Autonomous system
AS8948 PRIMO-099
Residential RIPE
Summary
099 Primo Communications
isp eyeball legacy
PRIMO-099 is 099 Primo Communications Ltd, an Israeli internet and telephony provider. The "099" is the company's dialling prefix, carried over into its brand and its domain, 099.net.il.
What it's used for
- Consumer internet access. The rDNS is unambiguous: nearly every sampled address resolves to a name of the form
185.120.124.1.NAT-DSL.099.net.il— DSL subscribers behind carrier-grade NAT. Named hosts in the same space are the ISP's own service machines (dns1,ns1,smtp). - Around 31,000 IPv4 addresses across roughly 20 prefixes, drawn from both RIPE and ARIN space.
Notable
- The
NAT-DSLlabel in the rDNS is the important detail: this network is heavily NAT-ed, so a single address can front many households. Per-address user attribution will be wrong here, and address count badly understates the subscriber base. - Several of its large ARIN /20s (
38.56.224.0/20,38.229.176.0/20,206.84.16.0/20and others) look at first glance like the scattered multi-RIR inventory of an address broker. They are not: ARIN registers them asPRIMO-CGNT-NET-*assignments to 099 Primo Communications itself, out of Cogent's38.0.0.0/8, and they carry the ISP's own rDNS. This is an ISP that ran out of RIPE space and took CGNAT blocks from its upstream.
Interesting
- Israeli telecom liberalisation produced a crop of providers named after the dialling prefix they were assigned for international calls. Primo is one of the survivors, and the number is still the brand.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
1 upstream, 0 downstream and 1 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS12400 | Partner Communications Ltd. | 1,200 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-10, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 14 prefixes · 31.49K addresses IPv6 0 prefixes
| Country | Name | Prefixes |
|---|---|---|
| IL | Israel | 14 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS8948- Registry name
- PRIMO-099
- Registrant
- il-099primo-1-mnt
- Abuse contact
- abuse@099.net.il
- Registered
- 2015-10-08
- Last changed
- 2018-09-04
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 0% valid · 0 valid, 20 with no ROA
- ROAs
- 0 authorising AS8948
- ASPA
- no ASPA record
- IRR
- 90% registered · 18 of 20 announcements
- Route objects
- 20 naming AS8948
Reputation
Classification and threat
Residential Fixed-line consumer ISP. Addresses here are homes.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,775 prefixes, as published 2026-10-11. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere