AS852

AS852 is an actively announced, high-volume Canadian transit ASN registered to TELUS Communications Inc., ranked 226th globally by CAIDA AS Rank and confirmed as a member of CAIDA's transit clique — the small set of default-free-zone ASNs that can reach the full IPv4 table without a default route.

ARIN RDAP records AS852's top-level registration event as 1998-04-16 under org handle TACE ("TELUS Communications Inc."), with a last-changed event of 2013-04-05. The registrant address is 510 W Georgia St, Vancouver, BC. TELUS Communications Inc. retained this older corporate name after its parent renamed to TELUS Corporation in February 2005.

Live RIPEstat routing-status data resolves the routing-scale question that stalled the prior pass: AS852 currently announces 676 IPv4 prefixes (4,841,216 addresses) and 30 IPv6 prefixes, visible across all 329 RIS full-feed IPv4 peers and all 322 IPv6 peers; a broader RIPEstat announced-prefixes list runs to 708 distinct prefixes. This settles the earlier bgp.he.net (7,451) vs. bgp.tools (673) disagreement in favor of bgp.tools' order of magnitude — bgp.he.net's figure is not a current originated-prefix count.

CAIDA ASRank independently confirms AS852 as fully active: rank 226, a customer cone of 236 ASNs / 5,427 prefixes / 15,314,688 addresses, and an AS-degree of 409 total (203 customer, 201 peer, 5 provider). PeeringDB lists AS852 as an NSP running a Selective peering policy (AS-SET AS-TELUS; minimum 2 peering locations and 1 Gbps exchanged) with self-reported 10–20 Tbps traffic, mostly inbound, and public IX presence at CANIX, TorIX, VANIX, YYCIX, DE-CIX New York, Equinix Chicago, and SIX Seattle. Upstreams corroborated by both bgp.he.net and bgp.tools include Arelion, Cogent, NTT America, GTT, and Deutsche Telekom.

A live RIPEstat RPKI-validation sample across 5 of the 708 announced prefixes returned 4 unknown (no covering ROA) and 1 valid, with zero invalid — a mixed-but-clean sampled finding. The prior entry's uncorroborated "6,924 Originated Invalid vs 387 valid" figure could not be traced to a source that resolves and has been dropped rather than reasserted.

ARIN's org handle TACE lists 17 total autnums including AS852; the other 16 — among them AS1691 (TELUS), AS14663 (TELUS-MOBILITY), and several apparently acquired regional ISPs such as AS54359 (NETAGO) and AS54867 (SEAVIEW) — share the same registrant and give a directly cited sample of TELUS's broader ASN holdings.

Exposure

No CVE, malware family, or command-and-control association specific to AS852 or TELUS's network infrastructure was found as of an August 2026 search; UpGuard's live security report for TELUS records "No reports of malware distribution in the last 30 days" and the same for botnet activity — a confirmed negative, not a hedge.

Historical incident

In October 2017, three TELUS address blocks (68.182.255.0/24, 74.49.255.0/24, 96.1.255.0/24) were hijacked by AS133955; AS852's own space was the victim, not the origin, and mitigation completed within roughly three hours per NANOG mailing-list discussion (seclists.org/nanog/2017/Oct/48).

Blocklist status

Spamhaus DROP/ASN-DROP could not be directly queried as of 2026-08-08 (check.spamhaus.org returns HTTP 403 to fetch tooling); no third-party report of a current listing was found, so this remains Unknown rather than confirmed clean.

Background noise

CleanTalk reports 1,052 of 50,631 tracked AS852 IPs as spam-active (2.08%) across 29 flagged prefixes as of an August 2026 check — a modest, distributed rate consistent with routine compromised-endpoint noise on a large eyeball ISP.

RPKI hygiene

A 5-prefix live RIPEstat sample of the 708 currently announced prefixes returned 4 unknown and 1 valid, zero invalid — mixed ROA coverage with no misissuance observed in the sample.

Unrelated corporate event

TELUS Digital, a separate TELUS Corporation business-process-outsourcing subsidiary (not AS852's registrant, TELUS Communications Inc.), disclosed a 2026 data-theft incident attributed to the ShinyHunters group via stolen Google Cloud Platform credentials; TELUS stated the incident did not extend to core network/broadband/wireless operations, so it is noted for corporate context only and not attributed to AS852.

Operator

TELUS Communications Inc. (ASN registrant of record; wholly owned principal operating subsidiary of TELUS Corporation, TSX: T / NYSE: TU) [Confirmed] — rdap.arin.net/registry/autnum/852, telus.com/en/about

Country / RIR

CA, ARIN [Confirmed] — rdap.arin.net/registry/autnum/852

Allocated

1998-04-16 (ARIN RDAP autnum top-level registration event, org handle TACE); last changed 2013-04-05 [Confirmed] — rdap.arin.net/registry/autnum/852

Org status

active, publicly traded telecommunications group; TELUS Communications Inc. is the wholly owned principal operating subsidiary of TELUS Corporation, incorporated 1998, HQ Vancouver BC; parent renamed from "TELUS Communications Inc." to "TELUS Corporation" in Feb 2005 while the subsidiary retained the older name

[Confirmed] — rdap.arin.net/registry/autnum/852, telus.com/en/about/investor-relations

Contacts

technical TBOTP-ARIN ("TELUS BC ORG TECH POC", IPadmin@telus.com, +1-877-310-8324); administrative ZT93-ARIN ("Hostmaster", hostmaster@telus.com, +1-877-310-8324); abuse AAT-ARIN ("Abuse at TELUS", abuse@telus.com, +1-877-945-8220); all three are vCard kind:group function mailboxes, not individuals; RIPEstat abuse-contact-finder independently corroborates abuse@telus.com

[Confirmed] — rdap.arin.net/registry/autnum/852, stat.ripe.net/data/abuse-contact-finder

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal (current blocklist listing, malware/C2 association, or hijack origination by AS852 itself) found as of an August 2026 search; UpGuard reports zero malware/botnet distribution in the last 30/90 days; the one concrete NANOG-documented event (Oct 2017) shows AS852's space as the hijack victim, not the perpetrator; CleanTalk shows 2.08% spam-active IPs, typical background noise for a large eyeball ISP

Network & routing

Network type

NSP per PeeringDB's own classification; functions as TELUS's national ISP/transit ASN [Confirmed] — peeringdb.com/asn/852

Size

676 IPv4 prefixes / 4,841,216 addresses and 30 IPv6 prefixes (RIPEstat routing-status, live); a broader RIPEstat announced-prefixes list totals 708 distinct prefixes; visible across all 329 RIS full-feed IPv4 peers and all 322 IPv6 peers. This resolves the prior bgp.he.net-vs-bgp.tools count discrepancy in favor of bgp.tools' order of magnitude

[Confirmed] — stat.ripe.net/data/routing-status, stat.ripe.net/data/announced-prefixes

Routing/peering

CAIDA AS rank 226; customer cone 236 ASNs / 5,427 prefixes / 15,314,688 addresses; AS-degree total 409 (customer 203, peer 201, provider 5); confirmed member of the CAIDA transit clique [Confirmed] — api.asrank.caida.org/v2/restful/asns/852. Selective PeeringDB policy (AS-SET AS-TELUS; min 2 locations, min 1 Gbps); upstreams corroborated across bgp.he.net and bgp.tools: Arelion, Cogent, NTT America, GTT, Deutsche Telekom [Likely]; bgp.he.net separately reports 411 total observed BGP peers, consistent with RIPEstat's observed_neighbours of 408 — peeringdb.com/asn/852, bgp.he.net/AS852

RPKI

live RIPEstat rpki-validation sample of 5 of the 708 announced prefixes (204.174.172.0/24, 199.175.134.0/24, 142.82.15.0/24, 199.216.95.0/24, 207.228.92.0/24) returns 4 unknown / 1 valid / 0 invalid, mixed coverage, no misissuance in sample [Confirmed, sampled finding not exhaustive] — stat.ripe.net/data/rpki-validation. The prior entry's "6,924 Originated Invalid vs 387 valid" figure did not trace to a resolvable source and has been dropped

Notable usage

self-reported 10–20 Tbps traffic (majority inbound); public IX presence at CANIX, TorIX, VANIX, YYCIX, DE-CIX New York, Equinix Chicago, SIX Seattle; TELUS states it holds Google Verified Peering Provider (VPP) Gold status [Confirmed for PeeringDB figures; Likely for VPP Gold, sourced via WebSearch snippet of telus.com, not a direct fetch] — peeringdb.com/asn/852, telus.com/en/blog/partner/google-verified-peering-provider

Related ASNs

ARIN org handle TACE lists 17 total autnums including AS852; the other 16 are AS1691 (TELUS), AS5765, AS7445, AS7861, AS8013 (TELUS-AS-8013), AS14663 (TELUS-MOBILITY), AS19190 (FASTWIRE-COM), AS54359 (NETAGO), AS54719 (TACE-MCC1320), AS54759 (TELUS-RAFTVIEW), AS54841 (O-NET), AS54867 (SEAVIEW), AS62969 (ABCCOMM), AS393217 (ASN4-TELUS), AS396472 (SWIFTINTERNET), AS397569 (VELOCITYNET-01) [Confirmed for the RDAP enumeration; Unknown/unverified whether the regional-ISP-named entries reflect acquisitions] — rdap.arin.net/registry/entity/TACE

Analyst note

AS852 is fully active and its ASN name is corrected to "ASN852" (ARIN RDAP autnum name field) — the operator name TELUS Communications Inc. belongs in the operator field, not as_name. CAIDA ASRank (rank 226, cone 236/5,427/15,314,688, degree 409, clique member) and RIPEstat routing-status (676 v4 / 30 v6 prefixes, 708-prefix announced list, full RIS visibility) together resolve every field the prior pass had nulled or hedged. The prior unreconciled RPKI invalid/valid figure was replaced with a live 5-prefix sampled finding.