AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS

AS9830 (SWIFTONLINE-AS-AP, "SWIFT ONLINE BORDER AS") is registered in India to SwiftMail Communications Limited, based in Chennai, operating under the Swift Online name. Registry directories classify it as an ISP; the announced inventory tells a more specific story, and it is worth reading carefully.

What it's used for

RIS sees 36 IPv4 prefixes carrying 9,216 addresses and no IPv6, announced through 3 BGP neighbours. Almost all of it is 202.91.64.0/19 split into individual /24s — announcing a block one /24 at a time, rather than as a single route, is a deliberate choice and is characteristic of address space that needs to be reputationally separable — plus a few unrelated /24s (160.20.5.0/24, 163.227.198.0/24, 103.239.65.0/24). One sampled address carries the operator's own newmail.swift-online.com, but most resolve to algorithmically-generated hostnames under many unrelated third-party domains (patterns like reminder5.<word>202.<domain>), including at least one offshore gambling domain. That is the classic look of address space used for bulk-email or affiliate-marketing sending pools, whether run by the operator or leased out to customers doing it.

Notable

• Marketing and inventory diverge. The AS is filed as an ISP, but there is no eyeball rDNS and no subscriber pattern in the space. Treat "ISP" here as a registry category, not a description of the traffic.
• The per-/24 deaggregation across a single /19 is the operational signature of a sender-reputation strategy: when one /24 gets blocklisted, the rest keep working.
• No IPv6 is announced.