AS25159 PJSC MegaFon — ASN Info Lookup

AS25159PJSC MegaFonMobile

WHOIS Topology

Russia · RIPE NCC

Hosts top sitesHome broadbandMobile network

IPv4 addresses

139,776

69 announced prefixes

IPv6 addresses

2.38 × 10³⁰

19 announced prefixes

BGP neighbours

…

CAIDA rank

#682

Customer cone 66 ASNs

Estimated users

97.4K

APNIC Labs estimate

RPKI

99% valid

1 invalid · 0 not covered

Average purity

14 sampled IPs

IXPs / facilities

0 / 0

Operator self-reported

History

How many prefixes this network announced over time, origin changes, the ASN’s registration changes, and outage or hijack incidents. For the history of the range around one IP, see Range history in the IP lookup.

Loading routing history…

IP ranges

Currently announced prefixes with their RIR registration and geolocation.

Prefix	RPKI	Registration	Geolocation	Addresses
178.177.0.0/18	Valid	MF-STF-20200910-T3273687RIPE	Moscow	16,384
31.173.32.0/19	Valid	MF-STF-28062022RIPE	Russia	8,192
109.188.64.0/19	Valid	MSK-SCARTEL-NETWORK-FIXEDIP-GDCRIPE	Moscow	8,192
178.176.0.0/19	Valid	MF-GNOC-STF-20180202RIPE	Russia	8,192
188.170.0.0/19	Valid	RU-MEGAFON-20090624RIPE	Russia	8,192
195.16.96.0/19	Valid	RU-MEGAFON-970313RIPE	Moscow	8,192
212.69.96.0/19	Valid	RU-MEGAFON-991118RIPE	Russia	8,192
62.64.0.0/20	Valid	RU-MEGAFON-970429RIPE	Moscow	4,096
62.64.16.0/20	Valid	MF-STF-27092023RIPE	Russia	4,096
85.26.144.0/20	Valid	MF-STF-20220624-T4104128RIPE	Russia	4,096
94.25.144.0/20	Valid	MF-MC-GDC-MOBILERIPE	Russia	4,096
31.173.0.0/21	Valid	MF-MOSCOW-MBB-FIXEDIP-31-173-0-0RIPE	Moscow	2,048
31.173.8.0/21	Valid	MF-MOSCOW-MBB-FIXEDIP-31-173-8-0RIPE	Russia	2,048
31.173.16.0/21	Valid	MF-MOSCOW-MBB-FIXEDIP-31-173-16-0RIPE	Russia	2,048
31.173.24.0/21	Valid	MF-MOSCOW-MBB-FIXEDIP-31-173-24-0RIPE	Russia	2,048
31.173.64.0/21	Valid	MF-STF-MBB-FIXEDIPRIPE	Moscow	2,048
31.173.72.0/21	Valid	MF-MOSCOW-BBA-POOL-31-173-72RIPE	Moscow	2,048
31.173.80.0/21	Valid	MF-STF-CGN-20150729RIPE	Moscow	2,048
31.173.88.0/21	Valid	MF-STF-BBARIPE	Moscow	2,048
37.28.176.0/21	Valid	MF-GDC-18072023RIPE	Russia	2,048

/24 block profile

One square per /24: colour shows the risk type, shade how many addresses are flagged, stripes mark datacenter blocks. Click a square to see all 256 addresses.

/24s with data 45 / 546 (8%) · flagged 37

No risk flagsDatacenter (no flags)ProxyVPNAbuse / blocklistTorDarker = more flagged addresses; dashed = block screen only

31.173.80.0/216/8 with data · 5 flagged

31.173.0.0/215/8 with data · 5 flagged

31.173.64.0/214/8 with data · 4 flagged

178.177.0.0/183/64 with data · 3 flagged

31.173.8.0/213/8 with data · 3 flagged

31.173.24.0/213/8 with data · 3 flagged

37.28.176.0/213/8 with data · 3 flagged

31.173.16.0/212/8 with data · 1 flagged

46.229.128.0/222/4 with data · 2 flagged

31.173.32.0/191/32 with data · 0 flagged

109.188.64.0/191/32 with data · 1 flagged

178.176.0.0/191/32 with data · 0 flagged

Hover a square for its numbers; click to see all 256 addresses.

Each prefix shows its 64 /24s with the most data. Built daily from lookups, neighbour sampling, public lists and block screening.

IP reputation

IPs from this network that CleanIP has analysed: purity, abuse reports and the riskiest /24 blocks.

Purity distribution

85–100 870–84 050–69 00–49 6

0.31%

Share of IPv4 reported or blocklisted

435

Listed IPs

Analysed IPs

Riskiest /24 blocks

/24 block	Flagged	Analysed
178.178.222.0/24	3	3
178.178.194.0/24	1	1
31.173.81.0/24	1	1
31.173.84.0/24	1	1

Flagged = VPN, proxy, Tor or purity below 50. Samples come from user lookups and neighbour sampling, not every address in this network.

Geography

Where this network’s IPv4 addresses are located.

Russia100.0%

Scope: Single country
In registered country: 100.0%

Estimated by sampling IPv4 ranges against a geolocation database.

Traffic observation

AS25159 · Last 7 days

Mobile vs. Desktop

Desktop86.1%Mobile13.9%

Bot vs. Human

Human61.1%Bot38.9%

Adoption & Usage

Adoption and usage of key protocols

Internet Protocol (IP) Version

IPv474.7%IPv625.3%

HTTP Version

HTTP/1.x

13.6%HTTP/2

81.9%HTTP/3

4.5%

HTTP vs. HTTPS

94.3% HTTPS (encrypted)

Plain HTTP 5.7%

TLS Version

TLS 1.0/1.1< 0.1%TLS 1.23.4%TLS 1.391.8%QUIC4.8%

Security & Attacks

Insights into network and application layer attack traffic

Layer 7 Attacks

GET

88.1%POST

10.2%HEAD

1.6%Other

< 0.1%

BGP Announcements

Hourly BGP route announcements over the last 7 days

1,499,297

7-day total

176,142

Hourly peak

Data: Cloudflare Radar, licensed under CC BY-NC 4.0

Activity

Hourly traffic over the last 7 days, normalized to this network’s peak.

A pronounced day/night rhythm, typical of networks with human users.

	00						06						12						18
Mon
Tue
Wed
Thu
Fri
Sat
Sun

Times in UTCLessMore

Peak hour: 16:00–17:00
Active hours: 17 hrs
Weekend vs weekday: Weekdays ≈ weekends
Busiest day: Wed

Loading…

BGP upstreams and neighbours

AS25159Standalone page

Loading upstreams and neighbours…

WHOIS record

The registry’s record for this AS number: holder, status, dates and contacts.

Sources

Where the information on this page comes from and when it was updated.

Information	Source	Updated
Registered country	RIR daily delegation statistics	2026-10-24
Registered address & allocation date	RIR registration data (RDAP)	2026-10-13
Organization & company country	AS-to-organization data	2026-10-24
Network type	CleanIP ASN canon	2026-10-17
Announced prefixes & BGP neighbours	Public BGP routing data	2026-10-24
IPv4 geography	Geolocation database	—
RPKI validation	RPKI ROA validation data	2026-10-24
Rank & customer cone	CAIDA AS Rank	2026-10-01
Estimated users (APNIC)	APNIC Labs user estimates	2026-10-21
Network tags	Public routing data community tags	2026-10-24
IP reputation	CleanIP lookups and neighbour sampling	—

The page is taking longer to start. Some resources may not have loaded. Please try reloading.

Reload page

Multi-source cross-checks · In-house reputation data · Real data only