AS835
Operated by GOCODEIT-EDGE - GoCodeIT Inc.
Summary
- // analyst note
- Young (2022), actively routed Canadian hosting/wholesale-internet ASN (GoCodeIT Inc / Xenyth Cloud), CAIDA rank 508 with an 89-ASN customer cone. No notable abuse signal found. RPKI coverage is mixed across the announced space, not uniformly valid: 74.119.149.0/24 is valid but 153.76.0.0/19 lacks a validating ROA. CAIDA geo-coordinate anomaly present (West Virginia coordinates against the correct Canadian RDAP registration; country code is reliable). AS62513, also under GoCodeIT Inc / GOCOD, is a newly identified related ASN.
- // security note
- NEUTRAL/DATED: no notable ASN-level abuse signal found as of 2026-08-07 across Spamhaus, VirusTotal, and NANOG archives; AbuseIPDB ASN page and Talos reputation center both returned HTTP 403 to direct fetch, so findings rest partly on search-engine coverage; a few individual IPs carry low-count AbuseIPDB reports; FraudGuard.io (supplementary, outside the 4 requested feeds) tags some IPs anonymization/honeypot-probe activity, last observed 2025-12-14 — passive classification, not a confirmed abuse campaign.
About this ASN.
AS835 is an actively routed ASN registered to GoCodeIT Inc, a Thornhill, Ontario-based hosting and wholesale-internet provider that markets its network as "Xenyth Cloud" — this is a live, in-production ASN, not a dormant registry holding.
ARIN RDAP records the autnum's top-level registration event at 2022-06-16, with status Active and registrant address in Thornhill, ON, Canada. The operator's own site (as835.net) corroborates this with a maintained services and peering page.
Route visibility is strong: RIPEstat's RIS feed enumerates 11 IPv4 and 11 IPv6 prefixes originated by AS835 (~10,752 IPv4 addresses) with full peer coverage (327/327 IPv4, 321/321 IPv6 RIS peers) as of 2026-08-07, and RIPEstat's routing-status confirms the same 11/11 origin-announced count. bgp.he.net's larger 185 IPv4 / 111 IPv6 figure is that page's own separately-labeled "Prefixes Announced" metric, distinct from its "Prefixes Originated" count, which matches 11/11. First announcement was seen 2022-08-17, a normal gap after the 2022-06-16 registration.
CAIDA ranks AS835 508th globally by customer cone (89 ASNs, 751 prefixes, ~226,822 addresses) with an inferred relationship mix of 37 customers, 56 peers, and 4 unnamed providers. CAIDA's topology inference also places it in the routing "clique," a methodology artifact rather than evidence of Tier-1 transit-free status.
Peering policy is Open per the operator's own site and PeeringDB (net 30339), with no contract or ratio requirement.
RPKI coverage is mixed, not uniformly valid: RIPEstat's rpki-validation endpoint returns per-prefix results that vary across AS835's announced space. 74.119.149.0/24 returns status valid, with a validating ROA (origin AS835, maxLength 24). 153.76.0.0/19 returns status unknown, with no validating ROA on file. The two example prefixes show coverage is partial, not blanket.
A geolocation anomaly is also worth flagging: CAIDA's coordinates plot to rural West Virginia, inconsistent with the Canadian RDAP registration and CAIDA's own "CA" country field. The country code, not the coordinates, should be treated as reliable.
- Operator
- GoCodeIT Inc (ARIN OrgId GOCOD; markets as "Xenyth Cloud"), Thornhill, ON, Canada [Confirmed] — https://rdap.arin.net/registry/autnum/835, https://as835.net/
- Country / RIR
- CA, ARIN [Confirmed] — ARIN RDAP autnum record; CAIDA ASRank country field
- Allocated
- 2022-06-16 (ARIN RDAP top-level autnum registration event, re-verified via a full re-fetch that returned identical dates) [Confirmed] — https://rdap.arin.net/registry/autnum/835
- Org status
- active per ARIN RDAP, corroborated by a live, actively maintained operator website [Confirmed] — https://rdap.arin.net/registry/autnum/835, https://as835.net/
- Contacts
- domainsupport@gocode.it (RIPEstat abuse-contact-finder, authoritative RIR: ARIN) [Confirmed] — https://stat.ripe.net/data/abuse-contact-finder/data.json?resource=835
Security/abuse context (NEUTRAL, DATED)
no notable ASN-level abuse signal found as of 2026-08-07 across Spamhaus, VirusTotal, and NANOG archives; AbuseIPDB ASN page and Talos reputation center both 403'd to direct fetch; a few individual IPs carry low-count AbuseIPDB reports; FraudGuard.io (supplementary, outside the 4 requested feeds) tags some IPs anonymization/honeypot-probe activity, last seen 2025-12-14
Network & routing
- Network type
- hosting and wholesale internet provider / IP transit and cloud-infrastructure operator [Confirmed] — https://as835.net/, https://as835.net/services/
- Size
- RIPEstat RIS shows 11 IPv4 / 11 IPv6 prefixes originated (~10,752 IPv4 addresses), full peer visibility (327/327 v4, 321/321 v6); RIPEstat routing-status agrees (11/11, 10,752 IPv4 addresses, 806 IPv6 /48s) [Confirmed] — https://stat.ripe.net/data/announced-prefixes/data.json?resource=835, https://stat.ripe.net/data/routing-status/data.json?resource=835; bgp.he.net separately labels its larger 185 IPv4 / 111 IPv6 figure "Prefixes Announced," distinct from its own "Prefixes Originated" count, which matches 11/11[Confirmed] — https://bgp.he.net/AS835
- Routing/peering
- CAIDA ASRank 508; customer cone 89 ASNs / 751 prefixes / 226,822 addresses; AS-degree 97 (37 customers, 56 peers, 4 providers); clique-flagged (topology-inference artifact, not a Tier-1 claim) [Confirmed]. Peering policy Open, no contract/ratio requirement[Confirmed] — https://asrank.caida.org/asns/835, https://as835.net/peering/, https://www.peeringdb.com/net/30339
- RPKI
- mixed across AS835's announced space, not uniformly valid — RIPEstat rpki-validation returns per-prefix results: 74.119.149.0/24 is status valid (validating ROA present, origin AS835, maxLength 24); 153.76.0.0/19 is status unknown (no validating ROA on file) [Confirmed] — https://stat.ripe.net/data/rpki-validation/data.json?resource=835&prefix=74.119.149.0/24, https://stat.ripe.net/data/rpki-validation/data.json?resource=835&prefix=153.76.0.0/19
- Notable usage
- powers Xenyth Cloud; hosts a public Linux mirror, an Ookla Speedtest server, and sponsors DNS root-server infrastructure [Confirmed] — https://as835.net/services/
- Related ASNs
- AS62513 (RDAP name GOCODEIT-INC), also registered to GoCodeIT Inc under ARIN org handle GOCOD, with its own operator site at as62513.net [Confirmed] — https://rdap.arin.net/registry/autnum/62513
- Analyst note
- AS835 is a young (2022), actively routed Canadian hosting ASN (GoCodeIT Inc / Xenyth Cloud) with a real BGP footprint and no notable abuse signal. RPKI coverage is mixed across the announced space, not uniformly valid: 74.119.149.0/24 is valid but 153.76.0.0/19 lacks a validating ROA. A CAIDA geo-coordinate anomaly is worth noting: coordinates plot to rural West Virginia, inconsistent with the Canadian RDAP registration and CAIDA's own country field (the country code should be treated as reliable). AS62513, also registered to GoCodeIT Inc under org handle GOCOD, was identified as a related ASN.
What this network routes.
- 153.76.0.0/19
- 23.246.184.0/24
- 74.119.149.0/24
- 207.174.104.0/24
- 74.119.151.0/24
- 207.174.105.0/24
- 74.119.150.0/24
- 23.159.16.0/24
- 92.42.200.0/24
- 104.167.228.0/24
- 170.39.230.0/24
- 2602:fd50:300::/40
- 2602:fd50:600::/40
- 2602:fd50:100::/40
- 2602:fd50:410::/44
- 2602:fd50:400::/44
- 2602:fd50:5::/48
- 2602:fd50::/48
- 2602:fd50:4::/48
- 2602:fd50:3::/48
- 2602:fd50:2::/48
- 2602:fd50:6::/48
Who it talks to.
| ASN | Operator | Role |
|---|---|---|
| AS6939 | HURRICANE - Hurricane Electric LLC | upstream |
| AS6461 | ZAYO-6461 - Zayo Bandwidth | upstream |
| AS1299 | TWELVE99 Arelion Sweden AB | upstream |
| AS174 | COGENT-174 - Cogent Communications, LLC | upstream |
| AS3257 | GTT-BACKBONE GTT Communications Inc. | upstream |
| AS14840 | AS14840 - BR.Digital Telecom | upstream |
| AS137409 | GSLNETWORKS-AS-AP - GSL Networks Pty LTD | upstream |
| AS4230 | AS4230 - CLARO S.A. | upstream |
| AS6453 | AS6453 - TATA COMMUNICATIONS (AMERICA) INC | upstream |
| AS9498 | BBIL-AP - BHARTI Airtel Ltd. | upstream |
| AS24482 | SGGS-AS-AP - SG.GS | upstream |
| AS35280 | F5 F5 Networks SARL | upstream |
| AS3303 | SWISSCOM Swisscom (Schweiz) AG | upstream |
| AS25091 | IP-Max IP-Max SA | upstream |
| AS8359 | MTS MTS PJSC | upstream |
| AS41327 | FIBERTELECOM-AS Fiber Telecom S.p.A. | upstream |
| AS22356 | AS22356 - Durand do Brasil Ltda | upstream |
| AS34549 | MEER-AS meerfarbig GmbH & Co. KG | upstream |
| AS37468 | Angola Cables - Angola Cables | upstream |
| AS33891 | CORE-BACKBONE Core-Backbone GmbH | upstream |