asn.dev

Autonomous system

AS31298 AS-ZULU-

Unclassified RIPE

IPv4 addresses 2.30K 2 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly BG
Exchanges 2 recorded by PCH
Upstreams 14 1 downstream
Flagged prefixes 0 none

Summary

Zulu Ltd.

Bulgaria · AI-generated

isp residential bulgaria access

AS-ZULU-BG is operated by Zulu Ltd., a Bulgarian internet service provider.

What it's used for

  • The address space carries residential and access traffic, evidenced by reverse DNS entries like host-255.net-155.sof.zulu.bg and host-254.net-157.sof.zulu.bg, which indicate host-based naming conventions typical of consumer connections.
  • The AS announces 2304 IPv4 addresses across 2 prefixes, while maintaining 59 observed neighbours. This ratio of moderate address space against a high number of peering partners suggests a role focused on providing internet access to end-users rather than pure transit.

Notable

  • The registrants for both announced prefixes, 87.239.152.0/21 and 195.88.141.0/24, are listed as Zulu Ltd. with the netnames ZULU-NET and ZULU-NET2 respectively, aligning perfectly with the AS holder.
  • The address inventory consists of one /21 and one /24 block, both located in Bulgaria, indicating a consolidated domestic footprint without significant international or leased space fragmentation.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 2 exchanges in 1 country, largest first.

ExchangeLocationTheir address
NetIXSofia, Bulgaria185.1.226.19
Bulgarian Internet eXchangeSofia, Bulgaria193.169.198.232

Transit providers

14 upstream, 1 downstream and 17 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS3257GTT Communications Inc.255
AS34224Neterra Ltd.251
AS57463NetIX Communications JSC167
AS6939Hurricane Electric LLC90
AS3303Swisscom (Schweiz) AG15
AS8280SYNAPSECOM S.A. Provider of Telecommunications and Internet Services15
AS20764CJSC RASCOM15
AS24482SG.GS15

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-15, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 2 prefixes · 2.30K addresses IPv6 0 prefixes

CountryNamePrefixes
BGBulgaria2

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS31298
Registry name
AS-ZULU-BG
Registrant
Zulu Ltd.
Abuse contact
abuse@zulu.bg
Registered
2004-04-07
Last changed
2024-09-07
Allocation
allocated

Declared

PeeringDB profile

self-reported
Name
Zulu
Scope
Not Disclosed
Traffic ratio
Mostly Outbound
Peering policy
Open
IRR as-set
RIPE::AS31298:AS-ZULU
Present at
2 exchanges
Facilities
1 facilities
Website
https://zulu.bg

PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.

Routing security

RPKI and IRR

Full detail
RPKI
0% valid · 0 valid, 15 with no ROA
ROAs
0 authorising AS31298
ASPA
no ASPA record
IRR
100% registered · 15 of 15 announcements
Route objects
15 naming AS31298

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,782 prefixes, as published 2026-10-16. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check