asn.dev

Autonomous system

AS58212 DATAFOREST

Unclassified RIPE

IPv4 addresses 17.41K 51 prefixes
IPv6 prefixes 34 counted as prefixes, not addresses
Countries 1 mostly DE
Exchanges 3 recorded by PCH
Upstreams 20 47 downstream
Flagged prefixes 0 none

Summary

dataforest GmbH

Germany · AI-generated

hosting cloud germany

DATAFOREST is operated by dataforest GmbH.

What it's used for

  • The address space carries hosting and cloud infrastructure, evidenced by netnames such as DE-DATAFOREST-20190326 and reverse DNS entries like v46389.php-friends.de and routing-by.as58212.net.
  • The AS announces 17,664 IPv4 addresses and 34 IPv6 prefixes, maintaining 172 observed neighbours; this high neighbour count relative to the address inventory indicates a transit or peering-heavy role rather than a pure access network.
  • Traffic from this AS consists of web hosting, API endpoints, and cloud services for mid-sized companies and startups, consistent with dataforest's business model of tailored hosting and data engineering solutions.

Notable

  • Registrants for the largest prefixes align with the announcer, listing dataforest GmbH and DF Abuse for blocks including 2.59.132.0/22 and 176.96.136.0/22.
  • The address inventory is finely subdivided, with 52 IPv4 prefixes in inventory, reflecting a corporate estate structure with site-by-site segmentation.
  • Some prefixes are registered to third parties, such as Medyabim Datacenter for 185.7.82.0/23 and GHOSTnet GmbH for 5.175.161.0/24, indicating leased or partner space within the AS.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 3 exchanges in 1 country, largest first.

ExchangeLocationTheir address
DE-CIX FrankfurtFrankfurt, Germany80.81.197.19
Megaport Frankfurt IXFrankfurt, Germany62.69.146.119
ERA-IX FrankfurtFrankfurt, Germany185.0.27.28

Transit providers

20 upstream, 47 downstream and 109 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS6453TATA COMMUNICATIONS (AMERICA) INC1,589
AS2914NTT America, Inc.1,460
AS3257GTT Communications Inc.1,207
AS24482SG.GS84
AS12389PJSC Rostelecom66
AS16276OVH SAS61
AS29632Netassist International EOOD30
AS34549meerfarbig GmbH & Co. KG30

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-10, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 51 prefixes · 17.41K addresses IPv6 34 prefixes

CountryNamePrefixes
DEGermany85

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS58212
Registry name
DATAFOREST
Registrant
dataforest-MNT
Abuse contact
abuse@dataforest.net
Registered
2020-04-14
Last changed
2026-04-18
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
95% valid · 83 valid, 4 with no ROA
ROAs
80 authorising AS58212
ASPA
5 declared providers
IRR
94% registered · 82 of 87 announcements 1 other origin
Route objects
82 naming AS58212

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,775 prefixes, as published 2026-10-11. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check