Autonomous system
AS15370 MFISOFT-AS Citadel LLC
Unclassified APNIC
Summary
Citadel
business enterprise hosting
Two reverse naming conventions inside one zone, under a domain with the vowels removed.
What it's used for
- A company's network. Two IPv4 prefixes and one IPv6
/48announced from the Russian Federation, seven hundred and sixty-eight addresses, through two observed BGP neighbours.
Notable
- One answering address gives only its last octet before the domain; the other gives two octets joined by a dash. Two conventions, one zone, six addresses apart.
- The domain itself is the registrant's name with the vowels taken out, four consonants and nothing else.
- The AS handle and the netname both name a software product, while the registrant names the company that holds the space.
- Six addresses were queried for reverse DNS and two returned a name.
- The two announcements sit close together with an unannounced block between them.
Interesting
- Mixed reverse conventions mean the zone was populated in at least two passes, and the earlier pass was never revisited. Nothing breaks, so nothing gets fixed.
- A product name in the AS handle and a company name in the registrant is the usual result of a business renaming itself while its network identifiers stay put.
- Vowel-stripped domains are compact and unsearchable, which suits infrastructure names that were never meant to be typed by customers.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-11-12, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 2 prefixes · 768 addresses IPv6 1 prefixes
| Country | Name | Prefixes |
|---|---|---|
| RU | Russian Federation | 3 |
Registry
Allocation record
- Registry
- APNIC
- Handle
AS15370- Registry name
- MFISOFT-AS
- Registrant
- AZ42913-MNT
- Abuse contact
- abuse@mfisoft.ru
- Registered
- 2011-03-28
- Last changed
- 2018-09-04
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 0% valid · 0 valid, 3 with no ROA
- ROAs
- 0 authorising AS15370
- ASPA
- no ASPA record
- IRR
- 100% registered · 3 of 3 announcements
- Route objects
- 3 naming AS15370
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 453 networks and 1,848 prefixes, as published 2026-11-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere