asn.dev

Autonomous system

AS152194 CTGSERVERLIMITED-AS-AP CTG Server Limited

Unclassified Spamhaus ASN-DROP APNIC

IPv4 addresses 188K 242 prefixes
IPv6 prefixes 2 counted as prefixes, not addresses
Countries 1 mostly HK
Exchanges 3 recorded by PCH
Upstreams 16 2 downstream
Flagged prefixes 16 see address space

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 3 exchanges in 2 countries, largest first.

ExchangeLocationTheir address
Equinix Internet Exchange SingaporeSingapore, Singapore27.111.231.48
Hong Kong Internet ExchangeHong Kong, China123.255.90.19
Singapore Internet ExchangeSingapore, Singapore103.16.103.16

Transit providers

16 upstream, 2 downstream and 22 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS3491PCCW Global (HK) Ltd.30,121
AS2914NTT America, Inc.3,860
AS4635Hong Kong Internet Exchange--Route Server 1848
AS17476CloudRadium (HK) Limited715
AS24482SG.GS447
AS38001NewMedia Express Pte Ltd397
AS37989DCS1 Pte. Ltd.396
AS51847Nearoute Limited290

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-15, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 242 prefixes · 188K addresses IPv6 2 prefixes

CountryNamePrefixes
HKHong Kong244

Registry

Allocation record

APNIC · via Atlas (registry + RDAP)
Registry
APNIC
Handle
AS152194
Registry name
CTGSERVERLIMITED-AS-AP
Registrant
CTG Server Limited
Abuse contact
abuse@ctgserver.net
Registered
2023-12-22
Last changed
2023-12-22
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
94% valid · 616 valid, 42 with no ROA
ROAs
154 authorising AS152194
ASPA
no ASPA record
IRR
100% registered · 658 of 658 announcements
Route objects
6,420 naming AS152194

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

On Spamhaus ASN-DROP Spamhaus lists this entire network (associated domain ctgserver.com) as controlled by, or hijacked for, cybercrime. Many operators null-route everything it originates.

125 DROP matches Announced space overlapping the DROP prefix list.

AnnouncedDROP entryRecord
14.128.32.0/2014.128.32.0/20SBL657011
14.128.48.0/2114.128.48.0/21SBL656501
27.50.62.0/2327.50.63.0/24SBL613485
27.124.2.0/2327.124.0.0/18SBL668364
27.124.4.0/2227.124.0.0/18SBL668364
27.124.9.0/2427.124.0.0/18SBL668364
27.124.10.0/2327.124.0.0/18SBL668364
27.124.12.0/2427.124.0.0/18SBL668364
27.124.17.0/2427.124.0.0/18SBL668364
27.124.17.0/2427.124.17.0/24SBL613430
27.124.40.0/2227.124.41.0/24SBL613196
45.64.52.0/2245.64.52.0/22SBL676674
103.1.42.0/23103.1.43.0/24SBL654731
103.19.188.0/22103.19.188.0/22SBL654997
103.254.108.0/22103.254.108.0/22SBL657512
112.213.96.0/21112.213.96.0/19SBL668365
112.213.104.0/21112.213.96.0/19SBL668365
112.213.112.0/20112.213.96.0/19SBL668365
117.18.0.0/23117.18.0.0/24SBL628723
118.107.0.0/21118.107.0.0/18SBL687374
118.107.9.0/24118.107.0.0/18SBL687374
118.107.10.0/23118.107.0.0/18SBL687374
118.107.12.0/22118.107.0.0/18SBL687374
118.107.16.0/20118.107.0.0/18SBL687374
118.107.16.0/20118.107.16.0/20SBL657508
121.127.232.0/21121.127.233.0/24SBL673941
134.122.128.0/20134.122.128.0/17SBL657510
134.122.144.0/22134.122.128.0/17SBL657510
134.122.148.0/24134.122.128.0/17SBL657510
134.122.149.0/24134.122.128.0/17SBL657510
134.122.150.0/24134.122.128.0/17SBL657510
134.122.151.0/24134.122.128.0/17SBL657510
134.122.152.0/21134.122.128.0/17SBL657510
134.122.160.0/23134.122.128.0/17SBL657510
134.122.163.0/24134.122.128.0/17SBL657510
134.122.164.0/22134.122.128.0/17SBL657510
134.122.168.0/21134.122.128.0/17SBL657510
134.122.168.0/21134.122.168.0/24SBL630283
134.122.176.0/20134.122.188.0/24SBL629132
134.122.176.0/20134.122.189.0/24SBL637586
137.220.128.0/23137.220.128.0/17SBL669374
137.220.131.0/24137.220.128.0/17SBL669374
137.220.132.0/22137.220.128.0/17SBL669374
137.220.137.0/24137.220.128.0/17SBL669374
137.220.138.0/24137.220.128.0/17SBL669374
137.220.141.0/24137.220.128.0/17SBL669374
137.220.142.0/23137.220.128.0/17SBL669374
137.220.144.0/23137.220.128.0/17SBL669374
137.220.146.0/24137.220.128.0/17SBL669374
137.220.147.0/24137.220.128.0/17SBL669374

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,781 prefixes, as published 2026-10-16. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

55 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
14.128.33.8Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data2026-10-08
1.32.216.104China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
1.32.216.113China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
1.32.216.123China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
1.32.216.126China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
1.32.216.130China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
1.32.216.132China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
1.32.216.145China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
1.32.216.167China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
1.32.216.171China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26

Showing the first 10 of 55.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check