Autonomous system
AS8386 KOCNET
Unclassified RIPE
Summary
Vodafone Net (Turkey)
isp legacy
KOCNET is now Vodafone Net Iletisim Hizmetleri A.S., the fixed-line arm of Vodafone Turkey. The handle is the fossil of Koc.net, the Koc group's internet company, which Vodafone bought and folded into its Turkish business.
What it's used for
- Fixed broadband access across Turkey. The registry is explicit about it: the large blocks are netnamed
KOCNET-DSLwith per-city descriptions, including Istanbul, Izmit, Eskisehir, Antalya and Corlu, which is exactly how a DSL operator carves up its subscriber pools. - Some mobile customer space as well. Other prefixes carry the netname
VODAFONE-TURKEY-CUSTOMER-IP-POOLS, described as Vodafone Turkey 3G IP Pool, so this AS is not purely fixed. - Roughly 460,000 IPv4 addresses spread across more than 700 prefixes, most of them
/23s and/24s, plus a set of IPv6/48s.
Notable
- An eyeball network. The addresses front Turkish end users, home and business DSL alongside mobile pools, and should geolocate to subscribers, not to servers.
- There is essentially no published reverse DNS anywhere in the space, which is common for Turkish access networks. Here the netnames, not rDNS, are what carry the evidence.
- The AS is single-homed behind Vodafone Turkey's own AS, which is the shape you would expect from a subsidiary that has been absorbed into the parent's backbone.
Interesting
- The name trap is worth stating:
KOCNETlooks like a corporate network of the Koc conglomerate, and Koc.net did start as a business-services provider. What the AS actually carries today is consumer access.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
1 upstream, 0 downstream and 2 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS15924 | Vodafone Net Iletisim Hizmetler AS | 44,982 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 225 prefixes · 447K addresses IPv6 16 prefixes
| Country | Name | Prefixes |
|---|---|---|
| TR | Turkey | 241 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS8386- Registry name
- KOCNET
- Registrant
- MNT-BORUSAN
- Abuse contact
- abuse@vodafone.net.tr
- Registered
- 2002-09-04
- Last changed
- 2017-11-15
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 99.7% valid · 770 valid, 0 with no ROA 2 RPKI-invalid
- ROAs
- 1,223 authorising AS8386
- ASPA
- no ASPA record
- IRR
- 99% registered · 763 of 772 announcements 1 other origin
- Route objects
- 1,152 naming AS8386
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 440 networks and 1,773 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere