asn.dev

Autonomous system

AS28209 Under Servicos de Internet Ltda

Hosting LACNIC Content

IPv4 addresses 20.48K 19 prefixes
IPv6 prefixes 8 counted as prefixes, not addresses
Countries 1 mostly BR
Exchanges 1 recorded by PCH
Upstreams 7 3 downstream
Flagged prefixes 0 none

Summary

Under

Brazil · AI-generated

residential isp brazil broadband

AS28209 is operated by Under, a Brazilian internet service provider.

What it's used for

  • The address space carries residential and business broadband traffic, evidenced by reverse DNS entries such as none.underplatform.com and f1215abf95.underplatform.com.
  • The AS announces 20,480 IPv4 addresses across 19 prefixes and 8 IPv6 prefixes, while maintaining 33 observed neighbours; this ratio of moderate address space to a significant number of peering partners suggests a regional access network with substantial transit and peering relationships.

Notable

  • All registrants in the RDAP data match the announcer, consistently listing Under Servicos de Internet Ltda for netnames 212854, 167887, and 113587.
  • The address inventory is finely subdivided into /21, /22, /23, and /24 blocks across the 177.70.0.0/16, 179.127.0.0/16, and 189.113.0.0/16 ranges, indicating site-by-site segmentation typical of a large ISP managing distinct customer pools or regional hubs.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 1 exchange in 1 country, largest first.

ExchangeLocationTheir address
IX.br (PTT.br) São PauloSão Paulo, Brazil187.16.208.116

Transit providers

7 upstream, 3 downstream and 14 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS3356Level 3 Parent, LLC1,261
AS22381SAMM TECNOLOGIA E TELECOMUNICACOES S.A729
AS264409Huge Solucoes Corporativas Ltda254
AS6939Hurricane Electric LLC210
AS24482SG.GS40
AS37721Virtual Technologies & Solutions6
AS35280F5 Networks SARL3

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-16, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 19 prefixes · 20.48K addresses IPv6 8 prefixes

CountryNamePrefixes
BRBrazil27

Registry

Allocation record

LACNIC · via Atlas (registry data)
Registry
LACNIC
Registered
2008-05-08
Allocation
allocated

Declared

PeeringDB profile

self-reported
Name
Under
Also known as
Under
Network type
Content
Scope
South America
Traffic ratio
Heavy Outbound
Peering policy
Open
IRR as-set
ALTDB::AS-UNDER
Present at
1 exchanges
Facilities
1 facilities
Website
https://www.under.com.br

PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.

Routing security

RPKI and IRR

Full detail
RPKI
96% valid · 49 valid, 2 with no ROA
ROAs
4 authorising AS28209
ASPA
no ASPA record
IRR
100% registered · 51 of 51 announcements
Route objects
24 naming AS28209

Reputation

Classification and threat

Hosting Datacenter or cloud provider. Addresses are servers, not people.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,783 prefixes, as published 2026-10-17. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check