AS12389
Rostelecom
AS12389 is an Autonomous System — a group of IP networks managed under a single routing policy — operated by Rostelecom, announcing routes from RU. ScanMalware.com has recorded 46 public scans of 46 distinct URLs hosted on this network, the earliest from 2025-11-05 and the most recent from 2026-07-04.
In current BGP routing data, AS12389 announces 84,808 IPv4 prefixes and 3,387 IPv6 prefixes, and is reached through 3 observed upstream providers. A network's routing footprint and transit relationships are useful context for judging whether a hosted site sits on established infrastructure or on a network with a pattern of abuse.
Upstream transit providers
These Autonomous Systems are most frequently seen forwarding traffic for AS12389 in BGP routing tables — they form its effective transit and peering profile.
Recent public scans on AS12389
A rolling sample of recent public scans of hosts on this network. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| Bʰedoh₂ swé's website https://bedohswe.eu.org | 2026-07-04 |
| ext-strm-rutjm02rtk-01.strm.yandex.net https://ext-strm-rutjm02rtk-01.strm.yandex.net | 2026-07-03 |
| Farewell to 'The Soldier of God': Yoel Romero DEPARTS the UFC, but hopefully he's not done with MMA just yet — RT Sport News https://www.rt.com/sport/508784-yoel-romero-leaves-ufc/ | 2026-05-02 |
| Login – Nextcloud https://demantequilla.ru/ | 2026-04-23 |
| Nextcloud http://inform.sytes.net/ | 2026-04-01 |
| Купить недвижимость в Краснодаре - официальный сайт Аякс. Купля и продажа квартир по выгодным ценам https://ayax.ru | 2026-03-23 |
| БелСнаб – магазин строительных материалов в г. Воронеж https://vrn-snab36.ru | 2026-03-20 |
| Login – Nextcloud https://deckich.ru/login | 2026-03-18 |
Open the full AS12389 search interface — filters, pagination and BGP detail →
Frequently asked questions about AS12389
- Does hosting a site on AS12389 make it unsafe?
- No. AS12389 is a network operated by Rostelecom, and like any Autonomous System it carries a mix of legitimate and malicious sites. Hosting location is context, not a verdict — ScanMalware scores each scanned page on its own content, scripts and behaviour.
- How many sites on AS12389 has ScanMalware scanned?
- ScanMalware has recorded 46 public scans across 46 distinct URLs hosted on AS12389. The figure updates as new URLs on this network are submitted.
- Which networks provide transit for AS12389?
- In the BGP paths ScanMalware observes, AS12389 is most often reached through AS2497 (IIJ Internet Initiative Japan Inc.), AS20485 (TRANSTELECOM Joint Stock Company TransTeleCom) and AS6939 (HURRICANE). These upstream providers form the network's effective transit profile.
How ScanMalware builds this profile
ScanMalware.com performs public URL scans with a real headless browser, then maps each scanned host to its current ASN ownership and BGP routing context. This profile is built from those scans plus live routing data — the IP prefixes AS12389 announces, the networks that transit it, and the country it operates from — letting you pivot from one suspicious host to the wider network it sits on.
Browse more profiled networks on the ASN index, or scan a URL to see its hosting network.