Autonomous system
AS15958 CETIN_DOO_AS CETINdoo-NET
Unclassified RIPE
Summary
CETIN
telecom mobile infrastructure
One thousand seven hundred and nineteen observed neighbours, the highest count in this range by a wide margin.
What it's used for
- A network infrastructure company carrying a mobile operator's traffic. Thirty IPv4 prefixes and one IPv6
/32announced from Serbia, sixty-nine thousand six hundred and thirty-two addresses.
Notable
- The neighbour count is one thousand seven hundred and nineteen, against sixty-nine thousand addresses. Nothing else in this stretch comes close.
- The netnames split in two: a country code with the brand and a date, listing the company, a named individual and an abuse role; or the brand with a contraction for an access point name, listing only an abuse role.
- Nine of eighteen queried addresses answered, all on a third company's domain, with a mobile broadband label and the four octets reversed and hyphenated after the word for a network.
- Six of those nine carry an extra label marking the addresses as changeable; three do not.
- The AS handle uses underscores and repeats the brand twice, once with the legal form and once with the word for a network.
Interesting
- A neighbour count in the thousands does not mean thousands of contracts. It means this number is visible from an enormous number of vantage points, which is what happens when a wholesale carrier's routes are relayed onward by everyone who buys from its customers.
- An access point name in a netname is a mobile network's marker for which service a block belongs to, and it is the clearest sign in this record of what the addresses actually do.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 7 exchanges in 7 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| DE-CIX Frankfurt | Frankfurt, Germany | 80.81.195.87 |
| LINX LON1 | London, United Kingdom | 195.66.228.141 |
| AMS-IX Amsterdam | Amsterdam, Netherlands | 80.249.210.14 |
| Vienna Internet Exchange | Vienna, Austria | 193.203.0.23 |
| Budapest Internet Exchange | Budapest, Hungary | 193.188.137.102 |
| Serbian Open Exchange | Belgrade, Serbia | 185.1.27.45 |
| T-CIX | Sofia, Bulgaria | 185.1.40.18 |
Transit providers
34 upstream, 27 downstream and 95 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 30 prefixes · 69.63K addresses IPv6 1 prefixes
| Country | Name | Prefixes |
|---|---|---|
| RS | Serbia | 31 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS15958- Registry name
- CETIN_doo_AS
- Registrant
- mnt-rs-cetin-1
- Abuse contact
- net-reg@cetin.rs
- Registered
- 1970-01-01
- Last changed
- 2026-09-18
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 100% valid · 10 valid, 0 with no ROA
- ROAs
- 22 authorising AS15958
- ASPA
- no ASPA record
- IRR
- 100% registered · 10 of 10 announcements
- Route objects
- 93 naming AS15958
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere