asn.dev

Autonomous system

AS15738 UAEXPRESS Ukraine

Unclassified RIPE NSP

IPv4 addresses 8.19K 2 prefixes
IPv6 prefixes 1 counted as prefixes, not addresses
Countries 1 mostly UA
Exchanges 2 recorded by PCH
Upstreams 6 5 downstream
Flagged prefixes 0 none

Summary

BF Express

Ukraine · AI-generated

isp telecom business

The country appears twice in the AS handle, once as a code and once spelled out.

What it's used for

  • A provider's network. Two IPv4 prefixes and one IPv6 prefix announced from Ukraine, eight thousand one hundred and ninety-two addresses, across nine observed BGP neighbours.

Notable

  • The handle begins with the two-letter country code fused to the brand, then names the same country in full as a separate word.
  • The two netnames split those letters back apart, putting the country code, a hyphen and the brand, followed by allocation dates four years apart.
  • Both blocks are /20 pieces from unrelated ranges, and each accounts for half the addresses.
  • The one answering address is the network address of its subnet, and its whole host name is the last octet padded to two digits, under a domain with the country code in it.
  • The IPv6 announcement is a /29, the standard opening allocation.
  • Six addresses were queried and one returned a name.

Interesting

  • A two-digit zero-padded octet as a host name works for the first hundred addresses and stops working at the hundred and first. Whatever generated it assumed the range would stay small.
  • The holder is registered under a legal form written in the local transliteration while the brand and the handle are in the international one, so the same company reads three ways across three fields of one record.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 2 exchanges in 1 country, largest first.

ExchangeLocationTheir address
Giganet Internet ExchangeKyiv, Ukraine185.1.62.62
GNM Internet Exchange UkraineKiev, Ukraine178.18.230.147

Transit providers

6 upstream, 5 downstream and 15 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS3255LLC EKSINTECH100
AS35297Dataline LLC18
AS6939Hurricane Electric LLC17
AS56347Yugtelegroup Ltd11
AS24482SG.GS3
AS29632Netassist International EOOD2

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 2 prefixes · 8.19K addresses IPv6 1 prefixes

CountryNamePrefixes
UAUkraine3

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS15738
Registry name
UAEXPRESS
Registrant
EXPRESS-UA-MNT
Abuse contact
abuse@express.net.ua
Registered
2002-01-12
Last changed
2026-05-13
Allocation
allocated

Declared

PeeringDB profile

self-reported
Name
TOV BF Express
Network type
NSP
Scope
Regional
Traffic ratio
Mostly Inbound
Peering policy
Open
IRR as-set
AS-EXPRESSUA
Present at
2 exchanges
Website
https://www.express.net.ua/

PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 3 valid, 0 with no ROA
ROAs
3 authorising AS15738
ASPA
no ASPA record
IRR
100% registered · 3 of 3 announcements
Route objects
3 naming AS15738

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check