Autonomous system
AS27956 Cyber Cast International, S.A.
Hosting ARIN
Summary
Cyber Cast International
hosting panama business
AS27956 is operated by Cyber Cast International, S.A.
What it's used for
- The address space carries hosting and business services, evidenced by reverse DNS entries such as
mail.alpallium.com,mail.securtalk.com,netrichesltd.com, andflowersun.telcorush.com. - The AS announces 4864 IPv4 addresses across 5 prefixes with only 2 observed neighbours, a ratio that indicates a hosting or access network rather than a transit provider.
Notable
- All registrants for the announced prefixes are listed as Cyber Cast International, S.A., matching the AS holder.
- The inventory consists of two /21 blocks and three /24 blocks, all located in Panama.
CLASSIFICATION - after the card, on its own final line, emit exactly:
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
1 upstream, 0 downstream and 1 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS11556 | Cable & Wireless Panama | 1,121 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-31, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 5 prefixes · 4.86K addresses IPv6 0 prefixes
| Country | Name | Prefixes |
|---|---|---|
| PA | Panama | 5 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS27956- Registry name
- 27956
- Registrant
- Cyber Cast International, S.A.
- Abuse contact
- abuse@ccipanama.com
- Registered
- 2008-01-30
- Last changed
- 2009-04-01
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 16% valid · 3 valid, 16 with no ROA
- ROAs
- 3 authorising AS27956
- ASPA
- no ASPA record
- IRR
- 100% registered · 19 of 19 announcements
- Route objects
- 19 naming AS27956
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 447 networks and 1,843 prefixes, as published 2026-11-01. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
4 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
190.97.163.117 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
190.97.163.142 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
190.97.163.213 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
190.97.163.88 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere