Autonomous system
AS15632 ALFA-BANK-AS
Unclassified RIPE
Summary
Alfa-Bank
finance enterprise business
One block's netname says it is for testing, and it is announced to the world like any other.
What it's used for
- A bank's network. Five IPv4 prefixes and one IPv6
/48announced from the Russian Federation, three thousand addresses, across four observed BGP neighbours.
Notable
- One block is named with a two-letter contraction of the bank followed by the word test, and it is in the routing table alongside the rest.
- Another is named for a common service with a sequence number; a third names a payment system in mixed case; the remaining two share the country code, the bank and an allocation date.
- Every block lists the same informal contact, a role named as the bank's technology crew.
- Answering addresses put all four octets in reverse order after the word host, under the bank's own domain.
- One answering address is a numbered gateway on a different domain, spelled with a hyphen and a different suffix from the bank's main one.
- Fifteen addresses were queried for reverse DNS and five returned a name.
Interesting
- Test space in the global routing table is worth noticing. Whatever is in that block is reachable from everywhere, and its name says nobody expected it to be treated as production.
- Two domains for one bank, one of them holding the network equipment, splits the infrastructure away from the brand customers know. That is either tidy separation or a leftover.
- The holder name carries quotation marks around the bank's name, copied straight out of a company registration document into a routing record.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 5 prefixes · 3.33K addresses IPv6 1 prefixes
| Country | Name | Prefixes |
|---|---|---|
| RU | Russian Federation | 6 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS15632- Registry name
- Alfa-Bank-AS
- Registrant
- ALFABANK-MNT
- Abuse contact
- csirt@alfabank.ru
- Registered
- 1970-01-01
- Last changed
- 2025-01-20
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 0% valid · 0 valid, 14 with no ROA
- ROAs
- 0 authorising AS15632
- ASPA
- no ASPA record
- IRR
- 100% registered · 14 of 14 announcements
- Route objects
- 21 naming AS15632
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,773 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere