AS8868 IRCDN

IRCDN is held by **Khallagh Borhan Market Development for Creative Industries

Co**, a Tehran company registered as a RIPE Local Internet Registry. The handle,

and the shape of the network, point to a domestic Iranian **content-delivery and

hosting** operation.

What it's used for

• Serving content from within Iran. About 3,072 IPv4 addresses across ten /24s, all from modern RIPE 185/8 ranges, reached through a small number of Iranian upstreams. No IPv6 is announced.

Notable

• No reverse DNS is delegated at all. The in-addr.arpa zones for the announced blocks return no nameservers, so the space is genuinely dark in reverse rather than merely missing individual PTRs. The strongest evidence for what the space carries is therefore unavailable, and the classification rests on the handle, the registration and the topology — medium confidence, not high.
• The prefixes are all self-registered to the holder (IR-KHALLAAGH-* netnames), in one RIR, one country, behind domestic transit. Scattered 185.x /24s with no rDNS is the address-broker silhouette, but the registration chain here is coherent and first-party: this is a real, small Iranian operator, not brokered space.
• Only two observed BGP neighbours. A network with genuine CDN reach would normally show far more; this reads as a single-market CDN or hosting platform sitting behind Iranian transit rather than a global edge.
• The low AS number is misleading. The AS object dates from 2015 and the first prefix was seen in BGP in 2016, so 8868 is a reissued number, not an early-internet allocation. There is no legacy history to tell about this holder.