Autonomous system
AS10879 UHC
Hosting ARIN Enterprise
Summary
UnitedHealthcare
enterprise legacy
UHC is UnitedHealthcare, the health insurance arm of UnitedHealth Group and one of the largest health insurers in the United States. This is a corporate enterprise network, not a service provider.
What it's used for
Carrying the company's own operations. RIS shows 92 announced IPv4 prefixes holding 224,256 addresses, no IPv6 in the routing table, and 13 observed neighbours.
The ratio between those numbers is what identifies the role. A quarter of a million addresses is a large network, but it is reached through barely more than a dozen BGP neighbours. A wholesale carrier with that much space would peer with hundreds or thousands of ASes because selling reachability is the business; here the neighbours are transit suppliers and a few direct connections, which is exactly what a large multi-homed enterprise looks like. The address space serves data centres, offices, claims and clinical systems, and the member-facing web estate rather than customers who buy IP transit.
The single reverse DNS result on the sample lands on a myuhc-style name for a personal-health-record service, one of the member portals UnitedHealthcare operates for employer plan members. That is consistent: this is the insurer's own application infrastructure.
Notable
The prefix list is dominated by a legacy 128.35.0.0/16, further split into halves and quarters, plus a large 170.138.0.0/16 and a wide spread of 161.249 and 149.111 blocks. Splitting a /16 into /17s and /18s alongside the covering route is standard enterprise traffic engineering across multiple data centres and transit providers.
Interesting
No IPv6 is observed at all, which for a network of this size in the mid-2020s is a deliberate choice about where the effort goes, and a common one in regulated, change-averse industries.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 1 exchange in 1 country, largest first.
| Exchange | Location | Their address |
|---|---|---|
| Midwest Internet Cooperative Exchange | Minneapolis, United States | 206.108.255.198 |
Transit providers
12 upstream, 0 downstream and 12 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-12, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 72 prefixes · 224K addresses IPv6 0 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 72 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS10879- Registry name
- UHC
- Registrant
- Unitedhealthcare
- Abuse contact
- inet_ops@uhc.com
- Registered
- 1997-12-17
- Last changed
- 2011-12-13
- Allocation
- assigned
Declared
PeeringDB profile
- Name
- Unitedhealthcare
- Also known as
- UnitedHealth Group
- Network type
- Enterprise
- Scope
- Global
- Traffic ratio
- Balanced
- Peering policy
- Selective
- IRR as-set
RADB::AS10879:AS-ROUTING- Present at
- 1 exchanges
- Website
- https://www.uhc.com
PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.
Routing security
RPKI and IRR
- RPKI
- 0% valid · 0 valid, 93 with no ROA
- ROAs
- 1 authorising AS10879
- ASPA
- no ASPA record
- IRR
- 100% registered · 93 of 93 announcements
- Route objects
- 106 naming AS10879
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 436 networks and 1,769 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere