Autonomous system
AS13857 ONLINEMAC
Unclassified ARIN
Summary
Online Northwest
isp telecom business
One netname says the space is sublet, and the reverse names belong to a company that holds only one block.
What it's used for
- A regional internet service provider. 16,384 addresses across seven IPv4 prefixes, the IPv6 block
2604:be40::/32, and six observed BGP neighbours.
Notable
187.40.128.0/21is netnameONW-SUBLET, stating the arrangement in the label itself. It sits in a range administered by a registry in another region.- Three blocks are netname
EUGENE, a city name with nothing else attached. 144.86.148.0/22is registered to a different company, netnameXS-MEDIA-3.- That company's domain carries the reverse names for four blocks the provider itself holds.
- Names are marked
dynamicorstatic, split across two domains, with the address hyphenated in forward order.
Interesting
- A netname declaring space as sublet is unusually honest. Most of this range hides the same arrangement behind initials, and here the registry record states it, which makes the block's chain of custody readable without asking anybody.
- Reverse names in a second company's domain covering blocks registered to the first is the same relationship seen from the DNS side. Whoever runs the resolvers runs both networks, whatever the registry says about who owns which piece.
- A city name as a netname works only while the operator has one city.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 1 exchange in 1 country, largest first.
| Exchange | Location | Their address |
|---|---|---|
| Northwest Access Exchange | Portland, United States | 198.32.195.45 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 7 prefixes · 16.38K addresses IPv6 1 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 8 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS13857- Registry name
- ONLINEMAC
- Registrant
- Online Northwest
- Abuse contact
- nocnorth@hunterfiber.com
- Registered
- 1999-08-30
- Last changed
- 2026-05-13
- Allocation
- assigned
Routing security
RPKI and IRR
- RPKI
- 90% valid · 9 valid, 1 with no ROA
- ROAs
- 7 authorising AS13857
- ASPA
- no ASPA record
- IRR
- 100% registered · 10 of 10 announcements
- Route objects
- 24 naming AS13857
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 432 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere