asn.dev

Autonomous system

AS12615 GCN-AS GCN AD - Sofia, Bulgaria

Unclassified RIPE

IPv4 addresses 14.59K 36 prefixes
IPv6 prefixes 1 counted as prefixes, not addresses
Countries 1 mostly BG
Exchanges 3 recorded by PCH
Upstreams 24 26 downstream
Flagged prefixes 0 none

Summary

Global Communication Net

Bulgaria · AI-generated

isp hosting transit

36 scattered announcements including one block the registry itself manages and one registered to a London company.

What it's used for

  • Internet access and hosting in Sofia. 14,848 addresses in 36 IPv4 prefixes, one IPv6 prefix, and 104 observed BGP neighbours.

Notable

  • 87.246.6.0/23 carries the netname RIPE-NCC-MANAGED-ADDRESS-BLOCK.
  • 87.246.12.0/22 is netname M247-LTD-London, with GLOBALAXS NOC as its contact.
  • 83.222.178.0/23 is CKYLINK10_GCN.
  • The company's own blocks are dated BG-GCN-20050825, BG-GCN-20070702 and BG-GCN-20090827.
  • The 36 announcements average around 400 addresses each, mostly /23s and /24s spread across five separate /8s.
  • Eighteen sampled addresses were queried and none returned a name.

Interesting

  • A netname reading RIPE-NCC-MANAGED-ADDRESS-BLOCK means the registry is holding the record itself rather than a member holding it. That happens to space that was reclaimed, is in dispute, or was left behind when a member ceased to exist. Somebody is still announcing it, which is a different question from who is entitled to.
  • A London company's netname on a Bulgarian network's block is the ordinary machinery of the address market: blocks are leased and sublet, and the registry entry keeps naming the party who holds the paperwork long after the routing has moved on.
  • Thirty-six pieces for fifteen thousand addresses is what an inventory assembled from many small acquisitions looks like. None of it aggregates, so all 36 routes travel to every router on the Internet.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 3 exchanges in 1 country, largest first.

ExchangeLocationTheir address
NetIXSofia, Bulgaria185.1.226.212
Bulgarian Internet eXchangeSofia, Bulgaria193.169.198.156
Balkan Internet ExchangeSofia, Bulgaria185.1.30.16

Transit providers

24 upstream, 26 downstream and 69 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS1299Arelion Sweden AB527
AS57463NetIX Communications JSC503
AS44901Belcloud LTD355
AS6939Hurricane Electric LLC276
AS174Cogent Communications, LLC267
AS3356Level 3 Parent, LLC203
AS9002RETN Limited151
AS1273IDDQD-AS134

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 36 prefixes · 14.59K addresses IPv6 1 prefixes

CountryNamePrefixes
BGBulgaria37

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS12615
Registry name
GCN-AS
Registrant
LIR-GCN-MNT
Abuse contact
abuse@gcn.bg
Registered
2004-04-21
Last changed
2024-11-20
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
22% valid · 11 valid, 38 with no ROA
ROAs
13 authorising AS12615
ASPA
no ASPA record
IRR
84% registered · 41 of 49 announcements 1 other origin
Route objects
56 naming AS12615

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 432 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check