AS49581

AS49581 is an actively-routed German budget hosting and VPS network registered to Ferdinand Zink, trading as Tube-Hosting, headquartered in Bad Königshofen, Germany. As observed by RouteViews (route-views2 and route-views6 collectors) at 2026-08-15 02:00 UTC, it originates 36 IPv4 prefixes (9,216 addresses) and 3 IPv6 prefixes — a small, single-operator hosting network that is fully live, not dormant or legacy.

The operator runs a self-described budget, prepaid hosting business — vServer and VPS via LXC and KVM virtualization, KVM root servers, dedicated servers, and colocation — marketed on no-contract, prepaid terms. Its FAQ lists common customer workloads such as Minecraft and Teamspeak game servers, MySQL databases, and WordPress or Nextcloud installs, with DDoS protection bundled into every server at no extra cost. The company states it was founded in March 2015 and identifies itself as a RIPE NCC member (LIR).

Infrastructure sits at the SkyLink data center in Eygelshoven, Netherlands, which the operator describes as positioned between the DE-CIX and AMS-IX exchange regions with dark-fiber links to Frankfurt and Amsterdam, plus a public looking glass at lg.as49581.net. The same RouteViews snapshot recorded 85 distinct BGP neighbours, of which a 32-entry sample is listed below; AS_PATH adjacency carries no transit/customer direction, so specific upstream relationships, IX memberships, peering policy, RPKI validation, AS rank, and customer cone size are all Unknown.

Org status is active, with the operator's own site pages live and current as of an August 2026 review. The ASN's allocation date is Unknown, and no source establishes a related ASN under the same operator with confidence.

Exposure

Multi-tenant budget VPS/dedicated/colocation host — IPs are shared and rented, so abuse activity typically attaches to individual tenants rather than to the operator itself.

Spam signal

CleanTalk lists 11 currently spam-active IPs of roughly 697 tracked (about 2.70% overall), concentrated in three prefixes at about 1.00% versus 0.00% elsewhere, first flagged November 2025 and still active in August 2026 — cleantalk.org/blacklists/as49581.

Tor relays

Four Tor relays run on this ASN's Dutch address space, all classified as middle relays rather than exit relays as of an August 2026 check, first seen 2025-11-16 — nusenu.github.io/OrNetStats.

Anonymity/P2P tags

ipinfo.io's AS-level profile carries VPN and BitTorrent tags, consistent with anonymity- and P2P-adjacent tenant traffic on a budget VPS host — ipinfo.io/AS49581.

Customer reviews

Unverified, user-submitted Trustpilot reviews describe VPS suspensions over abuse complaints; in one thread the operator states a suspension followed a customer's own outbound "website attacks," i.e. its own enforcement action rather than an incident implicating the operator — trustpilot.com/review/tube-hosting.de.

Negative checks

No CVE, data breach, sanctions listing, law-enforcement seizure, or bulletproof-hosting/booter designation naming AS49581, Tube-Hosting, or Ferdinand Zink turned up in a search conducted in August 2026, and no NANOG mailing-list thread naming either turned up in the same search.

Operator

Tube-Hosting Einzelunternehmen, vertreten durch Ferdinand Zink — a German sole proprietorship trading as "Tube-Hosting," represented by Ferdinand Zink; registered address Schlesierstr. 7, 97631 Bad Königshofen, Germany; VAT ID DE815894279 [Confirmed] — tube-hosting.com/imprint

Country / RIR

Germany (Bad Königshofen); RIPE NCC — the operator's own site identifies it as a RIPE NCC member (LIR) [Confirmed] — tube-hosting.com/network, lg.as49581.net

Allocated

Unknown [Unknown]

Org status

active — multiple operator-site pages (home, network, pricing, FAQ, imprint, looking glass) live and current as of an August 2026 review; company states it was founded March 2015; identifies as a RIPE NCC member (LIR) [Confirmed] — tube-hosting.com/home, tube-hosting.com/faq

Security/abuse context (NEUTRAL, DATED, SOURCED — multi-tenant)

CleanTalk (accessed 2026-08-14) lists 11 currently spam-active IPs of ~697 tracked (~2.70% overall), concentrated in three prefixes at ~1.00% vs 0.00% elsewhere, first flagged November 2025 and continuing into August 2026 [Confirmed] — cleantalk.org/blacklists/as49581. Four Tor relays on this ASN's Dutch address space are classified as middle relays, not exit relays, first seen 2025-11-16 [Confirmed] — nusenu.github.io/OrNetStats (corrects the prior entry's exit-relay characterization). ipinfo.io's AS profile carries VPN and BitTorrent tags [Confirmed] — ipinfo.io/AS49581. Unverified Trustpilot reviews describe abuse-related VPS suspensions; in one thread the operator states a suspension followed a customer's own outbound "website attacks" [Likely, user-generated/unverified] — trustpilot.com/review/tube-hosting.de. No CVE, breach, sanctions, LE seizure, or booter/bulletproof-hosting designation naming AS49581, Tube-Hosting, or Ferdinand Zink found in an August 2026 search; no NANOG mailing-list mention found either

Network & routing

Network type

hosting-VPS — budget/prepaid vServer and VPS (LXC/KVM virtualization), KVM root servers, dedicated servers, and colocation; DDoS protection bundled with every server [Confirmed] — tube-hosting.com/home, tube-hosting.com/pricing, tube-hosting.com/network

Size

as observed by RouteViews (route-views2 + route-views6, RIB dump 2026-08-15 02:00 UTC) — 36 IPv4 prefixes (9,216 addresses, ~256 addresses/prefix, no oversized-block skew) and 3 IPv6 prefixes [Confirmed] — the RouteViews BGP routing data (CC BY 4.0) AS49581

Routing/peering

as observed by RouteViews at 2026-08-15 02:00 UTC — 85 distinct BGP neighbours (sample of 32 shown: AS3257, AS6453, AS6939, AS17404, AS24947, AS44592, AS48014, AS49592, AS51396, AS57463, AS58232, AS62403, AS64107, AS197194, AS197477, AS197574, AS198556, AS199504, AS199654, AS199742, AS200173, AS200282, AS200554, AS200823, AS201124, AS201176, AS201269, AS201861, AS201988, AS202413, AS202485, AS202520; none in a reserved/private ASN range) [Confirmed] — the RouteViews BGP routing data (CC BY 4.0) AS49581. Upstream/transit direction cannot be read from AS_PATH adjacency [Unknown]; IX presence and peering policy Unknown — no policy statement found on the operator's own site as of an August 2026 review [Unknown]; public looking glass at lg.as49581.net

[Confirmed] — tube-hosting.com/network, lg.as49581.net

RPKI

unavailable — no source for RPKI validation status on this ASN's announced prefixes [Unknown]

Notable usage

budget/prepaid VPS, KVM root-server, dedicated-server, and colocation hosting marketed to reseller/hosting customers; FAQ names common workloads (Minecraft/Teamspeak game servers, MySQL, WordPress, Nextcloud); "combahton" DDoS protection included free with every server; infrastructure at the SkyLink data center in Eygelshoven, Netherlands, with dark-fiber links to Frankfurt and Amsterdam

[Confirmed] — tube-hosting.com/faq, tube-hosting.com/datacenter, tube-hosting.com/home

Related ASNs

none confirmed [Unknown]

Analyst note

small, actively-routed multi-tenant German budget host; attribute abuse to tenants, not the operator. The four Tor relays on this ASN's Dutch address space are middle relays, not exits — per-IP geolocation and attribution on this address space can still be unreliable. Allocation date, AS rank, customer cone size, RPKI validation, upstreams, and IX presence are Unknown.