asn.dev

Autonomous system

AS14440 CITONCOMPUTERCORP

Unclassified ARIN

IPv4 addresses 512 2 prefixes
IPv6 prefixes 51 counted as prefixes, not addresses
Countries 1 mostly US
Exchanges 0 recorded by PCH
Upstreams 2 0 downstream
Flagged prefixes 0 none

Summary

Citon Computer

United States · AI-generated

isp hosting business

Fifty-one IPv6 prefixes against two IPv4 blocks, nearly all of them carved out of one another.

What it's used for

  • A managed IT and network services provider. 512 IPv4 addresses across two prefixes, and 51 IPv6 prefixes, with two observed BGP neighbours.

Notable

  • The IPv6 announcements begin with 2602:ffbd::/41 and then subdivide it repeatedly, including 2602:ffbd:80::/44, 2602:ffbd:90::/47, 2602:ffbd:92::/47, 2602:ffbd:94::/46 and 2602:ffbd:98::/45.
  • The covering block and its pieces are announced together, so the same addresses appear many times over.
  • 64.61.197.0/24 carries the netname CITON-ENV-1, 216.251.161.0/24 carries CITON-NET-1.
  • Six addresses were queried for reverse DNS and none returned a name.

Interesting

  • This is one of the most subdivided IPv6 footprints in the range, and it is the opposite of what the address space was designed for. IPv6 was meant to let an operator announce one large block and route inside it privately. Announcing the pieces as well puts the internal structure into every routing table in the world, and every one of those entries costs memory on other people's routers.
  • The pattern usually comes from assigning a block per customer and announcing each one as it is sold, rather than from any routing requirement. It works, and it does not scale politely.
  • The two IPv4 netnames differ by one word, which suggests one block was set aside for a specific environment and the other for general use.
  • A provider with this much IPv6 and nothing published across the reverse DNS sample has done the harder half of modernisation and skipped the easier half.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

2 upstream, 0 downstream and 4 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS40264Charter Communications LLC298
AS12042Fidium84

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-27, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 2 prefixes · 512 addresses IPv6 51 prefixes

CountryNamePrefixes
USUnited States of America53

Registry

Allocation record

ARIN · via Atlas (registry + RDAP)
Registry
ARIN
Handle
AS14440
Registry name
CITONCOMPUTERCORP
Registrant
Citon Computer Corp
Abuse contact
kush.patel@weareversatile.com
Registered
2010-10-12
Last changed
2025-03-06
Allocation
assigned

Routing security

RPKI and IRR

Full detail
RPKI
80% valid · 8 valid, 2 with no ROA
ROAs
1 authorising AS14440
ASPA
no ASPA record
IRR
100% registered · 10 of 10 announcements
Route objects
3 naming AS14440

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 447 networks and 1,852 prefixes, as published 2026-10-27. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check