DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

ASN REPORT — AS49581 · Ferdinand Zink trading as Tube-Hosting

First sighted: July 9, 2023, 3 a.m. · Last sighted: Feb. 21, 2026, 2 a.m.

Risk
85 (high)
Total hits
3540
Total errors
1169
Observed IPs
66
Top country
The Netherlands
Top city
Frankfurt Am Main
Top region
Limburg

Risk

Model: v1 Computed: 2026-02-27 17:09:49
Risk score
85
High
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 165
Points 1170.00
Command injection attempts
Request content resembles attempts to execute OS commands via an application.
cmdi
Hits 42
Points 943.50
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 182
Points 796.40
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 82
Points 622.60
HTTP method anomaly
Unusual or unexpected HTTP methods observed for the target endpoints.
method
Hits 1152
Points 552.96
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 155
Points 345.60
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 1504
Points 231.80
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 10
Points 7.44
Request size anomaly
Requests are unusually large or shaped in a way that suggests abuse or automation.
request_size
Hits 1
Points 0.84

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this ASN.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
2371
3xx
0
4xx
1169
5xx
0
Unique URLs
0
Total hits
3540
First seen
July 9, 2023, 3 a.m.
Last seen
Feb. 21, 2026, 2 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Path traversal attempts trav
Request paths/parameters resemble attempts to access files outside intended directories.
hits 165 pts 1170.00
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 75 16 546.00 Sept. 18, 2023, 2:07 p.m. Aug. 17, 2025, 4:29 a.m. —
26 75 16 507.00 Sept. 18, 2023, 2:07 p.m. Aug. 17, 2025, 4:29 a.m. —
30 15 4 117.00 Sept. 24, 2024, 11:16 a.m. Aug. 17, 2025, 4:23 a.m. —
Command injection attempts cmdi
Request content resembles attempts to execute OS commands via an application.
hits 42 pts 943.50
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 15 5 357.00 June 3, 2024, 2:44 p.m. Aug. 17, 2025, 4:29 a.m. —
30 12 2 306.00 June 3, 2024, 2:44 p.m. June 5, 2024, 1:26 a.m. —
22 15 5 280.50 June 3, 2024, 2:44 p.m. Aug. 17, 2025, 4:29 a.m. —
Credential brute forcing cred
Repeated authentication attempts consistent with password guessing or credential stuffing.
hits 182 pts 796.40
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 92 3 506.00 May 15, 2024, 11:44 p.m. June 12, 2024, 3:10 p.m. —
12 44 3 290.40 May 15, 2024, 11:44 p.m. June 12, 2024, 3:10 p.m. —
0 46 3 0.00 May 15, 2024, 11:44 p.m. June 12, 2024, 3:10 p.m. —
Sensitive file probing sfp
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 82 pts 622.60
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
34 75 16 561.00 Sept. 18, 2023, 2:07 p.m. Aug. 17, 2025, 4:29 a.m. —
40 7 4 61.60 July 9, 2023, 11:28 a.m. Nov. 21, 2023, 9:15 a.m. —
HTTP method anomaly method
Unusual or unexpected HTTP methods observed for the target endpoints.
hits 1152 pts 552.96
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
8 1152 189 552.96 Aug. 28, 2023, 6:55 p.m. Jan. 28, 2026, 4:32 p.m. —
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 155 pts 345.60
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
22 16 6 63.36 May 26, 2024, 5:08 p.m. Aug. 17, 2025, 4:26 a.m. —
32 10 2 57.60 May 26, 2024, 5:08 p.m. June 12, 2024, 3:10 p.m. —
10 28 4 50.40 Nov. 18, 2023, 7:21 a.m. June 12, 2024, 3:09 p.m. —
20 8 4 28.80 May 26, 2024, 5:07 p.m. Aug. 12, 2025, 12:21 a.m. —
18 8 4 25.92 May 26, 2024, 5:07 p.m. Aug. 12, 2025, 12:21 a.m. —
16 8 4 23.04 May 26, 2024, 5:07 p.m. Aug. 12, 2025, 12:21 a.m. —
30 4 2 21.60 May 26, 2024, 5:08 p.m. June 12, 2024, 3:09 p.m. —
28 4 2 20.16 May 26, 2024, 5:08 p.m. June 12, 2024, 3:09 p.m. —
26 4 2 18.72 May 26, 2024, 5:08 p.m. June 12, 2024, 3:09 p.m. —
24 4 2 17.28 May 26, 2024, 5:08 p.m. June 12, 2024, 3:09 p.m. —
14 4 2 10.08 May 26, 2024, 5:07 p.m. June 12, 2024, 3:09 p.m. —
12 4 2 8.64 May 26, 2024, 5:07 p.m. June 12, 2024, 3:09 p.m. —
0 53 8 0.00 Nov. 18, 2023, 7:21 a.m. Aug. 17, 2025, 4:26 a.m. —
User-Agent anomaly ua
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 1504 pts 231.80
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
8 1150 245 184.00 Aug. 28, 2023, 6:55 p.m. Jan. 28, 2026, 4:32 p.m. —
6 293 91 35.16 Aug. 6, 2023, 3:19 p.m. Aug. 12, 2025, 12:20 a.m. —
10 50 10 10.00 July 9, 2023, 11:28 a.m. Sept. 7, 2025, 11:02 p.m. —
12 11 7 2.64 March 21, 2025, 5:28 a.m. Oct. 10, 2025, 4:14 a.m. —
Protocol anomaly proto
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 10 pts 7.44
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
12 7 4 6.72 Sept. 24, 2024, 11:16 a.m. Aug. 17, 2025, 4:23 a.m. —
3 3 3 0.72 Sept. 24, 2024, 11:16 a.m. Aug. 12, 2025, 12:20 a.m. —
Request size anomaly request_size
Requests are unusually large or shaped in a way that suggests abuse or automation.
hits 1 pts 0.84
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
14 1 1 0.84 Feb. 6, 2025, 12:04 p.m. Feb. 6, 2025, 12:04 p.m. —

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads a single aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this ASN snapshot (peer IPs with coordinates).

Loading map…

SUBNETS HELD BY THIS ISP

Derived from ISP snapshot peers (Option A). Grouped into IPv4 /24 and IPv6 /48 by default.
IPv4
IPv6
Limit
Loading subnets…

Interesting IPs

Top risky peers inside this ASN (latest snapshot). Sorted by risk score, then hits.

185.91.127.81 med
Open report
54 /100
Last seen 2025-05-15 03:00
Hits
202
Errors
181
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
45.131.108.170 med
Open report
47 /100
Last seen 2025-08-18 03:00
Hits
140
Errors
133
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.107 low
Open report
29 /100
Last seen 2026-01-29 02:00
Hits
149
Errors
149
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.17 low
Open report
28 /100
Last seen 2025-10-16 03:00
Hits
127
Errors
127
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
176.97.210.236 low
Open report
28 /100
Last seen 2024-06-05 03:00
Hits
12
Errors
6
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
37.221.92.222 low
Open report
27 /100
Last seen 2023-10-12 03:00
Hits
27
Errors
9
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
193.141.60.143 low
Open report
26 /100
Last seen 2024-05-27 03:00
Hits
446
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
146.19.191.138 low
Open report
25 /100
Last seen 2024-09-25 03:00
Hits
53
Errors
46
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
2.58.113.22 low
Open report
23 /100
Last seen 2024-06-13 03:00
Hits
1240
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
176.97.210.9 low
Open report
19 /100
Last seen 2025-10-23 03:00
Hits
167
Errors
167
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.166 low
Open report
19 /100
Last seen 2023-10-24 03:00
Hits
37
Errors
7
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
45.131.108.60 low
Open report
17 /100
Last seen 2025-07-03 03:00
Hits
21
Errors
14
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
176.97.210.105 low
Open report
10 /100
Last seen 2023-09-21 03:00
Hits
13
Errors
5
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.75 low
Open report
8 /100
Last seen 2024-04-24 03:00
Hits
172
Errors
86
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.46 low
Open report
8 /100
Last seen 2024-12-11 02:00
Hits
69
Errors
31
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
176.97.210.231 low
Open report
5 /100
Last seen 2024-02-12 02:00
Hits
102
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.66 low
Open report
4 /100
Last seen 2024-12-06 02:00
Hits
76
Errors
38
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.9 low
Open report
3 /100
Last seen 2024-11-29 02:00
Hits
28
Errors
14
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.115 low
Open report
2 /100
Last seen 2025-04-25 03:00
Hits
44
Errors
44
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.43 low
Open report
2 /100
Last seen 2024-11-30 02:00
Hits
24
Errors
13
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
37.221.92.56 low
Open report
1 /100
Last seen 2024-05-16 03:00
Hits
98
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
176.97.210.229 low
Open report
1 /100
Last seen 2024-02-15 02:00
Hits
36
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
193.111.248.5 low
Open report
1 /100
Last seen 2024-09-18 03:00
Hits
16
Errors
8
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
193.141.60.71 low
Open report
1 /100
Last seen 2023-09-07 03:00
Hits
6
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
45.131.111.23 low
Open report
1 /100
Last seen 2023-07-10 03:00
Hits
1
Errors
1
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.88 low
Open report
0 /100
Last seen 2025-02-07 02:00
Hits
27
Errors
5
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
45.131.108.84 low
Open report
0 /100
Last seen 2023-11-19 02:00
Hits
21
Errors
18
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
176.97.210.59 low
Open report
0 /100
Last seen 2023-08-08 03:00
Hits
20
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
193.111.248.148 low
Open report
0 /100
Last seen 2024-09-19 03:00
Hits
14
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.45 low
Open report
0 /100
Last seen 2025-05-16 03:00
Hits
12
Errors
12
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.91.223.131 low
Open report
0 /100
Last seen 2023-09-25 03:00
Hits
8
Errors
3
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.97 low
Open report
0 /100
Last seen 2025-11-07 02:00
Hits
8
Errors
8
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
193.111.248.92 low
Open report
0 /100
Last seen 2024-01-12 02:00
Hits
8
Errors
4
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.83 low
Open report
0 /100
Last seen 2025-10-11 03:00
Hits
7
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.12 low
Open report
0 /100
Last seen 2025-05-15 03:00
Hits
6
Errors
6
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.24 low
Open report
0 /100
Last seen 2024-05-01 03:00
Hits
6
Errors
3
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.91.223.159 low
Open report
0 /100
Last seen 2024-01-20 02:00
Hits
6
Errors
4
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.9 low
Open report
0 /100
Last seen 2025-05-01 03:00
Hits
6
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.13 low
Open report
0 /100
Last seen 2023-09-03 03:00
Hits
6
Errors
3
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
2.58.113.190 low
Open report
0 /100
Last seen 2023-09-29 03:00
Hits
5
Errors
1
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.64 low
Open report
0 /100
Last seen 2025-05-15 03:00
Hits
5
Errors
5
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
176.97.210.211 low
Open report
0 /100
Last seen 2024-01-20 02:00
Hits
5
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
45.131.111.142 low
Open report
0 /100
Last seen 2024-02-05 02:00
Hits
4
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
45.137.203.89 low
Open report
0 /100
Last seen 2024-11-15 02:00
Hits
4
Errors
2
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.37 low
Open report
0 /100
Last seen 2024-02-25 02:00
Hits
4
Errors
2
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
146.19.191.205 low
Open report
0 /100
Last seen 2024-01-04 02:00
Hits
4
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
146.19.191.220 low
Open report
0 /100
Last seen 2023-09-24 03:00
Hits
4
Errors
2
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
146.19.191.231 low
Open report
0 /100
Last seen 2023-09-08 03:00
Hits
4
Errors
2
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
176.97.210.17 low
Open report
0 /100
Last seen 2023-09-08 03:00
Hits
4
Errors
2
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
176.97.210.61 low
Open report
0 /100
Last seen 2023-08-28 03:00
Hits
4
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.83 low
Open report
0 /100
Last seen 2025-04-22 03:00
Hits
4
Errors
1
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
80.75.212.101 low
Open report
0 /100
Last seen 2025-08-02 03:00
Hits
3
Errors
3
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
146.19.191.69 low
Open report
0 /100
Last seen 2023-09-05 03:00
Hits
3
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
146.19.191.85 low
Open report
0 /100
Last seen 2023-10-01 03:00
Hits
3
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
2.58.113.133 low
Open report
0 /100
Last seen 2023-07-14 03:00
Hits
2
Errors
2
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
2.58.113.194 low
Open report
0 /100
Last seen 2023-11-22 02:00
Hits
2
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
37.221.92.84 low
Open report
0 /100
Last seen 2023-11-12 02:00
Hits
2
Errors
1
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
45.84.196.137 low
Open report
0 /100
Last seen 2024-01-05 02:00
Hits
2
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.15 low
Open report
0 /100
Last seen 2026-02-10 02:00
Hits
2
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.196 low
Open report
0 /100
Last seen 2024-02-03 02:00
Hits
2
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.217 low
Open report
0 /100
Last seen 2024-02-18 02:00
Hits
2
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
37.221.94.56 low
Open report
0 /100
Last seen 2024-01-29 02:00
Hits
1
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
45.142.107.157 low
Open report
0 /100
Last seen 2023-09-09 03:00
Hits
1
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.5 low
Open report
0 /100
Last seen 2025-10-17 03:00
Hits
1
Errors
1
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
185.91.127.92 low
Open report
0 /100
Last seen 2026-02-21 02:00
Hits
1
Errors
0
Country
The Netherlands
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting
193.111.248.192 low
Open report
0 /100
Last seen 2023-09-21 03:00
Hits
1
Errors
0
Country
Germany
ASN
AS49581
AS Org
Ferdinand Zink trading as Tube-Hosting