Autonomous system
AS14956 ROUTERHOSTING
Hosting Spamhaus ASN-DROP ARIN
Summary
RouterHosting
hosting business infrastructure
An announced address total that is an odd number, which takes a single-address route to achieve.
What it's used for
- A virtual server provider. 55,295 addresses across 129 IPv4 prefixes plus seven IPv6 prefixes, with seven observed BGP neighbours.
Notable
- Blocks carry three different registrants:
RouterHosting LLCunder the netnameROUTERHOSTING,FranTech SolutionsunderPONYNET-12,PONYNET-15andPONYNET-16, andCLOUDZY A I INFORMATION TECHNOLOGY L.L.CunderAE-CLOUDZY-19910923. - Seven of eighteen sampled addresses returned a name, all under
static.cloudzy.com. - Those names are the address written backwards with dots, as in
254.107.172.144.static.cloudzy.com. - The 129 prefixes are mostly
/21s,/22s and/23s scattered across unrelated ranges.
Interesting
- Address counts are sums of powers of two, so they come out even. This one does not, which means something in the inventory is a single address announced on its own. Providers do that to move one customer's address independently of the block it came from.
- Three company names on one AS, one of them registered in a different region entirely. Small hosting businesses are bought and resold, and the registry keeps every layer.
- Reverse names built from the address reversed with dots are the raw reverse-lookup form with a domain appended. It is the least effort that still produces a unique name for every address.
- Scattered small blocks rather than a few large ones is the signature of space acquired on the market rather than allocated in one piece.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
7 upstream, 0 downstream and 13 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 87 prefixes · 56.83K addresses IPv6 7 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 94 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS14956- Registry name
- ROUTERHOSTING
- Registrant
- RouterHosting LLC
- Abuse contact
- abuse-reports@cloudzy.com
- Registered
- 2023-05-15
- Last changed
- 2023-05-15
- Allocation
- assigned
Routing security
RPKI and IRR
- RPKI
- 98% valid · 169 valid, 4 with no ROA
- ROAs
- 103 authorising AS14956
- ASPA
- no ASPA record
- IRR
- 98% registered · 170 of 173 announcements
- Route objects
- 185 naming AS14956
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
On Spamhaus ASN-DROP Spamhaus lists this entire
network (associated domain cloudzy.com)
as controlled by, or hijacked for, cybercrime. Many operators null-route
everything it originates.
1 DROP match Announced space overlapping the DROP prefix list.
| Announced | DROP entry | Record |
|---|---|---|
| 144.172.64.0/23 | 144.172.65.0/24 | SBL699979 |
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
3 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
167.88.166.173 | #StopRansomware: Medusa Ransomware | 2026-08-18 |
45.61.150.9 | #StopRansomware: Medusa Ransomware | 2026-08-18 |
45.61.150.94 | #StopRansomware: Medusa Ransomware | 2026-08-18 |
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere