asn.dev

Autonomous system

AS42237 W1N

Unclassified RIPE Cable/DSL/ISP

IPv4 addresses 1.79K 5 prefixes
IPv6 prefixes 21 counted as prefixes, not addresses
Countries 1 mostly UA
Exchanges 0 recorded by PCH
Upstreams 5 0 downstream
Flagged prefixes 0 none

Summary

w1n

United Kingdom · AI-generated

isp residential uk cable

W1N is the AS handle for w1n ltd, a UK-based cable and DSL internet service provider.

What it's used for

  • The address space carries residential and business internet traffic, evidenced by netnames such as UK-WIN and UK-WIN-20170810 registered to w1n ltd.
  • With 1792 IPv4 addresses announced across 5 prefixes and 7 observed neighbours, the ratio indicates an access network providing connectivity to end-users rather than a transit provider.
  • Traffic from this AS consists of subscriber eyeballs accessing the internet via cable or DSL connections, consistent with the operator's classification as a Cable/DSL/ISP.

Notable

  • Registrants for the majority of prefixes (185.217.0.0/23, 185.246.128.0/23, 91.236.116.0/24, 193.105.134.0/24) are listed as Anastasiia; w1n ltd; Abuse-C Role, aligning with the AS holder.
  • The prefix 185.246.130.0/24 has a distinct netname ICME-CLOUD and registrant ICME NOC, suggesting a specific service segment or leased space within the AS.
  • The inventory includes two IPv6 prefixes (2a0b:c040::/31 and 2a0d:8980::/29) alongside the IPv4 blocks, indicating dual-stack capability.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

5 upstream, 0 downstream and 8 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS3399Obenet AB514
AS6939Hurricane Electric LLC208
AS24482SG.GS17
AS20473The Constant Company, LLC10
AS31500Global Network Management Inc7

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-26, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 5 prefixes · 1.79K addresses IPv6 21 prefixes

CountryNamePrefixes
UAUkraine26

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS42237
Registry name
w1n
Registrant
lir-uk-win-1-MNT
Abuse contact
abuse@w1n.nl
Registered
2017-08-10
Last changed
2026-08-18
Allocation
allocated

Declared

PeeringDB profile

self-reported
Name
W1N
Also known as
w1n
Network type
Cable/DSL/ISP
Scope
Europe
Traffic ratio
Balanced
Peering policy
Open
IRR as-set
AS42237:AS-W1N
Present at
2 exchanges
Facilities
1 facilities
Website
https://w1n.nl

PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.

Routing security

RPKI and IRR

Full detail
RPKI
0% valid · 0 valid, 19 with no ROA
ROAs
0 authorising AS42237
ASPA
no ASPA record
IRR
89% registered · 17 of 19 announcements
Route objects
27 naming AS42237

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 445 networks and 1,817 prefixes, as published 2026-10-27. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

1 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
193.105.134.152"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check