Reputation · trust score
A transparent 0–100 signal. Every entity starts at a neutral baseline of 65; threat-intel blocklists, exposure, reverse-DNS, routing and allocation each adjust it up or down. Higher is more trustworthy.
- Baseline (neutral) 65
- Active-threat / abuse risk −12
- Trust score 53 / 100
Experimental · trust-vectors model v1.3.0 — a transparent heuristic, not a definitive verdict. How it works →
⚠ 1 MOAS prefix — multiple origin ASNs detected
All MOAS anomalies →A previously stable prefix originated by AS399989 is now also announced by another ASN (MOAS — Multiple-Origin AS), detected from our RIPE RIS collectors. Often benign (anycast, multi-homing, or a recent transfer) — but it can signal a route leak or prefix hijack, so it's worth inspecting.
| Prefix | Origin ASNs | Last detected (UTC) |
|---|---|---|
| 23.188.208.0/24 | AS3507, AS399989 | 2026-11-07 03:53:12 |
Top CIDR ranges
BGP Announced Prefixes
Live BGP anomalies →Prefixes AS399989 actually originates in BGP, observed across our RIPE RIS collectors. This live routing view can differ from the registry allocation above.
| Prefix | Announcement samples | Last seen |
|---|---|---|
| 65.86.140.0/22 | 23,687 | 2026-11-07 00:37:27 |
| 82.38.185.0/24 | 23,609 | 2026-11-07 00:37:27 |
| 82.38.176.0/24 | 23,543 | 2026-11-07 00:37:27 |
| 82.38.177.0/24 | 23,487 | 2026-11-07 00:37:27 |
| 82.38.188.0/24 | 23,465 | 2026-11-07 00:37:27 |
| 82.38.191.0/24 | 23,461 | 2026-11-07 00:37:27 |
| 82.38.190.0/24 | 23,456 | 2026-11-07 00:37:27 |
| 124.158.113.0/24 | 23,429 | 2026-11-07 00:37:27 |
| 82.38.187.0/24 | 23,409 | 2026-11-07 00:37:27 |
| 82.38.184.0/24 | 23,285 | 2026-11-07 00:37:27 |
| 198.102.10.0/24 | 23,285 | 2026-11-07 00:37:27 |
| 104.129.255.0/24 | 23,199 | 2026-11-07 00:37:27 |
| 109.176.25.0/24 | 23,191 | 2026-11-07 00:37:27 |
| 82.38.178.0/24 | 23,040 | 2026-11-07 00:37:27 |
| 82.38.186.0/24 | 23,030 | 2026-11-07 00:37:27 |
| 82.38.179.0/24 | 23,006 | 2026-11-07 00:37:27 |
| 74.2.180.0/22 | 22,967 | 2026-11-07 00:37:27 |
| 82.38.189.0/24 | 22,917 | 2026-11-07 00:37:27 |
| 124.158.114.0/24 | 22,891 | 2026-11-07 00:37:27 |
| 103.47.59.0/24 | 22,837 | 2026-11-07 00:37:27 |
| 193.135.119.0/24 | 22,797 | 2026-11-07 00:37:27 |
| 109.111.60.0/22 | 22,719 | 2026-11-07 00:37:27 |
| 193.135.116.0/24 | 22,633 | 2026-11-07 00:37:27 |
| 216.46.80.0/22 | 22,453 | 2026-11-07 00:37:27 |
| 23.129.160.0/24 | 20,156 | 2026-11-07 00:37:27 |
| 109.111.44.0/22 | 13,574 | 2026-09-14 15:07:44 |
| 74.0.36.0/22 | 13,452 | 2026-09-10 15:25:44 |
| 180.131.144.0/24 | 13,148 | 2026-09-28 22:17:38 |
| 43.242.139.0/24 | 13,146 | 2026-09-28 22:17:38 |
| 216.183.228.0/24 | 13,122 | 2026-09-28 22:17:38 |
| 209.236.207.0/24 | 12,936 | 2026-09-28 22:17:38 |
| 23.188.208.0/24 | 11,932 | 2026-11-06 19:40:33 |
| 109.176.215.0/24 | 11,575 | 2026-08-31 15:30:59 |
| 109.176.255.0/24 | 11,365 | 2026-08-31 15:30:59 |
| 209.216.20.0/22 | 6,548 | 2026-11-07 00:37:27 |
| 209.216.28.0/22 | 6,542 | 2026-11-07 00:37:27 |
| 209.216.4.0/22 | 6,533 | 2026-11-07 00:37:27 |
| 209.216.12.0/22 | 6,422 | 2026-11-07 00:37:27 |
| 213.218.227.0/24 | 6,294 | 2026-07-28 13:52:03 |
| 86.109.76.0/22 | 5,993 | 2026-06-29 15:07:48 |
| 109.111.32.0/22 | 2,021 | 2026-05-25 15:40:03 |
| 194.231.128.0/22 | 1,015 | 2026-11-06 12:38:11 |
| 109.111.56.0/22 | 40 | 2026-05-25 15:17:39 |
| 184.174.7.0/24 | 1 | 2026-05-19 15:38:55 |
Frequently Asked Questions
What is AS399989?
AS399989 is an Autonomous System Number assigned to ULTRA ONE. An ASN identifies a network that controls a specific set of IP addresses and determines how traffic is routed across the internet via BGP (Border Gateway Protocol).
How many IP addresses does AS399989 announce?
AS399989 announces 15.4K IPv4 addresses distributed across 26 routed CIDR prefixes. The network is registered in United States.
Who operates AS399989?
AS399989 is operated by ULTRA ONE. The organization is based in United States. You can view all IP ranges and related ASNs on the organization page.
What country is AS399989 registered in?
AS399989 is registered in United States. This indicates where the network operator is headquartered, though the IP addresses it announces may serve users globally.
