asn.dev

Autonomous system

AS17561 LCS-AS-AP LARUS Limited

Unclassified DROP-listed space APNIC

IPv4 addresses 432K 311 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly HK
Exchanges 2 recorded by PCH
Upstreams 25 0 downstream
Flagged prefixes 0 none

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 2 exchanges in 2 countries, largest first.

ExchangeLocationTheir address
DE-CIX FrankfurtFrankfurt, Germany80.81.195.230
NAPAfrica IX JohannesburgJohannesburg, South Africa196.60.9.47

Transit providers

25 upstream, 0 downstream and 25 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS17497Liasail Global Hongkong Limited62,858
AS263681IPTP NETWORKS S.A.C.16,312
AS41095IPTP LTD6,445
AS61461Airtek Solutions C.A.5,257
AS35916MULTACOM CORPORATION1,738
AS6939Hurricane Electric LLC1,419
AS34549meerfarbig GmbH & Co. KG580
AS51601IPTP LTD354

All 25 upstreams →

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-15, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 311 prefixes · 432K addresses IPv6 0 prefixes

CountryNamePrefixes
HKHong Kong311

Registry

Allocation record

APNIC · via Atlas (registry + RDAP)
Registry
APNIC
Handle
AS17561
Registry name
LCS-AS-AP
Registrant
Larus Limited
Abuse contact
t.t.xu@larus.net
Registered
2024-06-06
Last changed
2024-06-06
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 1,671 valid, 0 with no ROA
ROAs
13,583 authorising AS17561
ASPA
no ASPA record
IRR
93% registered · 1,555 of 1,671 announcements 8 other origin
Route objects
6,522 naming AS17561

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

1 DROP match Announced space overlapping the DROP prefix list.

AnnouncedDROP entryRecord
154.216.160.0/19154.216.188.0/24SBL655979

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,782 prefixes, as published 2026-10-16. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

3 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
156.251.172.166China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
156.251.172.167China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
156.251.172.168China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check