Summary

  • AS209874's autonomous-system record carries organisation ORG-MWUL2-RIPE, maintainer novacloud-mnt and an abuse contact on the operator's own domain; the same brand's IPv4 ranges carry a different organisation, ORG-TTPU1-RIPE, maintained by GHOSTNET-MNT with abuse reports routed to the German maintainer's ghostnet.de domain.
  • GHOSTNET-MNT belongs to GHOSTnet GmbH, the German operator of AS12586; the IPv6 allocation, by contrast, is delegated through the sponsoring LIR Scaleblade, Ltd. (SBL-MNT) with novacloud-mnt as the lower-level maintainer.
  • The operator's own imprint presents a single commercial identity: Tech Tide Portugal Unipessoal LDA in Quarteira, one abuse mailbox on its own domain, and a designated DSA Article 11 contact point.
  • The contractual basis linking the Portuguese company, Scaleblade and GHOSTnet GmbH is not visible in public sources, so the split cannot be attributed to leasing, service provision or historical assignment with the evidence at hand.

Three maintainers behind one brand

The autonomous-system record for AS209874 (as-name TECHTIDE) is registered to Tech Tide Portugal Unipessoal LDA under the organisation handle ORG-MWUL2-RIPE, with role object NA8939-RIPE (novacloud-hosting) as administrative and technical contact, a Faro address, and an abuse contact on the operator's own domain. Its maintainer set lists RIPE-NCC-END-MNT, SBL-MNT and novacloud-mnt, and the registration dates to 24 April 2025 [https://ip.sb/whois/AS209874] [https://ipgeolocation.io/browse/asn/AS209874].

The IPv4 space tells a different story. The ranges 5.231.96.0/24 and 94.249.197.0/24 carry the organisation ORG-TTPU1-RIPE — the same company name, Tech Tide Portugal Unipessoal LDA, but a distinct handle — with a NOC role (NA9036-RIPE), maintained by GHOSTNET-MNT, and abuse reports directed to the German maintainer's domain under the abuse handle GN-RIPE. The route object for 94.249.197.0/24, origin AS209874, is likewise maintained by GHOSTNET-MNT, created 13 September 2025 [https://whois.ipip.net/AS209874/5.231.96.0/24] [https://ipinfo.io/AS209874/94.249.197.0/24].

GHOSTNET-MNT is not a NovaCloud artefact. It is the maintainer of GHOSTnet GmbH (ORG-GG3-RIPE), the German operator of AS12586, whose own role object GN-RIPE carries the German operator's abuse mailbox. RIPEstat's own view of GHOSTnet resources confirms that GHOSTNET-MNT and AS12586 are that company's authoritative objects [https://ipgeolocation.io/browse/asn/AS12586] [https://stat.ripe.net/resource/5.230.110.0/24]. In other words, the IPv4 layer of a Portuguese hosting brand is administered through the maintainer account of a German network operator.

The IPv6 layer runs through a third party again, but a different one. The allocation 2a12:bec4:1520::/44 is ALLOCATED-BY-LIR under ORG-MWUL2-RIPE, maintained at the top by SBL-MNT with novacloud-mnt as the lower-level, route and domain maintainer; the route6 for 2a12:bec4:152c::/48 is maintained by novacloud-mnt directly [https://ipregistry.co/AS209874/2a12:bec4:152c::/48]. SBL-MNT belongs to Scaleblade, Ltd. (ORG-SL1164-RIPE), a UK LIR (company number 13976255) that is also recorded as AS209874's sponsoring organisation and sponsors other autonomous systems including AS52041 [https://whois.ipip.net/AS52041] [https://ipgeolocation.io/browse/asn/AS209874].

One commercial surface, three registry routes

The operator's imprint presents none of this fragmentation. It lists Tech Tide Portugal Unipessoal LDA at a Quarteira address, Faro company register 517354420, VAT PT517354420, a single abuse mailbox on the operator's own domain, and a designated DSA Article 11 contact point [https://novacloud-hosting.com/imprint]. The operator also runs a separate site for AS209874 presenting the "NovaCloud-Hosting Network" with its own NOC mailbox on the as209874.net domain [https://as209874.net/].

Counted from the registry side, the brand therefore spans two organisation handles (ORG-MWUL2-RIPE and ORG-TTPU1-RIPE), three maintainers (novacloud-mnt, GHOSTNET-MNT, SBL-MNT) and at least three contact routes: the operator's own abuse address at the AS level, the ghostnet.de address on IPv4 ranges, and the sponsoring LIR's infrastructure at the allocation level. IPv4 delegation runs through GHOSTnet's maintainer while IPv6 runs through Scaleblade's allocation and the operator's own maintainer — two structurally different delegation paths for the same brand.

A caveat on freshness applies to all of this: every registry value cited here comes from third-party whois and RDAP mirrors, which can lag the authoritative RIPE Database, and one earlier snapshot of the AS209874 record shows different export sets and modification timestamps, illustrating that the record churns over time [https://sitezilla.org/asn/209874].

What the public record cannot answer

The public evidence establishes the structure but not its cause. Nothing in the registry data or the operator's own pages shows the contractual basis — sponsorship terms, address leasing, a service agreement, or a historical assignment — that links Tech Tide Portugal Unipessoal LDA to Scaleblade and GHOSTnet GmbH. Whether the split is deliberate design, an artefact of how the address space was acquired, or a transitional state cannot be determined from outside.

What can be said is that a buyer, abuse reporter or peer relying on the imprint's unified surface would not encounter the same administrative reality that the registry record describes.