Autonomous system
AS8640 ZFS-GROUP
Unclassified RIPE
Summary
Zurich Insurance
enterprise legacy
Zurich Insurance Company AG (ZFS-GROUP) — the corporate network of the Swiss insurance group headquartered in Zurich. The handle preserves the company's former name, Zurich Financial Services.
What it's used for
- Enterprise IT for a global insurance business: internal systems, corporate connectivity for offices and business units, and the group's public-facing services. Sampled rDNS in the announced space lands on Zurich's own infrastructure (for example
ns5.zurich.com), not on customer or subscriber pools. - No dynamic, DSL, PPPoE or CGN naming appears anywhere in the inventory — this is a single organisation's address space, not an access network.
Notable
- Around 73,000 IPv4 addresses, which is large for a non-telecom, but ordinary for a multinational financial-services group that numbered its internal estate with public addresses long before RFC 1918 habits took hold.
- The inventory is contiguous and self-registered: a
171.27.0.0/16legacy block plus a coherent run of195.28.224.0/19RIPE space. That coherence is what separates a genuine enterprise from the scattered, third-party-registered shape of an address broker.
Interesting
- The handle is a fossil. Zurich Financial Services rebranded to Zurich Insurance Group in 2012, but the RIR object still carries
ZFS-GROUP— a common pattern where the registry name outlives the company name by more than a decade.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-14, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 2 prefixes · 73.73K addresses IPv6 0 prefixes
| Country | Name | Prefixes |
|---|---|---|
| CH | Switzerland | 2 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS8640- Registry name
- ZFS-GROUP
- Registrant
- Zurich Insurance Company AG
- Abuse contact
- dns.admin@zurich.com
- Registered
- 1970-01-01
- Last changed
- 2017-11-15
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 0% valid · 0 valid, 10 with no ROA
- ROAs
- 0 authorising AS8640
- ASPA
- no ASPA record
- IRR
- 100% registered · 10 of 10 announcements
- Route objects
- 7 naming AS8640
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,772 prefixes, as published 2026-10-15. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere