asn.dev

Autonomous system

AS12996 DOMENESHOP Oslo, Norway

Hosting RIPE

IPv4 addresses 6.91K 9 prefixes
IPv6 prefixes 31 counted as prefixes, not addresses
Countries 1 mostly NO
Exchanges 8 recorded by PCH
Upstreams 17 1 downstream
Flagged prefixes 0 none

Summary

Domeneshop

Norway · AI-generated

hosting infrastructure business

Thirty-one IPv6 announcements against nine IPv4 ones, from a company that sells domain names.

What it's used for

  • A Norwegian domain registrar and hosting provider. 6,912 addresses across nine IPv4 prefixes, 31 IPv6 prefixes, and 38 observed BGP neighbours.

Notable

  • IPv6 prefixes outnumber IPv4 prefixes more than three to one.
  • Netnames are NO-DOMENESHOP, some bare and some dated 20120821, 20160119, 20170501 and 20191010.
  • The AS handle is DOMENESHOP Oslo, Norway, giving a city and a country.
  • Eighteen addresses were sampled and none returned a name.

Interesting

  • Announcing more IPv6 prefixes than IPv4 ones is the reverse of almost every network in this range, and it is what a registrar looks like when it gives each customer a real IPv6 allocation instead of an address. IPv4 forces sharing; IPv6 does not, so the announcement count grows with the customer base rather than with the traffic.
  • The handle names a city, one of only two in this range to do so. An AS number carries no location of its own, so mapping infrastructure geographically depends on exactly this voluntary annotation.
  • No address answered a reverse lookup. This is the second domain registrar in this range with the same result, which is worth noticing: companies whose business is running other people's DNS records do not necessarily run their own reverse zones, because nothing they sell depends on it.
  • The dated netnames all fall after 2012, so the bare ones predate the convention and were never retrofitted. Two naming eras coexist in one holder's records.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 8 exchanges in 3 countries, largest first.

ExchangeLocationTheir address
STHIX - StockholmStockholm, Sweden192.121.80.119
Stockholm Internet ExchangeStockholm, Sweden192.121.80.119
Netnod StockholmStockholm, Sweden195.245.240.37
Norwegian Internet Exchange Oslo 1Oslo, Norway185.1.55.22
Free Internet eXchange OsloOslo, Norway91.198.176.84
Danish Internet ExchangeCopenhagen, Denmark185.1.57.157
Netnod Sundsvall- GävleSundsvall, Sweden194.68.128.37
Norwegian Internet Exchange Oslo 2Oslo, Norway185.1.65.11

Transit providers

17 upstream, 1 downstream and 28 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS1299Arelion Sweden AB464
AS6939Hurricane Electric LLC395
AS174Cogent Communications, LLC279
AS3356Level 3 Parent, LLC215
AS40676Psychz Networks42
AS24482SG.GS26
AS50304Blix Solutions AS26
AS34927iFog GmbH25

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 9 prefixes · 6.91K addresses IPv6 31 prefixes

CountryNamePrefixes
NONorway40

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS12996
Registry name
DOMENESHOP
Registrant
DOMENESHOP-MNT
Abuse contact
abuse@domeneshop.no
Registered
2002-09-09
Last changed
2025-02-02
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 30 valid, 0 with no ROA
ROAs
34 authorising AS12996
ASPA
no ASPA record
IRR
100% registered · 30 of 30 announcements
Route objects
41 naming AS12996

Reputation

Classification and threat

Hosting Datacenter or cloud provider. Addresses are servers, not people.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,773 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check