Autonomous system detail

AS197

Announced

Operated by RAYTHEON-AS-2 - Raytheon Company.

Summary

// analyst note
Dormant/legacy ASN. WHOIS resolves to RTX Corporation, but the ASN announces nothing. All routing sources (RIPEstat, CAIDA, bgp.he.net, bgp.tools) agree on zero announcements, zero peers, zero cone. ARIN org handle RTX re-registered 2025-03-18 (rebrand); ARIN admin partly via Brander Group broker.
// security note
DATED 2026-06-19: AS197 absent from Spamhaus ASN-DROP; no hijack/leak/DDoS/spam/phishing attributable to the ASN.
IPv4 prefixes
1
~256 addresses
IPv6 prefixes
0
Peer networks
1
1 up · 0 down
IANA block
1-1876
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: High

AS197 is a legacy autonomous system number registered under ARIN to RTX Corporation, the US aerospace-and-defense conglomerate formerly known as Raytheon Technologies and, at the time this ASN was assigned, as Raytheon Company. The registry name is RAYTHEON-AS-2 and the ARIN autnum top-level registration event is dated 2001-04-17, last changed 2026-06-05. The defining triage fact for AS197 is that it is effectively dormant in the public Internet today: every routing source consulted (RIPEstat, CAIDA AS Rank, bgp.he.net, bgp.tools) agrees it announces zero IPv4 and zero IPv6 prefixes, has zero visible BGP peers, zero upstreams, zero customers, and no IXP memberships. Its CAIDA AS rank of 79,459 sits near the bottom of the global ranking and its customer cone is a singleton (the ASN itself, 0 prefixes, 0 addresses). RTX nonetheless holds large direct ARIN IPv4 allocations (for example 147.16.0.0/14 and 138.125.0.0/16) that are not currently originated under any ASN. Two of those dark blocks — 147.16.0.0/14 (SBL302620) and 138.125.0.0/16 (SBL312494) — appear in the Spamhaus DROP list as of 2026-06-12, a signal typically applied to unrouted RIR space at risk of hijack rather than to active misuse; the specific listing reasons could not be retrieved because the SBL detail pages are authentication-gated. AS197 itself is absent from Spamhaus ASN-DROP, and no BGP hijack, route leak, DDoS, spam, or phishing activity is attributable to it in any searched source. RPKI posture is not assessable because there are no active originations and therefore no ROAs.

Operator
RTX Corporation (formerly Raytheon Technologies; Raytheon Company at time of registration; ARIN org handle RTX) [Confirmed] — ARIN RDAP autnum/197, en.wikipedia.org/wiki/RTX_Corporation
Country / RIR
US, ARIN [Confirmed] — ARIN RDAP; CAIDA country ISO US; RIPEstat
Allocated
2001-04-17 (ARIN autnum top-level registration event, a first-party RIR fact; NOT an IEEE date); last changed 2026-06-05 [Confirmed] — ARIN RDAP autnum top-level events (corroborated by angles A2 and A3)
Org status
public company (NYSE: RTX); multinational aerospace/defense conglomerate (Collins Aerospace, Pratt & Whitney, Raytheon); formed 2020 from the UTC–Raytheon merger, rebranded to RTX in July 2023 [Confirmed] — en.wikipedia.org/wiki/RTX_Corporation
Contacts
abuse/technical Kevin Daglieri (DAGLI9-ARIN); Shilo Knapp (KNAPP139-ARIN) — both on the rtx.com domain, with individual mailboxes in the ARIN RDAP record; ARIN admin via Brander Group (GROUP72-ARIN / LAB21-ARIN, an IP-resource management firm); HQ 1000 Wilson Blvd., Arlington, VA 22209
[Confirmed] — ARIN RDAP autnum/197, RIPEstat abuse-contact-finder

Security/abuse context (DATED)

AS197 absent from Spamhaus ASN-DROP; no BGP hijack, route leak, DDoS, spam, or phishing attributable to it. Two RTX dark blocks appear in Spamhaus DROP as of 2026-06-12 — 147.16.0.0/14 (SBL302620) and 138.125.0.0/16 (SBL312494); 147.16.0.0/14 also listed in Emerging Threats "Spamhaus DROP Nets". Listing reasons not independently verifiable (SBL pages HTTP 403) [Confirmed for listings; Unknown for reasons] — spamhaus.org/drop/drop.txt, rules.emergingthreats.net, spamhaus.org/drop/asndrop.json

Network & routing

Network type
corporate/enterprise network (defense/aerospace); legacy and currently inactive in public BGP [Confirmed] — bgp.he.net/AS197, ipinfo.io/AS197
Size
dormant — 0 IPv4 prefixes / 0 IPv4 addresses and 0 IPv6 prefixes; customer cone = 1 ASN (itself), 0 prefixes, 0 addresses [Confirmed] — RIPEstat routing-status / CAIDA AS Rank / bgp.he.net / bgp.tools (2026-06)
Routing/peering
NOT announced — 0 RIS peers seeing it (0/327 v4, 0/323 v6); CAIDA degree total 0 (customer 0, peer 0, provider 0); no upstreams or peers visible in any source [Confirmed]. No public peering policy document found [Unknown for policy]
RPKI
not assessable — AS197 announces no prefixes, so there are no ROAs to validate [Unknown] — RIPEstat (validation skipped, no prefix to supply)
Notable usage
RTX's BBN Technologies division has a long internet/tactical-networking legacy tracing to ARPANET; AS197 itself carries no public routing traffic [Confirmed for BBN legacy] — rtx.com BBN networking page, en.wikipedia.org/wiki/RTX_Corporation
ASN name
RAYTHEON-AS-2 [Confirmed] — ARIN RDAP autnum/197
Held IPv4 blocks (not routed under any ASN)
147.16.0.0/14 (RAYTHEON-NET-147), 138.125.0.0/16 (RAY-ED), plus others (e.g. 192.27.0.0/16 ranges, 138.126.0.0/16, 140.157.0.0/18) [Confirmed] — ARIN RDAP ip/147.16.0.0, bgp.tools/as/197
Corporate security note (NOT AS197 abuse)
RTX paid $8.4M (May 2025) to settle DOJ False Claims Act NIST SP 800-171 allegations, and confirmed a Sept 2025 ransomware attack on its MUSE airport-services software — neither relates to AS197 routing [Confirmed] — justice.gov press release, securityweek.com
Analyst note
dormant legacy ASN under a major defense contractor; WHOIS resolves to RTX, but the ASN announces nothing. The org entity handle RTX was re-registered 2025-03-18, reflecting the corporate rebrand; ARIN administration is partly handled by a third-party broker (Brander Group).
[ 02 ] — Announced prefixes

What this network routes.

1 prefixes total · RIPEstat data · cached, not real-time
// IPv4 prefixes1
  1. 138.127.74.0/24/24
// IPv6 prefixes0
No IPv6 prefixes announced.
[ 03 ] — Notable peers & upstreams

Who it talks to.

1 observed neighbour
// Notable connectionsTop 1 of 1
ASNOperatorRole
AS1341 ROCKWELLCOLLINS-AS - Rockwell Collins, Inc. upstream
Neighbours observed via public BGP collectors; not a complete peering list.