Autonomous system
AS25159 SONICDUO-AS
Unclassified ARIN
Summary
MegaFon
mobile fixed isp russia
SONICDUO-AS is operated by PJSC MegaFon, one of Russia's major telecommunications providers.
What it's used for
- The address space carries both mobile and fixed-line services, evidenced by netnames such as
MF-MC-GDC-MOBILE,MF-URAL-MBB-YOTA-GDC, andMSK-SCARTEL-NETWORK-FIXEDIP-GDC. - With 139008 IPv4 addresses announced across 66 prefixes and 67 observed neighbours, the ratio indicates a large-scale access network serving end-users rather than a transit provider.
Notable
- Registrants consistently identify as PJSC MegaFon or its specific operational branches, such as the Moscow Branch and GNOC West TRM IP, aligning with the AS holder.
- The inventory is finely subdivided into numerous /19, /20, and /21 blocks, reflecting site-by-site segmentation typical of a large corporate telecom estate.
- The AS has been observed in routing tables since 2002, indicating a long-standing presence in the Russian internet infrastructure.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
1 upstream, 59 downstream and 63 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS31133 | PJSC MegaFon | 4,787 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 66 prefixes · 139K addresses IPv6 10 prefixes
| Country | Name | Prefixes |
|---|---|---|
| RU | Russian Federation | 76 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS25159- Registry name
- SONICDUO-AS
- Registrant
- MEGAFON-GNOC-MNT
- Abuse contact
- abuse-mailbox@megafon.ru
- Registered
- 2002-08-13
- Last changed
- 2026-08-26
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 99% valid · 87 valid, 0 with no ROA 1 RPKI-invalid
- ROAs
- 96 authorising AS25159
- ASPA
- no ASPA record
- IRR
- 99% registered · 87 of 88 announcements 1 other origin
- Route objects
- 125 naming AS25159
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 436 networks and 1,771 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere