asn.dev

Autonomous system

AS8561 KNIPPWORLDWI

Unclassified RIPE

IPv4 addresses 6.40K 12 prefixes
IPv6 prefixes 11 counted as prefixes, not addresses
Countries 1 mostly DE
Exchanges 0 recorded by PCH
Upstreams 4 0 downstream
Flagged prefixes 0 none

Summary

Knipp Medien und Kommunikation GmbH

Germany · AI-generated

hosting dns legacy

KNIPPWORLDWIDE belongs to Knipp Medien und Kommunikation GmbH, a Dortmund company that operates domain-name infrastructure: the TANGO Registry Services platform used to run top-level domains (including brand TLDs such as .sap and .bauhaus), an ICANN-accredited registrar business, and ironDNS, its own unicast/anycast nameserver network deployed across roughly ten sites worldwide.

What it's used for

Authoritative DNS and registry back-end services. The routing shape is unusual and tells the story: about 7,680 IPv4 addresses across 21 prefixes, but 20 IPv6 prefixes — a lot of separate announcements for a small operator, which is what an anycast nameserver estate looks like when each node needs its own routable slice.

The sampled reverse DNS confirms it: anycast96.irondns.net is a nameserver node, while ip1-120-253-195.knipp.de and ip0.89.253.195.irondns.knipp.de are the company's own generated host records. There is no subscriber space and no third-party tenancy on the addresses sampled.

Notable

  • Do not geolocate the anycast prefixes to Dortmund. By design, the same addresses answer from multiple continents; the company's registered address says nothing about where a given packet lands.
  • DNS registry operators sit awkwardly in any usage taxonomy — the space is server infrastructure, but of a kind that serves the naming system itself rather than tenant workloads.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

4 upstream, 0 downstream and 8 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS36236NetActuate, Inc1,464
AS8391Knipp Medien und Kommunikation GmbH95
AS8298IPng Networks GmbH50
AS34927iFog GmbH50

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 12 prefixes · 6.40K addresses IPv6 11 prefixes

CountryNamePrefixes
DEGermany23

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS8561
Registry name
KNIPPWORLDWIDE
Registrant
KNIPP-NOC-MNT
Abuse contact
abuse@knipp.de
Registered
1970-01-01
Last changed
2024-09-13
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 40 valid, 0 with no ROA
ROAs
18 authorising AS8561
ASPA
no ASPA record
IRR
100% registered · 40 of 40 announcements
Route objects
94 naming AS8561

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,773 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check