Autonomous system
AS15020 AS-BANDITO
Unclassified ARIN
Summary
Bandito Networks
hosting isp
Neither of its IPv4 blocks is registered to it, and one is still in the registry's own name.
What it's used for
- A small provider's network. Two IPv4 blocks and three IPv6
/48blocks announced from the United States, with one observed BGP neighbour.
Notable
- One IPv4 block carries the netname
NET23and is registered to the regional internet registry itself, not to any operator. - The other is registered to
LayerSwitch, Incunder the netnameLAYERSWITCH, a different company from the holder of this AS. - Two of the IPv6 blocks come from one parent and the third,
2a09:8400:3::/48, comes from a different regional registry's range entirely. - The AS handle is
AS-BANDITO, carrying the record type as a prefix inside itself. - Six addresses were queried for reverse DNS and none returned a name.
Interesting
- A block still registered to the registry is the unusual part. That is the state address space sits in before it is issued to anybody, and seeing it announced means the routing is running ahead of the paperwork, or the assignment record beneath it was never published.
- Announcing another company's block is ordinary by itself. Announcing another company's block and an unassigned one, on a network with one upstream and no space of its own, says this operator builds entirely on borrowed numbers.
- Pulling one IPv6 block from a second registry's range while the rest come from the first is a geolocation hazard. Anything that guesses location from the registry will put that block on another continent.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
1 upstream, 0 downstream and 2 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS6206 | Netrouting B.V. | 262 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 2 prefixes · 512 addresses IPv6 3 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 5 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS15020- Registry name
- AS-BANDITO
- Registrant
- Bandito Networks, Inc
- Abuse contact
- abuse@bandito.net
- Registered
- 2021-10-13
- Last changed
- 2021-10-13
- Allocation
- assigned
Routing security
RPKI and IRR
- RPKI
- 100% valid · 7 valid, 0 with no ROA
- ROAs
- 14 authorising AS15020
- ASPA
- no ASPA record
- IRR
- 100% registered · 7 of 7 announcements
- Route objects
- 12 naming AS15020
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 440 networks and 1,773 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere