AS212706 NETWORK-AUTOMATION-SOLUTIONS

LIVI-HOSTING-AS is LIVI HOSTING LTD (ORG-LHL20-RIPE), a RIPE-registered hosting operator announcing forty /24s of brokered address space. The routing and reverse DNS both point at a Russian operator, ZTV, rather than at the British letterhead.

What it's used for

Hosting. RIS observes 40 IPv4 prefixes totalling 10,240 addresses, every one of them a /24, plus a single 2a13:a504::/32. Transit comes from three upstreams: AS57043 (HOSTKEY), AS199152 (VDC-USA) and AS209847. There are no customer ASNs.

Notable

• The operator is ZTV, not LIVI. Every prefix that answers a PTR at .1 returns a router name under ztv.su or ztv.company: gateway.ztv.su, gw.ztv.company, gateway.ztv.company. The aut-num's registrant mntner is lir-ru-ztv-1-MNT, and the sub-allocation covering the reported evidence IP is netname ZTV-CORP under lir-ru-powernet-1-MNT with abuse contact abuse@ztv.su. LIVI HOSTING LTD is the RIPE-facing shell over a Russian LIR's address space.
• The address space was assembled by inter-RIR transfer, not grown. 104.171.140.0/24 through 104.171.143.0/24 come out of an IANA range originally delegated to ARIN, 111.88.212.0/24 through 111.88.215.0/24 and 153.80.178.0/24 through 153.80.179.0/24 out of APNIC ranges, and 186.246.34.0/24 and 186.246.35.0/24 out of a LACNIC range. All of them now carry RIPE inetnum objects registered between 2026-03-03 and 2026-05-08, and RIPE records itself as the RIR of record for each. Forty disaggregated /24s drawn in from three other regions inside six months is an IP-leasing footprint, not a network that grew its own allocation.
• Assigned netnames run LIVI-HOSTING-NL, LIVI-HOSTING-GB, LIVI-HOSTING-FI, LIVI-HOSTING-FR, ZTV-CORP, ZTV-CORP-NL, RU-ZTV2-20230124 and GB-ZTVCORP-20260410. There is no broadband, dyn, pppoe or subscriber naming anywhere in the sample, so there is no residential false-positive risk here.
• The AS number was registered on 2026-02-18, making it under a year old.
• No PeeringDB record exists, so there are no self-declared fields to cross-check. livihosting.com resolves and returns 200 but serves only a "Server Maintenance" placeholder with server-rack and DC-1 copy, and no product catalogue.

Interesting

• Filed as hosting only, deliberately not VPN. Nothing in the routing, reverse DNS, netnames or the website advertises tunnels or exit nodes. The curated lists permit an ASN in both hosting and VPN, so if VPN egress is later observed it can be added without moving the hosting classification.
• Reputation is clean on paper, which sits oddly against the shape. The AS is absent from Spamhaus ASN-DROP and none of its forty prefixes appear in Spamhaus DROP.
• The reported evidence IP, 46.29.237.80, has changed hands twice recently. Its /24 was originated by AS44477 through 2024, then AS43581 into early 2026, before moving here on 2026-02-24. Its only PTR is anymail.tech.
• Compare AS215925, the same recognisable shape of a young company registered in one jurisdiction announcing small blocks registered in several others.