asn.dev

Autonomous system

AS10411 ESRI - Environmental Systems Research Institute

Unclassified ARIN

IPv4 addresses 4.35K 11 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly US
Exchanges 0 recorded by PCH
Upstreams 7 0 downstream
Flagged prefixes 0 none

Summary

Esri (Environmental Systems Research Institute)

United States · AI-generated

ESRI is the network of the Environmental Systems Research Institute, the Redlands, California software company behind ArcGIS. Despite the research-sounding legal name, Esri is a privately held commercial software vendor, not an academic institute.

What it's used for

RIS observes 17 IPv4 prefixes carrying 4,352 addresses and no IPv6. Every announced prefix is a /24 from a single contiguous legacy range, 198.102.32.0 through 198.102.63.0 — effectively a /19 that Esri deaggregates into individual /24s and announces piecemeal. The sampled reverse DNS lands squarely in the holder's own domain: raytest4.esri.com, a first-party host name.

Deaggregating a /19 into 17 separate /24 announcements is a traffic-engineering choice, not a sign of a fragmented estate. It lets a company steer specific subnets to specific upstreams or sites.

Notable

The kind is enterprise/business. The name is exactly the trap this classification usually falls into: "Research Institute" reads like education, and it is not. Esri is a for-profit vendor, and the network carries its corporate offices, engineering labs and product infrastructure.

The routing agrees. Eight observed BGP neighbours against 4,352 addresses is a well-connected enterprise buying transit and peering a little, nothing like the hundreds a carrier would show. And 4,352 addresses is far too small to be the company's public cloud footprint. Esri's large-scale ArcGIS Online service runs on commercial cloud platforms, not here.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

7 upstream, 0 downstream and 7 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS3356Level 3 Parent, LLC620
AS14744Unitas Global85
AS6461Zayo Bandwidth80
AS3257GTT Communications Inc.73
AS46887Crown Castle Fiber LLC56
AS7018AT&T Enterprises, LLC48
AS22773Cox Communications Inc.39

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-11-07, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 11 prefixes · 4.35K addresses IPv6 0 prefixes

CountryNamePrefixes
USUnited States of America11

Registry

Allocation record

ARIN · via Atlas (registry + RDAP)
Registry
ARIN
Handle
AS10411
Registry name
ESRI
Registrant
Environmental Systems Research Institute
Abuse contact
abuse@esri.com
Registered
1997-07-29
Last changed
2014-12-31
Allocation
assigned

Routing security

RPKI and IRR

Full detail
RPKI
0% valid · 0 valid, 17 with no ROA
ROAs
0 authorising AS10411
ASPA
no ASPA record
IRR
100% registered · 17 of 17 announcements
Route objects
7 naming AS10411

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 454 networks and 1,852 prefixes, as published 2026-11-08. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check