asn.dev

Autonomous system

AS12557 SimpleThings SimpleThings GmbH

Unclassified RIPE

IPv4 addresses 768 2 prefixes
IPv6 prefixes 23 counted as prefixes, not addresses
Countries 1 mostly DE
Exchanges 0 recorded by PCH
Upstreams 2 0 downstream
Flagged prefixes 0 none

Summary

SimpleThings

Germany · AI-generated

hosting business

23 IPv6 prefixes against 768 IPv4 addresses, and a reverse zone that publishes which addresses are free.

What it's used for

  • Hosting and application infrastructure. 768 IPv4 addresses in two prefixes, 23 announced IPv6 prefixes, and two observed BGP neighbours.

Notable

  • The IPv6 announcements step through 2a03:52a0::/40, then /42, /43, /44, /47, two /48s, /46, /45 and /47, each picking up where the last left off.
  • Laid end to end they run contiguously from 2a03:52a0:: onward without a gap.
  • The IPv4 blocks are 185.117.180.0/23, netname DE-SIMPLETHINGS-20150917, and 185.117.182.0/24, netname SimpleThings_External — mixed case with an underscore.
  • Two addresses answer freeip64.simplethings.de and red-ip127.simplethings.de.

Interesting

  • freeip64 is an inventory note that escaped into public DNS. Somebody kept track of which addresses were spare by naming them so, which works perfectly until the reverse zone is visible to everyone — and reverse zones always are.
  • red-ip127 alongside it suggests a colour scheme for classifying addresses, and colour schemes in infrastructure almost always encode trust: which side of a firewall a thing sits on. The names are doing the job a spreadsheet would elsewhere.
  • Twenty-three IPv6 prefixes for a network with 768 IPv4 addresses is the third example of this artefact in the range, after AS12491 and AS12517. A contiguous IPv6 range emitted as a staircase of doubling blocks is common enough here to be a tool's signature rather than anyone's decision.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

2 upstream, 0 downstream and 3 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS3209Vodafone GmbH185
AS16276OVH SAS61

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-11-07, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 2 prefixes · 768 addresses IPv6 23 prefixes

CountryNamePrefixes
DEGermany25

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS12557
Registry name
SimpleThings
Registrant
de-simplethings-1-mnt
Abuse contact
abuse@simplethings.de
Registered
2015-09-25
Last changed
2024-05-02
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 6 valid, 0 with no ROA
ROAs
6 authorising AS12557
ASPA
no ASPA record
IRR
100% registered · 6 of 6 announcements
Route objects
3 naming AS12557

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 454 networks and 1,852 prefixes, as published 2026-11-08. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check