Consumer ISP
AS12389 RostelecomASN lookup: IP ranges, prefixes and network type
AS12389 is the autonomous system number (ASN) announced by Rostelecom. It announces 1,325 prefixes, 9,048,319 IPv4 addresses in total. Every address inside those ranges is routed by this operator, which is what makes the number the shortest answer to who runs a given address.
AS12389 at a glance
| Organisation | Rostelecom |
|---|---|
| Autonomous system | AS12389 |
| Network type | Consumer ISP |
| IPv4 prefixes | 1,282 |
| IPv6 prefixes | 43 |
| IPv4 addresses | 9,048,319Summed across every announced prefix. IPv6 is not counted; the numbers are meaningless at that scale. |
| In known VPN ranges | 0 of 1,282 prefixes |
| In known datacenter ranges | 0 of 1,282 prefixes |
The last two rows are a second opinion, counted against the X4BNet VPN and datacenter range lists rather than read off the operator name. A network with most of its prefixes in the VPN list is carrying anonymised traffic whatever it calls itself.
Sample prefixes
The largest ranges Rostelecom announces, biggest first. These are a sample and not the full routing table: 1,325 prefixes do not fit on a page, and the ones worth showing are the ones most traffic comes from.
| Prefix | Family | Addresses |
|---|---|---|
| 178.64.0.0/13 | IPv4 | 524,288 |
| 37.20.0.0/14 | IPv4 | 262,144 |
| 92.124.0.0/14 | IPv4 | 262,144 |
| 95.52.0.0/14 | IPv4 | 262,144 |
| 176.48.0.0/14 | IPv4 | 262,144 |
| 178.44.0.0/14 | IPv4 | 262,144 |
| 2.60.0.0/15 | IPv4 | 131,072 |
| 5.136.0.0/15 | IPv4 | 131,072 |
| 31.162.0.0/15 | IPv4 | 131,072 |
| 31.180.0.0/15 | IPv4 | 131,072 |
| 37.78.0.0/15 | IPv4 | 131,072 |
| 46.158.0.0/15 | IPv4 | 131,072 |
Look up an address on AS12389
The field is prefilled with 178.64.0.1, the first address of the largest range above. Change it for one from your own logs and you get the network, the operator and the verdict for that specific address.
What AS12389 means for detection
Addresses on Rostelecom are consumer connections: households and small businesses on a fixed line. Our engine classifies them residential, which is the class most likely to be a real customer, and the class fraud tools are least likely to flag. The catch is the residential proxy. An address here can be rented out by whoever holds the connection, and when that happens the ownership data on this page still reads as clean. That is a behavioural signal, not an ownership one.
The verdict for a single address is never settled by the ASN alone. It is the starting point, and IP Detection adds range membership, behaviour and history on top of it before it answers.
Related networks
The same page as JSON
No key and no signup. This is the endpoint this page is rendered from, so anything you read here you can script against.
curl https://ipscanner.io/v1/asn/directory/AS12389
IPScanner. AS12389 Rostelecom, ASN directory. https://ipscanner.io/zh_hk/asn/as12389. Derived from MaxMind GeoLite2.