Autonomous system detail

AS49581

Announced

Operated by TUBE-HOSTING Ferdinand Zink trading as Tube-Hosting.

Summary

// analyst note
Small multi-tenant German budget host; attribute to tenants. Some IPs are Tor exits / anonymity endpoints, so per-IP geolocation and attribution can be unreliable.
// security note
NEUTRAL/DATED/SOURCED, multi-tenant: shared/rented budget-host IPs; abuse attaches to tenants.
IPv4 prefixes
35
~9.0K addresses
IPv6 prefixes
3
announced
Peer networks
177
62 up · 80 down
IANA block
49152-50175
Assigned by RIPE NCC
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: High

AS49581 is a German budget hosting/VPS network registered under RIPE to Ferdinand Zink trading as Tube-Hosting, based in Bad Königshofen. It is a small operator — roughly 38–39 IPv4 prefixes (~9,500 addresses) — that PeeringDB lists with a European scope and presence at DE-CIX Frankfurt, Frys-IX, ERA-IX, and others (about 14 IXes per bgp.he.net), with a public looking glass at lg.as49581.net and upstreams including GTT, aurologic, and Hurricane Electric. RPKI coverage is mostly valid. As a small multi-tenant budget host the standard caveat applies: IPs are shared and rented, so abuse attaches to tenants rather than to the operator. IPinfo flags at least one IP as a Tor exit and notes bittorrent activity on some addresses, which means a subset of IPs may be anonymity endpoints with unreliable per-IP geolocation and attribution. Beyond routine abuse-aggregator presence and that Tor-exit tag, no specific named-vendor incident report, sanctions, or law-enforcement action against the operator was found as of June 2026.

Operator
Ferdinand Zink trading as Tube-Hosting (RIPE org ORG-FZTA2-RIPE, LIR) [Confirmed] — RIPE WHOIS
Country / RIR
Germany (Bad Königshofen i. Grabfeld), RIPE [Confirmed]
Allocated
ASN created 2022-03-07 (org/maintainer 2021-11-16) [Confirmed]
Org status
active — tube-hosting.com

Security/abuse context (NEUTRAL, DATED, SOURCED — multi-tenant)

shared/rented budget-host IPs; abuse attaches to tenants. IPinfo flags at least one IP as a Tor exit ("routes anonymous traffic from the Tor network") and notes bittorrent activity as of early 2026. Beyond aggregator presence and the Tor-exit tag, no specific named-vendor incident, sanctions, or LE action against the operator found as of 2026-06-07 — ipinfo.io

Network & routing

Network type
hosting-VPS (budget host, Germany/France) [Confirmed]
Size
~38–39 IPv4 prefixes (~9,472–9,984 addrs) — bgp.he.net / bgp.tools (2026-06)
Routing/peering
upstreams GTT (AS3257), AS44592, aurologic (AS30823), Hurricane Electric (AS6939); 14 IXes (DE-CIX Frankfurt, Frys-IX, ERA-IX); RPKI mostly valid (~36–39 valid, ~1 invalid); looking glass lg.as49581.net — bgp.he.net, bgp.tools
Notable usage
budget hosting/VPS provider; PeeringDB lists Enterprise/NSP, claimed 500–1000 Gbps, mostly outbound, European scope — tube-hosting.com
Related ASNs
unknown
Analyst note
Small multi-tenant German budget host; attribute to tenants. Some IPs are Tor exits / anonymity endpoints, so per-IP geolocation and attribution can be unreliable.
[ 02 ] — Announced prefixes

What this network routes.

38 prefixes total · RIPEstat data · cached, not real-time
// IPv4 prefixes35
  1. 45.131.111.0/24/24
  2. 37.221.92.0/24/24
  3. 5.83.153.0/24/24
  4. 45.131.108.0/24/24
  5. 5.253.246.0/24/24
  6. 45.137.98.0/24/24
  7. 89.106.71.0/24/24
  8. 217.60.185.0/24/24
  9. 45.84.198.0/24/24
  10. 80.75.212.0/24/24
  11. 77.90.48.0/24/24
  12. 45.137.203.0/24/24
  13. 193.111.249.0/24/24
  14. 91.212.121.0/24/24
  15. 193.111.248.0/24/24
  16. 193.111.250.0/24/24
  17. 80.91.223.0/24/24
  18. 94.183.253.0/24/24
  19. 92.118.207.0/24/24
  20. 45.13.227.0/24/24
  21. 193.141.60.0/24/24
  22. 185.84.156.0/24/24
  23. 5.231.242.0/24/24
  24. 185.91.127.0/24/24
  25. 185.117.3.0/24/24
  26. 31.58.182.0/24/24
  27. 37.221.94.0/24/24
  28. 141.11.243.0/24/24
  29. 2.58.113.0/24/24
  30. 94.183.252.0/24/24
  31. 146.19.191.0/24/24
  32. 94.249.230.0/24/24
  33. 176.97.210.0/24/24
  34. 45.142.107.0/24/24
  35. 144.225.48.0/24/24
// IPv6 prefixes3
  1. 2a12:b200::/29/29
  2. 2a12:de40::/32/32
  3. 2a02:2fc0:11::/48/48
[ 03 ] — Notable peers & upstreams

Who it talks to.

177 observed neighbours
// Notable connectionsTop 20 of 177
ASNOperatorRole
AS44592 SkyLink SkyLink Data Center BV upstream
AS6939 HURRICANE - Hurricane Electric LLC upstream
AS3257 GTT-BACKBONE GTT Communications Inc. upstream
AS6453 AS6453 - TATA COMMUNICATIONS (AMERICA) INC upstream
AS13030 INIT7 Init7 (Switzerland) Ltd. upstream
AS34019 HIVANE Hivane Association upstream
AS5405 INTERDOTLINK Inter.link GmbH upstream
AS62403 PLETX PletX GmbH upstream
AS25091 IP-Max IP-Max SA upstream
AS39351 ESAB-AS 31173 Services AB upstream
AS20764 RASCOM-AS CJSC RASCOM upstream
AS1103 SURFNET-NL SURF B.V. upstream
AS14840 AS14840 - BR.Digital Telecom upstream
AS61049 EXASCALE Exascale Ltd upstream
AS41327 FIBERTELECOM-AS Fiber Telecom S.p.A. upstream
AS56911 ASN-WARIAN Warian S.R.L. upstream
AS50304 BLIX Blix Solutions AS upstream
AS1764 NEXTLAYER-AS Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH upstream
AS29075 IELO IELO-LIAZO SERVICES SAS upstream
AS29632 NASSIST-AS Netassist International EOOD upstream
Neighbours observed via public BGP collectors; not a complete peering list.