Autonomous system
AS401626 NETIFACE-TORONTO
Hosting Spamhaus ASN-DROP ARIN
Summary
Netiface America, Inc.
hosting leased-space
NETIFACE-TORONTO is Netiface America, Inc., a small ARIN-registered hosting network originating three unrelated /24s and little else. The operator has no working website.
What it's used for
Hosting on brokered address space. RIS observes 3 IPv4 prefixes totalling 768 addresses and no IPv6 at all. The three blocks come from three different places, which is the most informative thing about this network: 23.132.164.0/24 is an ARIN DIRECT ALLOCATION to Netiface America itself, netname INTERNAL-NS, and is the only self-held block; 64.89.163.0/24 is an ARIN ASSIGNMENT to Meowcore Softworks LLC, a tenant; and 185.242.3.0/24 is RIPE ASSIGNED PA space, netname Felcloud-24 under FELCLOUDNET-MNT.
Transit comes from a single upstream, AS203446 (SmartNet). There is no PeeringDB record.
Notable
- The operator has no live website. Spamhaus records this ASN's domain as
netiface.co.uk, which 307-redirects tonetiface.io— andnetiface.iohas Cloudflare nameservers but no A record at all, so nothing resolves. The unhyphenatednetiface.comis a separate site on Google infrastructure and returns 403. - The AS number was registered on 2025-01-17, so this is a young network, and it is listed in the live Spamhaus ASN-DROP feed.
- Naming and geography disagree: the aut-num is named
NETIFACE-TORONTOand the registrant is "Netiface America, Inc.", while Spamhaus records the country as GB.
Interesting
- A lookup on the address most people arrive at (
64.89.163.179) reports Meowcore Softworks LLC, not Netiface, because that/24is assigned to a tenant. The announcing ASN is the reliable identity here; the per-IP company field is not. - Reverse DNS is empty on every address sampled across all three prefixes, so there is nothing to corroborate what the space is used for beyond the registrations themselves.
- 768 addresses across three brokered
/24s, one upstream, no PeeringDB, no website, no rDNS. Registry data is the only handle on this network — the same shape as AS197170, whose published contact domain also had no DNS records.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
1 upstream, 0 downstream and 2 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS203446 | SMARTNET Germany GmbH | 274 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-18, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 4 prefixes · 1.02K addresses IPv6 1 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 5 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS401626- Registry name
- NETIFACE-TORONTO
- Registrant
- Netiface America, Inc.
- Abuse contact
- abuse@netiface.io
- Registered
- 2025-01-17
- Last changed
- 2025-01-17
- Allocation
- assigned
Routing security
RPKI and IRR
- RPKI
- 80% valid · 4 valid, 1 with no ROA
- ROAs
- 5 authorising AS401626
- ASPA
- no ASPA record
- IRR
- 80% registered · 4 of 5 announcements
- Route objects
- 5 naming AS401626
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
On Spamhaus ASN-DROP Spamhaus lists this entire
network (associated domain netiface.co.uk)
as controlled by, or hijacked for, cybercrime. Many operators null-route
everything it originates.
3 DROP matches Announced space overlapping the DROP prefix list.
| Announced | DROP entry | Record |
|---|---|---|
| 23.132.164.0/24 | 23.132.164.0/24 | SBL688228 |
| 64.89.163.0/24 | 64.89.160.0/22 | SBL692143 |
| 185.242.3.0/24 | 185.242.3.0/24 | SBL692424 |
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 443 networks and 1,784 prefixes, as published 2026-10-19. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere