asn.dev

Autonomous system

AS201094 GMHOST

Unclassified RIPE

IPv4 addresses 2.82K 7 prefixes
IPv6 prefixes 3 counted as prefixes, not addresses
Countries 1 mostly UA
Exchanges 0 recorded by PCH
Upstreams 5 1 downstream
Flagged prefixes 0 none

Summary

GMHOST

Ukraine · AI-generated

hosting vps dedicated ukraine

The AS handle GMHOST is operated by GMHOST, a Ukrainian hosting provider.

What it's used for

  • The address space carries virtual dedicated servers (VDS) and dedicated hosting, evidenced by reverse DNS entries such as 760908-vds-elya02111989.gmhost.pp.ua, 382350-dedic-mail.gmhost.pp.ua, and 835156-vds-ayman.ch203.gmhost.pp.ua.
  • The network announces 2816 IPv4 addresses across 7 prefixes and 3 IPv6 prefixes, with 19 observed neighbours. This ratio of address space to peering partners indicates a hosting or infrastructure role rather than a large-scale residential access network.
  • Traffic from this AS consists of web hosting, VPS instances, and dedicated server endpoints for customers, including specific services like udalion.ua and otrs.ukrainske.tv.

Notable

  • Registrants are consistent with the operator, listing GMHOST admin. contacts, GMHOST tech. contacts, Mulgin Alexander Sergeevich, and GmhostGrupp OU across the major prefixes.
  • The inventory includes a mix of Ukrainian (UA-GMHOST) and Estonian (EE-GMHOST) netnames, reflecting the operator's registration history or multi-jurisdictional presence.
  • One prefix, 178.95.129.0/24, is registered to Private Customer with the netname NET-178-95-129-0-24, which differs from the standard GMHOST naming convention.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

5 upstream, 1 downstream and 10 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS3255LLC EKSINTECH1,084
AS41009Oleksandr Melnyk220
AS24482SG.GS30
AS6939Hurricane Electric LLC12
AS3303Swisscom (Schweiz) AG10

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-28, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 7 prefixes · 2.82K addresses IPv6 3 prefixes

CountryNamePrefixes
UAUkraine10

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS201094
Registry name
gmhost
Registrant
GMHOST-MNT
Abuse contact
abuse@gmhost.com.ua
Registered
2015-02-02
Last changed
2026-10-01
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
3% valid · 1 valid, 30 with no ROA
ROAs
1 authorising AS201094
ASPA
no ASPA record
IRR
100% registered · 31 of 31 announcements
Route objects
33 naming AS201094

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 448 networks and 1,851 prefixes, as published 2026-10-29. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

1 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
185.86.79.95Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite2026-07-23

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check