Autonomous system
AS212238 CDNEXT
Hosting DROP-listed space RIPE
Summary
DataCamp Limited (CDN77 / DataPacket)
cdn hosting edge
DataCamp Limited is a UK-registered hosting and CDN operator. Its network underpins several brands, notably CDN77 (content delivery) and DataPacket (bare-metal and bandwidth), plus resold IP transit.
What it's used for
- CDN edge caching, bare-metal servers, and bandwidth/IP transit sold under multiple brands.
Notable
- Parts of this range are leased to VPN and proxy operators, so it commonly appears in VPN/proxy ASN lists. An IP here identifies DataCamp as the host, not necessarily the operator of whatever runs on it.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
11 upstream, 0 downstream and 14 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-26, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 2,760 prefixes · 1.06M addresses IPv6 196 prefixes
| Country | Name | Prefixes |
|---|---|---|
| GB | United Kingdom | 2,956 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS212238- Registry name
- CDNEXT
- Registrant
- DATACAMP-MNT
- Abuse contact
- abuse@datacamp.co.uk
- Registered
- 2020-12-02
- Last changed
- 2026-07-14
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 92% valid · 4,100 valid, 366 with no ROA 10 RPKI-invalid
- ROAs
- 4,885 authorising AS212238
- ASPA
- no ASPA record
- IRR
- 98% registered · 4,399 of 4,476 announcements 19 other origin
- Route objects
- 7,307 naming AS212238
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
28 DROP matches Announced space overlapping the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 446 networks and 1,852 prefixes, as published 2026-10-27. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
20 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
138.199.62.148 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
156.146.45.152 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
156.146.45.194 | Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data | 2026-10-08 |
109.166.36.217 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
185.126.116.236 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
185.167.116.125 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
194.124.33.93 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
194.124.35.104 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
45.128.153.126 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
45.128.153.29 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
Showing the first 10 of 20.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere