AS208294

AS208294 is a small French hosting LIR registered under RIPE to API & You SAS in Poligny. It is dormant: the ASN has not been visible in the global routing table since 12 September 2024, and when it was announced it carried uplinks from AS198330 and AS209928. The operator-identity question carried in the tasking — a "Marcus Eckert"/Tor-themed hypothesis — is not confirmed by the registry, which shows the holder as API & You SAS, so the page should lead with the registry holder and treat any individual-name attribution as low confidence. The ASN has historically been cited in Tor-relay contexts: a yui.cat relay record ("relayon0233") associates an AS208294 label with a Tor relay first seen on 26 March 2020, though that same record also shows a conflicting "CIA TRIAD SECURITY LLC" AS-name label, which signals data-source inconsistency and historical churn for this number. Because the ASN is not currently routed and the identity signals disagree, current per-IP signals are stale and operator attribution should be held at low confidence. If IPs historically associated with this ASN were Tor relays, that is lawful privacy infrastructure and per-IP attribution/geolocation would be unreliable. No sanctions or law-enforcement action was found as of June 2026; the Tor association should be framed neutrally.

Operator

API & You SAS (RIPE org ORG-AYS1-RIPE, LIR) [Confirmed] — RIPE WHOIS

Country / RIR

France (Poligny), RIPE [Confirmed]

Allocated

2022-12-29 [Confirmed]

Org status

active registry record but not announcing routes (dormant/withdrawn since 2024-09) [Confirmed]

Security/abuse context (NEUTRAL, DATED, SOURCED)

historically cited in Tor-relay datasets (yui.cat / Tor metrics) consistent with historical Tor-relay/exit hosting — lawful privacy infrastructure. The associated relay record (relayon0233) shows "first seen" 2020-03-26, last restarted 2021-08-07. ASN absent from the global routing table since 2024-09-12, so current per-IP signals are stale. Data-source disagreement on operator name (RIPE: API & You SAS, France; one Tor-metrics label: CIA TRIAD SECURITY LLC) — report what the registry shows and label the rest uncertain. No sanctions or LE action found as of 2026-06-07

Network & routing

Network type

other / hosting (small French operator); Tor-relay-associated [Confirmed registry; Tor-association Likely]

Size

NOT visible in the global routing table since 2024-09-12 (dormant/withdrawn) — bgp.he.net

Routing/peering

historical uplinks AS198330, AS209928; RPKI unknown (not currently routed) — bgp.he.net, RIPE

Notable usage

small French hosting LIR; bgp.he.net AS name resolves to "API & You SAS"; WHOIS contact datacenter@api-and-you.com, abuse AR69554-RIPE — RIPE WHOIS

Related ASNs

unknown

Analyst note

Lead with the registry holder (API & You SAS) and flag operator-identity uncertainty — the "Marcus Eckert"/Tor-themed hypothesis is NOT confirmed by RIPE. ASN not currently routed; any historical Tor-relay IPs are anonymity endpoints with unreliable per-IP attribution.