Autonomous system
AS15498 RTCNOW RTCnow Streaming Services GmbH
Unclassified RIPE
Summary
RTCnow Streaming Services
media hosting infrastructure
A lights-out management interface is named in public DNS, and the name has the wrong octet.
What it's used for
- A streaming and content delivery operator. Four IPv4 prefixes and one IPv6
/47announced from Austria, three thousand addresses, across twenty-eight observed BGP neighbours.
Notable
- One answering address returns a name containing a three-letter label for out-of-band server management, under a content delivery domain.
- That same name states the address as ending in one third octet while the address it belongs to has a different one, so the label is off by one from reality.
- Three other addresses answer under a short unrelated domain with the last octet padded to three digits.
- The four netnames disagree with each other completely: one has the country code and a date, one names a different carrier, one is a site code with a virtual network number, and one names another company entirely.
- Twelve addresses were queried for reverse DNS and four returned a name.
Interesting
- Publishing a management interface in reverse DNS hands an attacker the exact address of the thing that controls the server, below the operating system. It is the one interface that should not be findable by name.
- Two of the four blocks list no company at all in their registrant field, only an abuse role, so half this network has no named owner in the registry.
- A netname carrying a virtual network number means somebody pasted an internal switching label into a public database.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 1 exchange in 1 country, largest first.
| Exchange | Location | Their address |
|---|---|---|
| Vienna Internet Exchange | Vienna, Austria | 193.203.0.215 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-10, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 4 prefixes · 3.07K addresses IPv6 1 prefixes
| Country | Name | Prefixes |
|---|---|---|
| AT | Austria | 5 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS15498- Registry name
- RTCnow
- Registrant
- AS15498-MNT
- Abuse contact
- noc@rtcnow.com
- Registered
- 2002-05-21
- Last changed
- 2025-02-11
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 0% valid · 0 valid, 9 with no ROA
- ROAs
- 0 authorising AS15498
- ASPA
- no ASPA record
- IRR
- 100% registered · 9 of 9 announcements
- Route objects
- 44 naming AS15498
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,775 prefixes, as published 2026-10-11. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere