asn.dev

Autonomous system

AS197574 TKM-AS

Unclassified RIPE

IPv4 addresses 5.38K 14 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly GB
Exchanges 0 recorded by PCH
Upstreams 4 0 downstream
Flagged prefixes 0 none

Summary

ExpressHost

United Kingdom · AI-generated

hosting vpn cloud uk

The AS handle TKM-AS is held by ExpressHost Ltd.

What it's used for

  • The space carries cloud and VPN endpoints, evidenced by reverse DNS entries such as Flying-Thunder-vpvuEUOs.expresshost.cloud and fierce-star-oVW0NJkD.expresshost.cloud.
  • The network announces 4352 IPv4 addresses across 11 prefixes with only 4 observed neighbours, indicating a hosting or service provider role rather than a transit backbone.
  • Traffic from this AS consists of web and API endpoints, cloud instances, and VPN media/signalling for ExpressHost's managed services.

Notable

  • Registrants are mixed: several prefixes (e.g., 217.60.32.0/22, 31.56.186.0/23) list GOLD IP L.L.C-FZ with netnames like AE-GOLDIP, while others (e.g., 31.56.189.0/24) list ExpressHost Ltd with netname EXPRESSHOST.
  • The address inventory includes a mix of legacy blocks (217.60.x.x, 31.56.x.x) and newer allocations (45.x.x.x, 154.86.x.x), with four prefixes currently lacking RDAP registrant data.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

4 upstream, 0 downstream and 8 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS49581Ferdinand Zink trading as Tube-Hosting517
AS201814MEVSPACE sp. z o.o.427
AS44486Oliver Horscht trading as "SYNLINQ"337
AS202759RJ Network OU152

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-26, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 14 prefixes · 5.38K addresses IPv6 0 prefixes

CountryNamePrefixes
GBUnited Kingdom14

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS197574
Registry name
EXPRESSHOST
Registrant
EXPRESSHOST-NOC-MNT
Abuse contact
abuse@expresshost.org
Registered
2026-05-19
Last changed
2026-05-19
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 25 valid, 0 with no ROA
ROAs
25 authorising AS197574
ASPA
no ASPA record
IRR
100% registered · 25 of 25 announcements
Route objects
29 naming AS197574

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 446 networks and 1,852 prefixes, as published 2026-10-27. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check