asn.dev

Autonomous system

AS60117 HS

Unclassified RIPE

IPv4 addresses 14.34K 35 prefixes
IPv6 prefixes 7 counted as prefixes, not addresses
Countries 1 mostly AE
Exchanges 0 recorded by PCH
Upstreams 4 0 downstream
Flagged prefixes 0 none

Summary

HostSailor

United Arab Emirates · AI-generated

hosting business uae

HS is operated by Host Sailor Ltd, a Dubai-based web hosting provider.

What it's used for

  • The address space carries hosting infrastructure, evidenced by netnames AE-SAILORHOST and reverse DNS entries like 185-45-193-64.hostsailor.com.
  • The AS announces 13,056 IPv4 addresses and 7 IPv6 prefixes with only 4 observed neighbours, a ratio indicating a hosting or business network rather than a transit provider.
  • Traffic from this AS consists of web hosting endpoints and server infrastructure for businesses seeking online presence, consistent with the operator's stated focus on high-performance web hosting solutions.

Notable

  • Registrants include Host Sailor Ltd for the majority of prefixes, alongside Orient Express LDI Limited and TNGNET B.V., suggesting a mix of owned and leased address space.
  • The address inventory is fragmented across multiple /22, /23, and /24 blocks, with some prefixes registered to third parties like Orient Express LDI Limited and TNGNET B.V..

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

4 upstream, 0 downstream and 8 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS39521TNGNET B.V.2,298
AS9009M247 Europe SRL596
AS43350NForce Entertainment B.V.498
AS36352HostPapa89

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 35 prefixes · 14.34K addresses IPv6 7 prefixes

CountryNamePrefixes
AEUnited Arab Emirates42

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS60117
Registry name
HS
Registrant
MNT-HS
Abuse contact
abuse@hostsailor.com
Registered
2014-05-13
Last changed
2025-01-31
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
87% valid · 55 valid, 4 with no ROA 4 RPKI-invalid
ROAs
58 authorising AS60117
ASPA
no ASPA record
IRR
90% registered · 57 of 63 announcements 4 other origin
Route objects
101 naming AS60117

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 436 networks and 1,771 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

5 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
185.141.24.3China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
185.198.56.14China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
185.198.58.131China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
185.198.58.240China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
185.198.58.241China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check