Autonomous system
AS51852 PLI-AS
Hosting DROP-listed space RIPE
Summary
Private Layer
hosting dedicated datacenter
An Autonomous System operated by Private Layer Inc, a provider offering dedicated servers and colocation with an emphasis on privacy, primarily out of Swiss data-center space.
What it's used for
- Dedicated servers and colocation marketed around privacy, resilience, and DDoS resistance.
Notable
- An IP here identifies the host, not the operator of what runs on it — the privacy positioning attracts both legitimate customers and abuse.
Interesting
- Private Layer is often cited in the "bulletproof"/privacy-hosting category because of its Swiss footprint and marketing.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 2 exchanges in 1 country, largest first.
| Exchange | Location | Their address |
|---|---|---|
| DE-CIX Frankfurt | Frankfurt, Germany | 2001:7f8::ca8c:0:1 |
| Megaport Frankfurt IX | Frankfurt, Germany | 2001:7f8:8:20:0:ca8c:0:1 |
Transit providers
1 upstream, 0 downstream and 2 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS43440 | Digitale Suisse AG | 6,259 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 30 prefixes · 35.33K addresses IPv6 2 prefixes
| Country | Name | Prefixes |
|---|---|---|
| PA | Panama | 32 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS51852- Registry name
- PLI-AS
- Registrant
- KP73900-MNT
- Abuse contact
- abuse@privatelayer.com
- Registered
- 2010-11-15
- Last changed
- 2026-04-15
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 25% valid · 24 valid, 72 with no ROA
- ROAs
- 24 authorising AS51852
- ASPA
- no ASPA record
- IRR
- 100% registered · 96 of 96 announcements
- Route objects
- 123 naming AS51852
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
1 DROP match Announced space overlapping the DROP prefix list.
| Announced | DROP entry | Record |
|---|---|---|
| 179.43.128.0/18 | 179.43.175.0/24 | SBL628730 |
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 436 networks and 1,771 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
1 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
179.43.184.22 | "First VPN Service" Used by Ransomware Actors to Compromise Systems | 2026-05-21 |
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere