Autonomous system
AS200019 ALEXHOST
Unclassified DROP-listed space RIPE
Interconnection
Peering at a glance
Internet exchanges
Recorded at 3 exchanges in 3 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| InterLAN-IX | Bucharest, Romania | 86.104.125.122 |
| Balkan Internet Exchange | Sofia, Bulgaria | 185.1.30.60 |
| Moldova Internet Exchange | Chisinau, Moldova | 193.17.78.14 |
Transit providers
16 upstream, 6 downstream and 35 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 82 prefixes · 44.80K addresses IPv6 22 prefixes
| Country | Name | Prefixes |
|---|---|---|
| MD | Moldova, Republic of | 104 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS200019- Registry name
- AlexHost
- Registrant
- CLOUDATAMD-MNT
- Abuse contact
- abuse@alexhost.com
- Registered
- 2013-10-30
- Last changed
- 2026-03-30
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 99.3% valid · 144 valid, 1 with no ROA
- ROAs
- 157 authorising AS200019
- ASPA
- 14 declared providers
- IRR
- 100% registered · 145 of 145 announcements
- Route objects
- 173 naming AS200019
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
1 DROP match Announced space overlapping the DROP prefix list.
| Announced | DROP entry | Record |
|---|---|---|
| 85.121.4.0/23 | 85.121.4.0/24 | SBL686817 |
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
2 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
176.123.1.250 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
176.123.6.58 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere