asn.dev

Autonomous system

AS211663 GALEON-AS

Unclassified Spamhaus ASN-DROP RIPE

IPv4 addresses 256 1 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly RU
Exchanges 0 recorded by PCH
Upstreams 3 0 downstream
Flagged prefixes 0 none

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

3 upstream, 0 downstream and 3 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS31277OOO New Line Telecom31
AS31500Global Network Management Inc26
AS61407NewTelco GmbH8

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-14, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 1 prefixes · 256 addresses IPv6 0 prefixes

CountryNamePrefixes
RURussian Federation1

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS211663
Registry name
GALEON-AS
Registrant
lir-ru-galeonservice-1-MNT
Abuse contact
abuse@galeonservice.ru
Registered
2025-03-11
Last changed
2026-03-04
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
0% valid · 0 valid, 1 with no ROA
ROAs
0 authorising AS211663
ASPA
no ASPA record
IRR
100% registered · 1 of 1 announcements
Route objects
1 naming AS211663

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

On Spamhaus ASN-DROP Spamhaus lists this entire network (associated domain changway.hk) as controlled by, or hijacked for, cybercrime. Many operators null-route everything it originates.

1 DROP match Announced space overlapping the DROP prefix list.

AnnouncedDROP entryRecord
37.72.140.0/2437.72.140.0/24SBL693418

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,771 prefixes, as published 2026-10-15. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check