Autonomous system
AS49278 NORDEF
Unclassified RIPE
Summary
Nordef
business scada norway
The AS handle NORDEF is held by Nordef IKT-Kapaciteter.
What it's used for
- The address space carries industrial control systems, evidenced by the netname
NODECA-SCADAassigned to the majority of announced IPv4 prefixes. - The network announces 132,096 IPv4 addresses across 29 prefixes and 8 IPv6 prefixes, with only 3 observed neighbours, indicating a specialized business network rather than a transit or access provider.
- Traffic from this AS consists of SCADA and industrial automation endpoints, consistent with Nordef's role as a provider of IT and communication services for the Norwegian energy sector.
Notable
- Registrants for all sampled prefixes are consistent with the announcer, listing
NORDEF LIR ADMIN,NORDEF LIR TECH, andIKT-KAPASITETER. - The inventory is dominated by the
158.112.0.0/16range, which is subdivided into numerous /19, /20, /21, and /22 blocks, reflecting a finely segmented internal corporate estate.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 1 exchange in 1 country, largest first.
| Exchange | Location | Their address |
|---|---|---|
| Norwegian Internet Exchange Oslo 1 | Oslo, Norway | 185.1.55.51 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 29 prefixes · 132K addresses IPv6 8 prefixes
| Country | Name | Prefixes |
|---|---|---|
| NO | Norway | 37 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS49278- Registry name
- NORDEF
- Registrant
- FLI-MNT
- Abuse contact
- abuse@mil.no
- Registered
- 2009-05-08
- Last changed
- 2021-09-02
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 100% valid · 32 valid, 0 with no ROA
- ROAs
- 32 authorising AS49278
- ASPA
- no ASPA record
- IRR
- 100% registered · 32 of 32 announcements
- Route objects
- 35 naming AS49278
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,773 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere