asn.dev

Autonomous system

AS20911 NETSURF-AS-BG Net-Surf.net Ltd.

Residential RIPE Cable/DSL/ISP

IPv4 addresses 36.86K 26 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly BG
Exchanges 3 recorded by PCH
Upstreams 15 1 downstream
Flagged prefixes 0 none

Summary

Net-Surf.net

Bulgaria · AI-generated

isp residential cable bulgaria

NETSURF-AS- is operated by Net-Surf.net Ltd., a Bulgarian internet service provider.

What it's used for

  • The address space carries residential broadband traffic, evidenced by netnames such as NET-SURFNET-GPON and NETSURFNET-BROADBAND, and reverse DNS entries like ip-95-111-122-0.home.megalan.bg.
  • The AS announces 36608 IPv4 addresses across 25 prefixes and maintains 49 observed neighbours, a ratio consistent with an access network providing connectivity to end-users rather than a transit provider.

Notable

  • Registrants are predominantly Net-Surf.net Ltd., though some prefixes like 78.90.248.0/21 and 95.111.120.0/21 list A1 Bulgaria EAD Abuse, suggesting historical acquisition or lease of address space from A1 Bulgaria.
  • The inventory consists of a mix of larger blocks like 178.254.192.0/18 and numerous smaller /23 and /24 prefixes, indicating a fragmented or historically accumulated address estate.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 3 exchanges in 1 country, largest first.

ExchangeLocationTheir address
NetIXSofia, Bulgaria185.1.226.29
Bulgarian Internet eXchangeSofia, Bulgaria193.169.198.215
Balkan Internet ExchangeSofia, Bulgaria185.1.30.22

Transit providers

15 upstream, 1 downstream and 16 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS57344Telehouse AD3,705
AS174Cogent Communications, LLC1,797
AS9002RETN Limited1,444
AS6939Hurricane Electric LLC1,062
AS57463NetIX Communications JSC903
AS34549meerfarbig GmbH & Co. KG354
AS44901Belcloud LTD327
AS3303Swisscom (Schweiz) AG178

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-11-02, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 26 prefixes · 36.86K addresses IPv6 0 prefixes

CountryNamePrefixes
BGBulgaria26

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS20911
Registry name
NETSURF-AS-BG
Registrant
NETSURF-MNTR
Abuse contact
abuse@net-surf.net
Registered
2002-02-04
Last changed
2025-12-15
Allocation
allocated

Declared

PeeringDB profile

self-reported
Name
Net-Surf.net
Network type
Cable/DSL/ISP
Scope
Regional
Traffic ratio
Not Disclosed
Peering policy
Open
Present at
3 exchanges
Website
http://www.netsurf.bg

PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 179 valid, 0 with no ROA
ROAs
165 authorising AS20911
ASPA
no ASPA record
IRR
99.4% registered · 178 of 179 announcements
Route objects
190 naming AS20911

Reputation

Classification and threat

Residential Fixed-line consumer ISP. Addresses here are homes.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 449 networks and 1,846 prefixes, as published 2026-11-03. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check