asn.dev

Autonomous system

AS211443 -Reserved AS-

Unclassified Spamhaus ASN-DROP RIPE

IPv4 addresses 2.30K 9 prefixes
IPv6 prefixes 1 counted as prefixes, not addresses
Countries 1 mostly HK
Exchanges 0 recorded by PCH
Upstreams 5 0 downstream
Flagged prefixes 0 none

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

5 upstream, 0 downstream and 6 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS213438ColocaTel Inc.180
AS44592SkyLink Data Center BV155
AS56655Gigahost AS130
AS49581Ferdinand Zink trading as Tube-Hosting60
AS209874Tech Tide Portugal Unipessoal LDA60

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-16, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 9 prefixes · 2.30K addresses IPv6 1 prefixes

CountryNamePrefixes
HKHong Kong10

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS211443
Registry name
SINOWORLDWIDE
Registrant
SINO WORLDWIDE TRADING LIMITED
Abuse contact
abuse@sinoworldwidetrading.com
Registered
2025-11-27
Last changed
2026-09-18
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 10 valid, 0 with no ROA
ROAs
12 authorising AS211443
ASPA
no ASPA record
IRR
100% registered · 10 of 10 announcements
Route objects
11 naming AS211443

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

On Spamhaus ASN-DROP Spamhaus lists this entire network (associated domain sinoworldwidetrading.com) as controlled by, or hijacked for, cybercrime. Many operators null-route everything it originates.

1 DROP match Announced space overlapping the DROP prefix list.

AnnouncedDROP entryRecord
87.120.104.0/2487.120.104.0/24SBL699922

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,783 prefixes, as published 2026-10-17. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

1 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
85.11.187.8FortiBleed Operations Continue Targeting Exposed Systems Leading to Reports of Lockouts2026-10-06

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check