Reputation · trust score
A transparent 0–100 signal. Every entity starts at a neutral baseline of 65; threat-intel blocklists, exposure, reverse-DNS, routing and allocation each adjust it up or down. Higher is more trustworthy.
- Baseline (neutral) 65
- Multiple-origin (MOAS) routing anomaly −12
- Isp allocation +5
- Trust score 58 / 100
Experimental · trust-vectors model v1.1.0 — a transparent heuristic, not a definitive verdict. How it works →
About Rostelecom
Rostelecom is Russia's largest provider of digital services for a wide variety of consumers, households, private businesses, government and municipal authorities, and other telecom providers. Rostelecom interconnects all local public operators' networks into a single national network for long-distance service.
⚠ 3 MOAS prefixes — multiple origin ASNs detected
All MOAS anomalies →A previously stable prefix originated by AS12389 is now also announced by another ASN (MOAS — Multiple-Origin AS), detected from our RIPE RIS collectors. Often benign (anycast, multi-homing, or a recent transfer) — but it can signal a route leak or prefix hijack, so it's worth inspecting.
| Prefix | Origin ASNs | Last detected (UTC) |
|---|---|---|
| 0.0.0.0/0 | AS12389, AS212271 | 2026-07-18 12:22:44 |
| 217.144.171.0/24 | AS12389, AS29226 | 2026-07-18 12:22:44 |
| 194.149.70.0/23 | AS3267, AS12389 | 2026-07-17 19:22:38 |
Network profile
Source: PeeringDB →Present at 10 internet exchanges: DE-CIX Frankfurt: DE-CIX Frankfurt Peering LAN, Netnod Stockholm GREEN -- MTU1500: STH-A -- MTU1500, NL-ix: Main, Equinix Tokyo, BBIX Tokyo, BBIX Hong Kong, Equinix Hong Kong, JPNAP Tokyo: Peering, GNM-IX, Netnod Stockholm BLUE -- MTU1500: STH-B -- MTU1500
Web3 footprint
AS12389 hosts 15 observed decentralized-network nodes across 2 networks. It’s a neutral signal — it does not affect the reputation score. See the full web3 node map.
AS12389 — global IP footprint
Cities where AS12389 has measurable IPv4 allocation. Click any dot to open that city's page. Size and color scale with IP count.
Top CIDR ranges
BGP Announced Prefixes
Live BGP anomalies →Prefixes AS12389 actually originates in BGP, observed across our RIPE RIS collectors. This live routing view can differ from the registry allocation above.
| Prefix | Announcement samples | Last seen |
|---|---|---|
| 5.139.40.0/21 | 5,766,232 | 2026-07-18 12:14:52 |
| 5.139.32.0/21 | 5,765,831 | 2026-07-18 12:14:52 |
| 5.139.12.0/22 | 5,754,134 | 2026-07-18 12:14:59 |
| 5.139.28.0/22 | 5,751,904 | 2026-07-18 12:14:59 |
| 5.139.8.0/22 | 5,749,881 | 2026-07-18 12:14:52 |
| 5.139.16.0/22 | 5,749,217 | 2026-07-18 12:14:52 |
| 5.139.24.0/22 | 5,747,533 | 2026-07-18 12:14:52 |
| 5.142.62.0/23 | 5,366,300 | 2026-07-18 12:14:50 |
| 5.142.16.0/23 | 5,362,616 | 2026-07-18 12:14:59 |
| 5.139.20.0/22 | 2,276,986 | 2026-07-17 22:13:40 |
| 5.139.0.0/22 | 2,276,733 | 2026-07-17 22:13:40 |
| 5.139.4.0/22 | 2,274,924 | 2026-07-17 22:13:40 |
| 89.109.3.0/24 | 1,264,526 | 2026-07-18 12:14:53 |
| 89.109.0.0/24 | 1,261,314 | 2026-07-18 12:14:59 |
| 89.109.2.0/24 | 1,260,904 | 2026-07-18 12:14:53 |
| 89.109.2.0/23 | 1,258,284 | 2026-07-18 12:14:53 |
| 78.37.180.0/24 | 702,525 | 2026-07-18 12:00:09 |
| 78.37.2.0/23 | 702,255 | 2026-07-18 12:00:09 |
| 87.253.200.0/22 | 623,921 | 2026-07-18 12:00:09 |
| 91.122.170.0/24 | 575,511 | 2026-07-18 12:00:09 |
| 91.122.152.0/23 | 573,807 | 2026-07-18 12:00:09 |
| 91.122.156.0/23 | 573,797 | 2026-07-18 12:00:09 |
| 91.122.171.0/24 | 573,057 | 2026-07-18 12:00:09 |
| 92.101.24.0/21 | 518,881 | 2026-07-18 12:00:09 |
| 92.101.112.0/22 | 516,631 | 2026-07-18 12:00:09 |
| 92.100.68.0/23 | 516,284 | 2026-07-18 12:00:09 |
| 92.101.124.0/23 | 515,776 | 2026-07-18 12:00:09 |
| 92.101.217.0/24 | 515,671 | 2026-07-18 12:00:09 |
| 92.101.68.0/23 | 515,643 | 2026-07-18 12:00:09 |
| 92.100.70.0/23 | 515,424 | 2026-07-18 12:00:09 |
| 92.101.206.0/24 | 515,128 | 2026-07-18 12:00:09 |
| 94.142.26.0/23 | 468,194 | 2026-07-16 14:17:03 |
| 95.55.8.0/22 | 466,716 | 2026-07-18 12:00:09 |
| 95.55.0.0/22 | 466,101 | 2026-07-18 12:00:09 |
| 95.55.4.0/22 | 464,858 | 2026-07-18 12:00:09 |
| 95.52.250.0/23 | 464,790 | 2026-07-18 12:00:09 |
| 95.52.248.0/23 | 463,809 | 2026-07-18 12:00:09 |
| 5.141.30.0/23 | 82,918 | 2026-07-18 12:14:01 |
| 5.141.10.0/23 | 82,844 | 2026-07-18 12:14:01 |
| 5.141.194.0/24 | 60,614 | 2026-07-18 12:14:01 |
| 5.141.193.0/24 | 60,584 | 2026-07-18 12:14:01 |
| 5.141.194.0/23 | 60,486 | 2026-07-18 12:14:01 |
| 5.141.196.0/23 | 60,326 | 2026-07-18 12:14:01 |
| 5.141.104.0/22 | 60,276 | 2026-07-18 12:14:01 |
| 5.141.192.0/23 | 60,263 | 2026-07-18 12:14:01 |
| 5.141.198.0/23 | 60,249 | 2026-07-18 12:14:01 |
| 5.141.195.0/24 | 60,240 | 2026-07-18 12:14:01 |
| 5.141.192.0/24 | 60,240 | 2026-07-18 12:14:01 |
| 5.143.230.0/24 | 52,557 | 2026-07-18 12:14:01 |
| 5.141.21.0/24 | 51,306 | 2026-07-18 12:14:01 |
Showing top 50 of 3,320 announced prefixes by sample volume.
Frequently Asked Questions
What is AS12389?
AS12389 is an Autonomous System Number assigned to Rostelecom. An ASN identifies a network that controls a specific set of IP addresses and determines how traffic is routed across the internet via BGP (Border Gateway Protocol).
How many IP addresses does AS12389 announce?
AS12389 announces 9.14M IPv4 addresses distributed across 1,310 routed CIDR prefixes. The network is registered in Russia.
Who operates AS12389?
AS12389 is operated by Rostelecom. The organization is based in Russia. You can view all IP ranges and related ASNs on the organization page.
What country is AS12389 registered in?
AS12389 is registered in Russia. This indicates where the network operator is headquartered, though the IP addresses it announces may serve users globally.
