asn.dev

Autonomous system

AS57724 DDOS-GUARD

Unclassified RIPE NSP

IPv4 addresses 8.45K 18 prefixes
IPv6 prefixes 1 counted as prefixes, not addresses
Countries 1 mostly RU
Exchanges 3 recorded by PCH
Upstreams 10 73 downstream
Flagged prefixes 0 none

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 3 exchanges in 1 country, largest first.

ExchangeLocationTheir address
MSK-IX MoscowMoscow, Russia195.208.210.96
MSK-IX St. PetersburgSt. Petersburg, Russia194.226.102.215
MSK-IX Rostov-on-DonRostov-on-Don, Russia193.232.140.52

Transit providers

10 upstream, 73 downstream and 96 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS59692IQWeb FZ-LLC1,706
AS12389PJSC Rostelecom87
AS3216PJSC "Vimpelcom"36
AS49673Truenetwork LLC34
AS12552GlobalConnect AB32
AS56655Gigahost AS32
AS50673Serverius Holding B.V.4
AS24482SG.GS2

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-14, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 18 prefixes · 8.45K addresses IPv6 1 prefixes

CountryNamePrefixes
RURussian Federation19

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS57724
Registry name
DDOS-GUARD
Registrant
DDOS-GUARD-5-MNT
Abuse contact
abuse@ddos-guard.net
Registered
2015-12-01
Last changed
2026-09-11
Allocation
allocated

Declared

PeeringDB profile

self-reported
Name
DDoS-Guard.net main network
Network type
NSP
Scope
Global
Traffic ratio
Mostly Outbound
Peering policy
Selective
IRR as-set
AS-DDOS-GUARD
Present at
12 exchanges
Website
https://ddos-guard.net/

PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.

Routing security

RPKI and IRR

Full detail
RPKI
97% valid · 34 valid, 1 with no ROA
ROAs
36 authorising AS57724
ASPA
no ASPA record
IRR
97% registered · 34 of 35 announcements 1 other origin
Route objects
54 naming AS57724

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,773 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

1 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
185.178.209.193"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check