202609416136517811.bestsrv.de · reverse DNS, checked 2026-10-04
Route
2.56.96.0/22 · announced by netcup GmbH AS197540 RPKI valid
Organisation
ANEXIA Cloud Solutions GmbH · Content / hosting
Registry network
DE-NETCUP-SERVER · 2.56.96.0 - 2.56.97.255 · netcup GmbH · RIPE
Abuse contact
[email protected] · for DE-NETCUP-SERVER
First seen
2026-05-16 18:02 UTC
Last seen alive
2026-05-16 18:03 UTC
Hosted domains
No host name points here

Reputation

Blocklists
blocklisted on 1 current list About blocklists
ListCategoryListed networkSince
malware command-and-control endpoints · Unknown malware botnet command and control 2.56.97.65/32:7443 2026-09-18

Services (1)

443/tcp TLS first 2026-05-16 · last 2026-05-16
TLS
TLSv1.2
Certificate for
wwwqa.microsoft.com, www.microsoft.com, staticview.microsoft.com, i.s-microsoft.com, microsoft.com, c.s-microsoft.com, privacy.microsoft.com
Issued by
Microsoft TLS G2 RSA CA OCSP 04
Valid
2026-01-22 → 2027-01-17
Raw response
]Y��!7��o�ݾBd��cqVGu�׷�DOWNGRD _�b`�?5�]��y�L�O�o��=�=�/�	�0�	�0���CS����U�FSS�0
	*�H��
0W10	UUS10U
Microsoft Corporation1(0&UMicrosoft TLS G2 RSA CA OCSP 040
260122195521Z
270117195521Z0h10	UUS10	UWA10URedmond10U
Microsoft Corporation10Uwww.microsoft.com0�"0
	*�H��
�0�
���ȣ��k�WG��pP��%�Ȥ�š�4'�cͻM��DقDGu��`a�:�wό����y�g'���8�ס�������T�B���ȊѢf�N����*Z�ϼǮ�e�#�	�ں�B>��"K0C�k�����œI˜A94ۼ ��y\k/��J${篂��3#�mR^D{������DIp7����x:�ͨ�Hȷ��.��@��^J������+d<�a3�e~�x����������P-6�j����=���\0�X0�
+�y�o�kiuD½�d��J�
Z��5���h*D׵f��O�%F0D i�?9��Gh��s�j66�פ���&�/���l 4�N�v+'�p[zW]��e3�,L��@�uY��w�h,���EiP��...<truncated>

Port history

Every port that has answered a connection on this address, and when. A port is listed as open above only when a service was identified on it. Times are UTC.