asn.dev

Autonomous system

AS8739 ICDSOFT

Hosting ARIN

IPv4 addresses 15.36K 24 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly BG
Flagged prefixes 0 none

Summary

ICDSoft

Global · AI-generated

hosting legacy

ICDSoft Ltd (ICDSoft) — a long-running web-hosting company, headquartered in

Sofia, Bulgaria, that has been selling shared hosting since the late 1990s. Around

15,000 IPv4 addresses across 30 prefixes.

What it's used for

  • Shared web hosting, email and domains. The reverse DNS is a hosting provider's fingerprint, top to bottom: sequential shared servers named sNNNN.sureserver.com, their nameservers as ns2.sNNNN.sureserver.com, cage switches and VLAN gateways named the same way, plus white-label nameservers for reseller brands.
  • sureserver.com and suresupport.com are the company's own infrastructure domains — the customer-facing brand and the technical estate are deliberately kept apart.

Notable

  • A textbook case of the scattered-multi-RIR shape being innocent. The inventory spans ARIN (216.34/216.35, 64.14, 209.67), APNIC (116.251) and RIPE (195.42, 195.8, 213.145) blocks — the silhouette of an address broker — but every block carries first-party sureserver.com reverse DNS and is registered to ICDSoft itself. It is simply a hosting company with data centres on several continents, which is exactly what its geographically-split blocks say.
  • Location is best described as Global: the ARIN space serves US customers, the APNIC space Hong Kong, the RIPE space Europe, all from one operator.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Address space

Summary

Full explorer
CountryNamePrefixes
BGBulgaria24

Registry

Allocation record

via ARIN RDAP
Registry
ARIN
Handle
AS8739
Registry name
ICDSoft
Registrant
MNT-ICDSOFT
Abuse contact
abuse@suresupport.com
Registered
2006-10-11
Last changed
2022-10-19
Status
active

Reputation

Classification and threat

Hosting Datacenter or cloud provider. Addresses are servers, not people.

No IC3 indicators Nothing from the FBI IC3 feed.

Threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check