Telefonica IP Ranges
Telefonica's Spanish network is registered with RIPE as AS3352 under the AS name Telefonica_de_EspaNa, and the organisation on the record is the Spanish operating company rather than the group. Its reverse DNS states outright whether an address is dynamic.
- Provider
- Telefonica
- Primary ASN
- AS3352
- Category
- ISP
- Headquarters
- Madrid, Spain
- Announced IPv4 prefixes
- 213
- Registry
- RIPE
Known IP ranges
These prefixes are currently announced to the global routing table by AS3352 (Telefonica_de_EspaNa TELEFONICA DE ESPANA S.A.U.). Prefix sets change over time - use WHOIS Lookup for the authoritative record on any specific address.
81.34.0.0/16
88.0.0.0/16
2.136.0.0/16
81.43.0.0/16
88.19.0.0/16
83.39.0.0/16
88.18.0.0/16
5.205.0.0/16
79.147.0.0/16
83.43.0.0/16
2a02:9000::/23
2a06:f0c0::/29
2a02:9151::/32 (IPv6)
What does a Telefonica IP mean in a privacy test?
A Telefonica address as your visible IP means the connection left over the Spanish line itself with nothing tunnelling it. This is one of the few networks where you do not have to infer whether the address is fixed: the hostname carries a dynamicip label when it is, so the question a leak test usually leaves open is answered in the PTR record.
Where to get Telefonica's address list
No allowlist is published for this network, so the RIPE database is the source. The aut-num for AS3352 carries the AS name Telefonica_de_EspaNa and gives the organisation as TELEFONICA DE ESPANA S.A.U. at Gran Via 28 in Madrid, with the object last changed in July 2026. The AS3352 page carries the registry record beside the routing data.
The organisation name is worth reading carefully, because it narrows what this ASN covers. AS3352 belongs to Telefonica de Espana S.A.U., the Spanish operating company, not to the Telefonica group as a whole - the group's networks in other countries are registered separately and announce their own space. So an address matching AS3352 is Spanish, and an address belonging to a Telefonica business elsewhere will not match it. The inetnum objects underneath carry the network's own name: 88.0.0.0/12 is registered as RIMA, remarked as a Red de servicios IP.
The hostname says whether the address is dynamic
88.0.1.1 answers as 1.red-88-0-1.dynamicip.rima-tde.net, and every label is carrying information: the host number, red-88-0-1 naming the address, dynamicip saying what kind of assignment it is, and rima-tde.net - the same RIMA network the inetnum is named after, under Telefonica de Espana. Most carriers make you infer the assignment type from the block or from behaviour over time. This one prints it.
What that buys you is a straight answer to a question a leak test raises and rarely settles: an address labelled dynamic is not a stable handle for a household, and matching one against a record taken weeks ago proves nothing about the same subscriber. What it does not buy you is identity or hosting information. AS3352 is access network - there is no rented compute on it for a proxy to run from - and nothing published maps an address to an account.
Related tools
Frequently asked questions
What IP ranges does Telefonica use?
Telefonica announces its Spanish network under AS3352, which RIPE registers to TELEFONICA DE ESPANA S.A.U. The largest blocks currently routed there are listed above, among them 81.34.0.0/16, 88.0.0.0/16 and 2.136.0.0/16. No allowlist is published, so the RIPE database and the routing table are the checkable sources.
Why does a Telefonica IP appear in my privacy test?
A Telefonica address as your visible IP means the connection left over the Spanish line itself with nothing tunnelling it. This is one of the few networks where you do not have to infer whether the address is fixed: the hostname carries a dynamicip label when it is, so the question a leak test usually leaves open is answered in the PTR record.
Is a Telefonica IP address dynamic or static?
The reverse DNS says. 88.0.1.1 answers as 1.red-88-0-1.dynamicip.rima-tde.net, where the dynamicip label states the assignment type outright. Very few carriers publish that, so on this network the question can be settled with a single PTR query.
What does rima-tde.net mean?
RIMA is the name of Telefonica de Espana's IP network, and it appears in both places: the RIPE inetnum covering 88.0.0.0/12 is registered as RIMA, remarked as a Red de servicios IP, and the reverse-DNS zone for those addresses is rima-tde.net.
Does AS3352 cover Telefonica outside Spain?
No. The RIPE record registers AS3352 to Telefonica de Espana S.A.U., the Spanish operating company, rather than to the group. Telefonica's businesses in other countries run their own autonomous systems and announce their own address space, so they will not match this ASN.