asn.dev

Autonomous system

AS15958 CETIN_DOO_AS CETINdoo-NET

Unclassified RIPE

IPv4 addresses 69.63K 30 prefixes
IPv6 prefixes 1 counted as prefixes, not addresses
Countries 1 mostly RS
Exchanges 7 recorded by PCH
Upstreams 34 27 downstream
Flagged prefixes 0 none

Summary

CETIN

Serbia · AI-generated

telecom mobile infrastructure

One thousand seven hundred and nineteen observed neighbours, the highest count in this range by a wide margin.

What it's used for

  • A network infrastructure company carrying a mobile operator's traffic. Thirty IPv4 prefixes and one IPv6 /32 announced from Serbia, sixty-nine thousand six hundred and thirty-two addresses.

Notable

  • The neighbour count is one thousand seven hundred and nineteen, against sixty-nine thousand addresses. Nothing else in this stretch comes close.
  • The netnames split in two: a country code with the brand and a date, listing the company, a named individual and an abuse role; or the brand with a contraction for an access point name, listing only an abuse role.
  • Nine of eighteen queried addresses answered, all on a third company's domain, with a mobile broadband label and the four octets reversed and hyphenated after the word for a network.
  • Six of those nine carry an extra label marking the addresses as changeable; three do not.
  • The AS handle uses underscores and repeats the brand twice, once with the legal form and once with the word for a network.

Interesting

  • A neighbour count in the thousands does not mean thousands of contracts. It means this number is visible from an enormous number of vantage points, which is what happens when a wholesale carrier's routes are relayed onward by everyone who buys from its customers.
  • An access point name in a netname is a mobile network's marker for which service a block belongs to, and it is the clearest sign in this record of what the addresses actually do.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 7 exchanges in 7 countries, largest first.

ExchangeLocationTheir address
DE-CIX FrankfurtFrankfurt, Germany80.81.195.87
LINX LON1London, United Kingdom195.66.228.141
AMS-IX AmsterdamAmsterdam, Netherlands80.249.210.14
Vienna Internet ExchangeVienna, Austria193.203.0.23
Budapest Internet ExchangeBudapest, Hungary193.188.137.102
Serbian Open ExchangeBelgrade, Serbia185.1.27.45
T-CIXSofia, Bulgaria185.1.40.18

Transit providers

34 upstream, 27 downstream and 95 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS44306OMONIA d.o.o.99
AS6939Hurricane Electric LLC87
AS1299Arelion Sweden AB37
AS34549meerfarbig GmbH & Co. KG30
AS3356Level 3 Parent, LLC18
AS6461Zayo Bandwidth18
AS50304Blix Solutions AS14
AS174Cogent Communications, LLC13

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 30 prefixes · 69.63K addresses IPv6 1 prefixes

CountryNamePrefixes
RSSerbia31

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS15958
Registry name
CETIN_doo_AS
Registrant
mnt-rs-cetin-1
Abuse contact
net-reg@cetin.rs
Registered
1970-01-01
Last changed
2026-09-18
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 10 valid, 0 with no ROA
ROAs
22 authorising AS15958
ASPA
no ASPA record
IRR
100% registered · 10 of 10 announcements
Route objects
93 naming AS15958

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check