asn.dev

Autonomous system

AS48090 DMZHOST

Hosting Spamhaus ASN-DROP RIPE

IPv4 addresses 767 10 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly GB
Exchanges 0 recorded by PCH
Upstreams 1 0 downstream
Flagged prefixes 8 see address space

Summary

TECHOFF SRV LIMITED

Andorra · AI-generated

hosting dedicated vps offshore

DMZHOST is TECHOFF SRV LIMITED, trading as dmzhost.co — an offshore VPS and dedicated-server host that markets explicitly on DMCA-ignore and offshore positioning.

What it's used for

VPS and dedicated-server hosting. RIS observes 3 IPv4 prefixes totalling 768 addresses and no IPv6: 45.148.10.0/24, 93.123.109.0/24 and 195.178.110.0/24. 45.148.10.0/24 is netname DMZHOST, registered to TECHOFF SRV LIMITED with country Andorra. Transit comes from a single upstream, AS57717. There is no PeeringDB record.

The catalog is VPS, storage and dedicated servers. There is no VPN product on the site.

Notable

  • Three names, one company, which makes whois lookups confusing: the aut-num is named DMZHOST, the RIPE org is TECHOFF SRV LIMITED (ORG-TSL73-RIPE), and the trading brand is dmzhost.co. Spamhaus records the domain as dmzhost.co with country SC (Seychelles), while the inetnum says AD (Andorra).
  • Offshore positioning is the entire marketing pitch. The site returns 65 matches for DMCA / offshore / bulletproof / "ignore" language against 44 mentions of VPS or dedicated servers. That is a statement about abuse policy, not about what kind of operator this is — it sells servers.
  • Reputation is the strongest signal set of any network in this group: listed in Spamhaus ASN-DROP, 45.148.10.0/24 in Spamhaus DROP as SBL678435, and an FBI IC3 indicator inside the space at 45.148.10.212 — advisory 260702, "Cyber Criminal Group TeamPCP" (2026-07-02).

Interesting

  • Reverse DNS is empty across all three prefixes on every sampled address, so there is no tenant-brand surface at all — unusual for a host this heavily marketed.
  • 768 addresses behind one upstream is a very small footprint for a network with this much reputation attached to it. Density of abuse per address, rather than scale, is what puts it on lists.
  • The AS number dates to 2019-09-05, so unlike most offshore hosts that surface on blocklists, this one is not a freshly-registered shell.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

1 upstream, 0 downstream and 1 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS57717FiberXpress BV180

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-16, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 10 prefixes · 767 addresses IPv6 0 prefixes

CountryNamePrefixes
GBUnited Kingdom10

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS48090
Registry name
DMZHOST
Registrant
TECHOFF SRV LIMITED
Abuse contact
dmzhostabuse@gmail.com
Registered
2019-09-05
Last changed
2024-11-26
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
67% valid · 2 valid, 1 with no ROA
ROAs
4 authorising AS48090
ASPA
no ASPA record
IRR
100% registered · 3 of 3 announcements
Route objects
6 naming AS48090

Reputation

Classification and threat

Hosting Datacenter or cloud provider. Addresses are servers, not people.

Spamhaus DROP

On Spamhaus ASN-DROP Spamhaus lists this entire network (associated domain dmzhost.co) as controlled by, or hijacked for, cybercrime. Many operators null-route everything it originates.

10 DROP matches Announced space overlapping the DROP prefix list.

AnnouncedDROP entryRecord
45.148.10.0/2545.148.10.0/24SBL678435
45.148.10.128/2645.148.10.0/24SBL678435
45.148.10.192/2945.148.10.0/24SBL678435
45.148.10.200/3245.148.10.0/24SBL678435
45.148.10.202/3145.148.10.0/24SBL678435
45.148.10.204/3045.148.10.0/24SBL678435
45.148.10.208/2845.148.10.0/24SBL678435
45.148.10.224/2745.148.10.0/24SBL678435
93.123.109.0/2493.123.109.0/24SBL677469
195.178.110.0/24195.178.110.0/24SBL677468

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,783 prefixes, as published 2026-10-17. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

1 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
45.148.10.212Cyber Criminal Group TeamPCP2026-07-02

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check