Autonomous system
AS12676 NCORE-AS HKN GmbH
Unclassified RIPE
Summary
HKN
isp transit hosting
A German carrier with 125 neighbours, four other companies' address blocks, and IPv6 prefixes cut on boundaries that reverse DNS cannot follow.
What it's used for
- Access and transit in Germany. 74,496 addresses in eleven IPv4 prefixes, six IPv6 prefixes, and 125 observed BGP neighbours.
Notable
- Netnames trace the company's own allocations:
DE-NCORE-990827,DE-NCORE-991123,DE-NCORE-20051207on three separate blocks, andDE-NCORE-20150309. - Four blocks belong to other organisations: dng IT GmbH, ibeco-Systems GmbH, cojama Infosystems GmbH, and one named
ANTISPAMEUROPE-NET. - The IPv6 announcements include a
/39and two/34s:2a02:4c00::/39,2a02:4c07:4000::/34and2a02:4c07:8000::/34. - Two sampled addresses answered, as
dynamic-0-4-205-88.b2bdsl.deanddynamic-255-7-205-88.b2bdsl.de.
Interesting
- Those
/34and/39boundaries do not land on a multiple of four bits, and reverse DNS for IPv6 is delegated one hexadecimal digit at a time. A prefix that ends mid-digit cannot be handed to a customer as a single reverse zone; it has to be delegated as several, or not at all. Choosing such a size buys precise address accounting and pays for it in every reverse lookup afterwards. - The hostnames read
dynamicon a product namedb2bdsl, business DSL. The two ideas sit badly together: a business line usually implies a fixed address, and the template says otherwise. Both sampled names are the first and last address of their subnets, so the naming is generated across the whole range regardless of which addresses a customer can use. - Announcing four other companies' registrations alongside its own is what distinguishes a carrier from a hosting provider. The customers keep their registry identity; only the routing is bought.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 2 exchanges in 1 country, largest first.
| Exchange | Location | Their address |
|---|---|---|
| DE-CIX Frankfurt | Frankfurt, Germany | 80.81.192.155 |
| Megaport Dusseldorf IX | Düsseldorf, Germany | 194.146.118.7 |
Transit providers
22 upstream, 9 downstream and 46 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 11 prefixes · 74.50K addresses IPv6 6 prefixes
| Country | Name | Prefixes |
|---|---|---|
| DE | Germany | 17 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS12676- Registry name
- NCORE-AS
- Registrant
- NCORE-NOC
- Abuse contact
- abuse@hkn.de
- Registered
- 2002-08-30
- Last changed
- 2026-01-12
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 78% valid · 14 valid, 4 with no ROA
- ROAs
- 28 authorising AS12676
- ASPA
- no ASPA record
- IRR
- 100% registered · 18 of 18 announcements
- Route objects
- 29 naming AS12676
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 432 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere