AS835

AS835 is an actively routed ASN registered to GoCodeIT Inc, a Thornhill, Ontario-based hosting and wholesale-internet provider that markets its network as "Xenyth Cloud" — this is a live, in-production ASN, not a dormant registry holding.

ARIN RDAP records the autnum's top-level registration event at 2022-06-16, with status Active and registrant address in Thornhill, ON, Canada. The operator's own site (as835.net) corroborates this with a maintained services and peering page.

Route visibility is strong: RIPEstat's RIS feed enumerates 11 IPv4 and 11 IPv6 prefixes originated by AS835 (~10,752 IPv4 addresses) with full peer coverage (327/327 IPv4, 321/321 IPv6 RIS peers) as of 2026-08-07, and RIPEstat's routing-status confirms the same 11/11 origin-announced count. bgp.he.net's larger 185 IPv4 / 111 IPv6 figure is that page's own separately-labeled "Prefixes Announced" metric, distinct from its "Prefixes Originated" count, which matches 11/11. First announcement was seen 2022-08-17, a normal gap after the 2022-06-16 registration.

CAIDA ranks AS835 508th globally by customer cone (89 ASNs, 751 prefixes, ~226,822 addresses) with an inferred relationship mix of 37 customers, 56 peers, and 4 unnamed providers. CAIDA's topology inference also places it in the routing "clique," a methodology artifact rather than evidence of Tier-1 transit-free status.

Peering policy is Open per the operator's own site and PeeringDB (net 30339), with no contract or ratio requirement.

RPKI coverage is mixed, not uniformly valid: RIPEstat's rpki-validation endpoint returns per-prefix results that vary across AS835's announced space. 74.119.149.0/24 returns status valid, with a validating ROA (origin AS835, maxLength 24). 153.76.0.0/19 returns status unknown, with no validating ROA on file. The two example prefixes show coverage is partial, not blanket.

A geolocation anomaly is also worth flagging: CAIDA's coordinates plot to rural West Virginia, inconsistent with the Canadian RDAP registration and CAIDA's own "CA" country field. The country code, not the coordinates, should be treated as reliable.

Exposure

actively routed hosting/wholesale-internet ASN with real BGP visibility, not a dormant registry entry — its address space carries live production traffic.

Abuse signal

no notable ASN-level abuse record found as of 2026-08-07 across Spamhaus, VirusTotal, and NANOG archive search; a handful of individual IPs in its space carry low-volume AbuseIPDB reports (1–6 reports each), typical hosting-provider background noise.

Caveat

AbuseIPDB's ASN-level page and Talos Intelligence's reputation center both returned HTTP 403 to direct fetch, so those two rest on search-engine coverage rather than a direct page read.

Supplementary

FraudGuard.io (outside the four requested feeds) tags some IPs in AS835's range "anonymous_tracker" and "honeypot_tracker," last observed 2025-12-14 — passive traffic classification, not a confirmed malware or targeted-attack finding.

Operator

GoCodeIT Inc (ARIN OrgId GOCOD; markets as "Xenyth Cloud"), Thornhill, ON, Canada [Confirmed] — https://rdap.arin.net/registry/autnum/835, https://as835.net/

Country / RIR

CA, ARIN [Confirmed] — ARIN RDAP autnum record; CAIDA ASRank country field

Allocated

2022-06-16 (ARIN RDAP top-level autnum registration event, re-verified via a full re-fetch that returned identical dates) [Confirmed] — https://rdap.arin.net/registry/autnum/835

Org status

active per ARIN RDAP, corroborated by a live, actively maintained operator website [Confirmed] — https://rdap.arin.net/registry/autnum/835, https://as835.net/

Contacts

domainsupport@gocode.it (RIPEstat abuse-contact-finder, authoritative RIR: ARIN) [Confirmed] — https://stat.ripe.net/data/abuse-contact-finder/data.json?resource=835

Security/abuse context (NEUTRAL, DATED)

no notable ASN-level abuse signal found as of 2026-08-07 across Spamhaus, VirusTotal, and NANOG archives; AbuseIPDB ASN page and Talos reputation center both 403'd to direct fetch; a few individual IPs carry low-count AbuseIPDB reports; FraudGuard.io (supplementary, outside the 4 requested feeds) tags some IPs anonymization/honeypot-probe activity, last seen 2025-12-14

Network & routing

Network type

hosting and wholesale internet provider / IP transit and cloud-infrastructure operator [Confirmed] — https://as835.net/, https://as835.net/services/

Size

RIPEstat RIS shows 11 IPv4 / 11 IPv6 prefixes originated (~10,752 IPv4 addresses), full peer visibility (327/327 v4, 321/321 v6); RIPEstat routing-status agrees (11/11, 10,752 IPv4 addresses, 806 IPv6 /48s) [Confirmed] — https://stat.ripe.net/data/announced-prefixes/data.json?resource=835, https://stat.ripe.net/data/routing-status/data.json?resource=835; bgp.he.net separately labels its larger 185 IPv4 / 111 IPv6 figure "Prefixes Announced," distinct from its own "Prefixes Originated" count, which matches 11/11

[Confirmed] — https://bgp.he.net/AS835

Routing/peering

CAIDA ASRank 508; customer cone 89 ASNs / 751 prefixes / 226,822 addresses; AS-degree 97 (37 customers, 56 peers, 4 providers); clique-flagged (topology-inference artifact, not a Tier-1 claim) [Confirmed]. Peering policy Open, no contract/ratio requirement

[Confirmed] — https://asrank.caida.org/asns/835, https://as835.net/peering/, https://www.peeringdb.com/net/30339

RPKI

mixed across AS835's announced space, not uniformly valid — RIPEstat rpki-validation returns per-prefix results: 74.119.149.0/24 is status valid (validating ROA present, origin AS835, maxLength 24); 153.76.0.0/19 is status unknown (no validating ROA on file) [Confirmed] — https://stat.ripe.net/data/rpki-validation/data.json?resource=835&prefix=74.119.149.0/24, https://stat.ripe.net/data/rpki-validation/data.json?resource=835&prefix=153.76.0.0/19

Notable usage

powers Xenyth Cloud; hosts a public Linux mirror, an Ookla Speedtest server, and sponsors DNS root-server infrastructure [Confirmed] — https://as835.net/services/

Related ASNs

AS62513 (RDAP name GOCODEIT-INC), also registered to GoCodeIT Inc under ARIN org handle GOCOD, with its own operator site at as62513.net [Confirmed] — https://rdap.arin.net/registry/autnum/62513

Analyst note

AS835 is a young (2022), actively routed Canadian hosting ASN (GoCodeIT Inc / Xenyth Cloud) with a real BGP footprint and no notable abuse signal. RPKI coverage is mixed across the announced space, not uniformly valid: 74.119.149.0/24 is valid but 153.76.0.0/19 lacks a validating ROA. A CAIDA geo-coordinate anomaly is worth noting: coordinates plot to rural West Virginia, inconsistent with the Canadian RDAP registration and CAIDA's own country field (the country code should be treated as reliable). AS62513, also registered to GoCodeIT Inc under org handle GOCOD, was identified as a related ASN.