ULTRAPACK Ultra-Pak LLC is a registry-visible Ukrainian institution with a small but distinct internet footprint: AS210749 and the sole prefix 185.144.99.0/24, exclusively announced via AS209863. Its entire operating surface is defined by RIPE WHOIS objects and BGP observations; no corporate website or additional infrastructure was found. The entity’s relevance stems from its potential as a point of fragility in Ukrainian routing and as an attribution anchor for abuse tracking. Current evidence is limited to public numbering records, so any change in those records or the routing posture would represent a significant signal. The main uncertainties are the entity’s real-world operational purpose and its reliance on a sponsoring LIR, which may indicate a different controlling organisation.

ULTRAPACK Ultra-Pak LLC

ULTRAPACK Ultra-Pak LLC is a Ukrainian network entity visible through autonomous system AS210749 and the single IPv4 prefix 185.144.99.0/24. It relies exclusively on upstream provider PROLVL Ltd. (AS209863) for global connectivity, and its public identity is limited to RIPE WHOIS records and routing observations.

Why It Matters

A hijack of the /24, a change in the sponsoring LIR, or a termination of the upstream session would sever connectivity for any services behind that prefix and erode the trustworthiness of the registry data. The single-homed architecture amplifies the potential impact, as there is no alternative path to absorb a failure.

What Public Sources Show

ULTRAPACK Ultra-Pak LLC is a small, registry-visible network entity in Ukraine that operates autonomous system AS210749. It controls a single block of 256 IPv4 addresses, 185.144.99.0/24, which it announces to the internet through one upstream provider, PROLVL Ltd. (AS209863). No additional peers, downstreams, or network redundancy have been observed.

The entity matters because its entire public connectivity rests on a single BGP session and a thin set of WHOIS records. Any change to the AS210749 registration, the sponsored organisation record, or the upstream peering could disrupt the reachability of the /24 prefix and break the attribution chain used by security teams and network mappers. The single-homed design leaves the prefix with no alternative path to the global internet.

Public registry data from RIPE NCC and third-party intelligence platforms confirm that AS210749 was allocated on 17 September 2021 under the AS name ULTRAPACK. The organisation is listed as Ultra-Pak LLC, sponsored by ORG-Vs35-RIPE. The only observed route is 185.144.99.0/24, exclusively announced via AS209863. Cloudflare Radar indexes the ASN as Ukrainian and provides routing and traffic telemetry views. No PeeringDB record was found, and no corporate website is known.

The operating surface is correspondingly narrow. The entity’s public control surfaces are limited to the aut-num and organisation objects in the RIPE Database and the BGP announcements that flow through AS209863. Without these, the entity would become unreachable and invisible to internet cartography. No first-party documentation, financial filings, or service pages have been identified to date.

If the RIPE records were altered without authorisation, an attacker could hijack the prefix or redirect traffic. If the upstream PROLVL Ltd. changed its routing policy or de-peered, the /24 would disappear from the global routing table entirely. In either case, services dependent on those addresses would experience an outage, and abuse handlers would lose a consistent handle for attribution investigations.

Observers should monitor the RIPE WHOIS for AS210749 and ORG-UL240-RIPE for any modifications, especially changes to the sponsoring organisation or the maintainer. BGP monitoring services can track 185.144.99.0/24 for updates to the origin AS or the AS path. The appearance of a corporate website, a PeeringDB entry, or additional prefixes would signal an expansion of the entity’s footprint and would require reassessment of its role and risk profile.

The entity’s commercial purpose remains unknown. The sponsoring LIR relationship hints that it may rely on another organisation for registry services, but no further details are public. It could be an internal network for a private company, a small hosting provider, or a testbed. Without active traffic data or first-party documentation, the profile must remain anchored to the registry and routing evidence, treating everything else as unconfirmed.

Operating Surface

The entity operates as a small network edge holder in the RIPE region, with no known commercial presence beyond registry data. It controls AS210749 and originates the /24 route, but lacks redundancy, visible peers, or a corporate website. Its operational role is that of a registry-dependent, single-homed internet endpoint whose public existence is defined by numbering and routing artifacts.

ULTRAPACK matters because any changes to its RIPE records or BGP announcements directly affect the attribution and availability of 185.144.99.0/24. Security analysts, network cartographers, and abuse teams need to track this entity to detect hijacks, misconfigurations, or ownership shifts that could disrupt connectivity or skew infrastructure mapping in Ukraine.

Watchpoints

ULTRAPACK's single-homed architecture and opaque organisational structure make it a high-watch item for routing security in Ukraine. The absence of a published website or PeeringDB record suggests it may be a passive holding entity or a test network, but its presence in the global routing table means it could become a vector for prefix hijacking or a canary for changes in the Ukrainian ISP ecosystem.

Monitor RIPE WHOIS for changes to org ORG-UL240-RIPE and aut-num AS210749. Track BGP for 185.144.99.0/24: any new origin AS or withdrawal. Watch for the emergence of a corporate website or PeeringDB listing, which would clarify its operational role.

No corporate website, PeeringDB record, or business registration details are available. The sponsoring LIR's identity and role are not public. Active traffic telemetry from the prefix would confirm live usage, but current evidence only shows routing table presence.

Sources

• Internet registry record - public-source identity and registry context for ULTRAPACK Ultra-Pak LLC.
• ipinfo.io - Identifies AS210749 as Ultra-Pak LLC, country Ukraine, registry RIPE, allocated 2021-09-17, with 256 IPv4 addresses, 0 IPv6 addresses, IPv4 range 185.144.99.0/24, peer/upstream AS209863 PROLVL Ltd., and no downstreams displayed.
• ip2location.com - Lists AS210749 as Ultra-Pak LLC in Ukraine, with 256 IPv4 addresses, 0 IPv6 addresses, 185.144.99.0/24, upstream AS209863 PROLVL Ltd., and no downstreams.
• ipgeolocation.io - Reports AS210749 as ULTRAPACK / Ultra Pak LLC, registry RIPE, one IPv4 route, 0 IPv6 routes, allocation date 2021-09-17, route 185.144.99.0/24, and RIPE WHOIS-derived import/export references to AS209863 and AS205946.
• radar.cloudflare.com - Indexes AS210749 as ULTRAPACK and associates it with Ukraine while providing public routing and traffic telemetry views for the ASN.
• radar.cloudflare.com - Provides a public routing view for AS210749, including Cloudflare Radar panels for announced IP space, prefixes, connectivity, and BGP announcements.
• Registry RDAP / WHOIS record - Mirrors RIPE-derived AS210749 WHOIS fields including aut-num AS210749, as-name ULTRAPACK, org ORG-UL240-RIPE, sponsoring-org ORG-Vs35-RIPE, status ASSIGNED, and RIPE source attribution.