asn.dev

Autonomous system

AS3214 XTOM xTom GmbH

Hosting RIPE

IPv4 addresses 25.86K 58 prefixes
IPv6 prefixes 126 counted as prefixes, not addresses
Countries 1 mostly DE
Exchanges 10 recorded by PCH
Upstreams 39 17 downstream
Flagged prefixes 0 none

Summary

xTom GmbH

Germany · AI-generated

hosting transit legacy

XTOM is xTom GmbH, the German arm of the xTom group — an IP transit, network, and hosting provider based in Düsseldorf.

What it's used for

  • IP transit and network services, with upstreams including Telia, Orange, and Tata, and peering at DE-CIX (Frankfurt, Düsseldorf, Hamburg, Munich), AMS-IX, LINX, LocIX, and FRYS-IX.
  • Hosting and colocation infrastructure for the group's customers.

Notable

  • The aut-num object publishes a full BGP community scheme — per-upstream tagging, prepend controls, selective announcement, and a 3214:666 blackhole community — which is the signature of a transit provider rather than an end-user network.
  • This is a hosting and carrier address footprint: the roughly 22,000 IPv4 addresses sit in data centres, not on subscriber lines.

Interesting

  • The low AS number was reissued to a modern holder — xTom's RIPE registration for it dates from 2015, so there is no early-internet pedigree behind this operator's use of AS3214.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 10 exchanges in 4 countries, largest first.

ExchangeLocationTheir address
DE-CIX FrankfurtFrankfurt, Germany80.81.194.213
LINX LON1London, United Kingdom195.66.227.160
AMS-IX AmsterdamAmsterdam, Netherlands80.249.209.255
The Frys Internet ExchangeFrysian, Netherlands2001:7f8:10f::c8e:48
DE-CIX DusseldorfDüsseldorf, Germany185.1.170.129
DE-CIX MunichMunich, Germany185.1.208.139
Local Internet Exchange FrankfurtFrankfurt, Germany185.1.167.14
DE-CIX HamburgHamburg, Germany185.1.210.139

Transit providers

39 upstream, 17 downstream and 103 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS6939Hurricane Electric LLC2,242
AS1299Arelion Sweden AB1,526
AS6453TATA COMMUNICATIONS (AMERICA) INC1,350
AS9002RETN Limited1,050
AS50629LWLcom GmbH434
AS34549meerfarbig GmbH & Co. KG187
AS24482SG.GS164
AS401753BIXCE Inc137

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 58 prefixes · 25.86K addresses IPv6 126 prefixes

CountryNamePrefixes
DEGermany184

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS3214
Registry name
XTOM
Registrant
xTom GmbH
Abuse contact
abuse@xtom.com
Registered
2015-11-16
Last changed
2026-09-14
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 169 valid, 0 with no ROA
ROAs
505 authorising AS3214
ASPA
no ASPA record
IRR
100% registered · 169 of 169 announcements
Route objects
2,232 naming AS3214

Reputation

Classification and threat

Hosting Datacenter or cloud provider. Addresses are servers, not people.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check