AS11158 NETDEPON

NETDEPON is registered to NTT America, Inc. at Bear Creek Pkwy, Redmond, Washington, but the network behind it is Virtela — the global managed-network-services company NTT acquired, whose Global Operations Center (goc@nttglobal.net) still appears on the ARIN record alongside NTT's own abuse, NOC and peering contacts.

What it's used for

Points of presence for an overlay network, not a backbone and not a hosting estate. RIS observes 30 announced IPv4 prefixes — almost every one a /24 — carrying about 7,680 addresses in total, no IPv6, and 30 observed BGP neighbours. Roughly one neighbour per prefix is the fingerprint of a distributed PoP footprint: a small block in each metro, announced locally and peered locally, terminating enterprise customers' managed VPN, SD-WAN and cloud-gateway services. Reverse DNS confirms the shape, with router names like ge-1-3-0.vfrpar1-nerd-2.virtela.net (a Paris PoP) under the operator's own virtela.net zone.

Notable

This AS is a useful counter-example to a superficially alarming pattern. Its /24s are scattered across three RIRs at once — ARIN (209.212.x, 64.254.x, 206.197.x), RIPE (77.247.x, 185.71.x, 212.11.x, 46.235.x) and APNIC (119.31.x, 117.103.x, 43.248.x) — which is the classic multi-RIR fragmentation that flags address leasing. The registrant column is what clears it: every resolvable prefix is registered to an NTT or Virtela handle (NTTA-209-212-224, VIRTELA_INFRASTRUCTURE, VIRTELA-SINGAPORE-SG-NET, SINGAPORE-SG-SDWAN-NET-1, US-EU-NTT-GLOBAL-20230425). Self-registered space with first-party rDNS means a real global operator whose inventory is scattered because its service is scattered.

Interesting

The handle names nobody recognisable and the registrant says NTT America, yet the actual operational identity is a company NTT bought. Reading only the ASN record would put this network in Redmond; reading the routing puts it in a few dozen cities on three continents.