asn.dev

Autonomous system

AS8422 NETCOLOGNE

Residential RIPE

IPv4 addresses 572K 47 prefixes
IPv6 prefixes 11 counted as prefixes, not addresses
Countries 1 mostly DE
Exchanges 6 recorded by PCH
Upstreams 30 35 downstream
Flagged prefixes 0 none

Summary

NetCologne

Germany · AI-generated

isp residential legacy

NETCOLOGNE is NetCologne GmbH, the city carrier of Cologne and the surrounding Rhineland. It is one of Germany's largest municipal-utility-backed telecoms, running its own fibre, cable and DSL access network rather than reselling Deutsche Telekom's.

What it's used for

  • Residential broadband and telephony across Cologne, Bonn, Leverkusen and the Rhine-Erft area, plus business connectivity and services for the region's schools and public bodies.
  • The reverse DNS is decisive: subscriber addresses resolve as cable-IP-ADDR.nc.de and xdsl-IP-ADDR.nc.de across the big 78.34.0.0/15, 87.78.0.0/15 and 89.0.0.0/15 blocks.

Notable

  • A genuine eyeball network of roughly 570,000 IPv4 addresses, with heavy IPv6 deployment alongside it. Addresses here overwhelmingly front households in one German metropolitan region, so they geolocate tightly to Cologne.
  • Its peering footprint is unusually large for a regional carrier: it is a long-standing presence at DE-CIX and neighbouring exchanges, which is how a city network keeps local traffic local.

Interesting

  • NetCologne grew out of the city's public utility company, a distinctly German model in which the municipal power and water provider also lays the fibre. That is why an operator this size exists at all in a market otherwise dominated by national incumbents.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 6 exchanges in 4 countries, largest first.

ExchangeLocationTheir address
DE-CIX FrankfurtFrankfurt, Germany80.81.192.212
LINX LON1London, United Kingdom195.66.224.172
AMS-IX AmsterdamAmsterdam, Netherlands80.249.209.62
Peering.czPrague, Czech Republic185.0.20.68
Megaport Frankfurt IXFrankfurt, Germany62.69.146.5
Megaport Dusseldorf IXDüsseldorf, Germany194.146.118.3

Transit providers

30 upstream, 35 downstream and 105 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS6939Hurricane Electric LLC456
AS1299Arelion Sweden AB454
AS3356Level 3 Parent, LLC436
AS34549meerfarbig GmbH & Co. KG161
AS9002RETN Limited137
AS174Cogent Communications, LLC132
AS3333Reseaux IP Europeens Network Coordination Centre (RIPE NCC)50
AS24482SG.GS50

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 47 prefixes · 572K addresses IPv6 11 prefixes

CountryNamePrefixes
DEGermany58

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS8422
Registry name
NETCOLOGNE
Registrant
NETCOLOGNE-MNT
Abuse contact
abuse@netcologne.de
Registered
2002-09-24
Last changed
2026-07-28
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
4% valid · 2 valid, 49 with no ROA
ROAs
4 authorising AS8422
ASPA
no ASPA record
IRR
100% registered · 51 of 51 announcements
Route objects
64 naming AS8422

Reputation

Classification and threat

Residential Fixed-line consumer ISP. Addresses here are homes.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check