Autonomous system detail

AS309

Not announced

Operated by DNIC-ASBLK-00306-00371 - United States Department of Defense (DoD).

Summary

// analyst note
Dormant DoD block-member ASN. RDAP resolves to the United States Department of Defense via block DNIC-ASBLK-00306-00371; ARIN models per-AS records as a block (per-AS309 RDAP 404, block record starts at AS306). No global-routing announcements since 2023-01-23. CAIDA data unavailable (timeout); RPKI not assessable.
// security note
NEUTRAL/DATED: no notable public abuse signal found as of 2026-06-28; absent from ipapi.is top-1000 most-abusive ASN list (2026-06-23); no Spamhaus/AbuseIPDB/NANOG/BGP-hijack records surfaced.
IPv4 prefixes
0
~0 addresses
IPv6 prefixes
0
Peer networks
0
0 up · 0 down
IANA block
1-1876
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: High

AS309 is a legacy autonomous system number registered under ARIN to the United States Department of Defense (DoD) and administered through the Defense Information Systems Agency's DoD Network Information Center (DNIC) in Columbus, Ohio. It is not an individually-allocated ASN but one member of the contiguous block DNIC-ASBLK-00306-00371 (AS306 through AS371), all held by the DoD under ARIN org handle USDDD. The key triage point for AS309 is that it is dormant in the global routing table: RIPEstat reports announced=false, with zero IPv4 and zero IPv6 prefixes currently visible across the RIS peer fleet (0 of 323 v4 peers, 0 of 321 v6 peers as of 2026-06-27). It historically carried a small number of prefixes — first seen 2005-12-29 (193.19.246.0/24) and last seen 2023-01-23 (214.29.237.0/24) — but those announcements have since been withdrawn, so the ASN has shown no BGP activity for over three years. The 214.x.x.x space falls inside the DoD-reserved range and is bogon from the public-internet perspective. CAIDA AS Rank, customer-cone, and upstream data could not be retrieved (the CAIDA endpoint timed out), and RPKI posture is not assessable because there are no active originations to validate. The ASN's effective dormancy means it presents minimal current routing-attack surface, and no notable public abuse signal was found as of 2026-06-28 — not on the ipapi.is top-1000 most-abusive ASN list, nor in any indexed Spamhaus, AbuseIPDB, or NANOG record consulted. Several reputation services (Talos, CINS, gated Spamhaus/AbuseIPDB lookups) returned 403 and could not be confirmed either way, so the clean read is tagged accordingly.

Operator
United States Department of Defense (DoD), administered by DISA's DoD Network Information Center (DNIC), Columbus, OH; ARIN org handle USDDD [Confirmed] — ARIN RDAP autnum/309 registrant entity, bgp.he.net/AS309
Country / RIR
US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin), ARIN RDAP
Allocated
1989-06-30 (ARIN registry date for block DNIC-ASBLK-00306-00371, read from the autnum TOP-LEVEL events[] registration action — a first-party RIR fact, NOT an IEEE date); last changed 2025-09-12 [Confirmed] — ARIN RDAP autnum/309 top-level events
IANA block
AS 1–1876, assigned by ARIN (IANA 16-bit Autonomous System Numbers Registry) [Confirmed] — RIPEstat as-overview
Org status
active U.S. federal government combat-support agency (DISA, established 1991-06-25 from the Defense Communications Agency); ARIN registration active; org address 3990 E. Broad Street, Columbus, OH 43218 [Confirmed for ARIN status/address; Likely for DISA history] — ARIN RDAP, en.wikipedia.org/wiki/Defense_Information_Systems_Agency
Contacts
disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil (Network DoD / DISA-Columbus, 300 North James Road, Whitehall OH 43213); registrations mailbox disa.columbus.ns.mbx.arin-registrations@mail.mil; tel +1-844-347-2457 ext.2 [Confirmed] — ARIN RDAP entity MIL-HSTMST-ARIN, RIPEstat abuse-contact-finder
Website
https://www.disa.mil/ (parent-agency site; no AS309-specific public page exists) [Confirmed] — disa.mil

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-06-28 — not on the ipapi.is top-1000 most-abusive ASN list (current 2026-06-23), and no Spamhaus/AbuseIPDB/NANOG/BGP-hijack records surfaced. Talos, CINS, and direct Spamhaus/AbuseIPDB lookups returned 403 (gated) and are unconfirmed. Dormant routing posture means minimal current attack surface

[Likely] — ipapi.is/most-abusive-asn.html, bgp.he.net/AS309, seclists.org/nanog

Network & routing

Network type
U.S. Federal Government / Military — internal DoD network allocation; effectively dormant [Confirmed] — bgp.he.net/AS309, bgp.tools/as/309, networksdb.io/autonomous-system/AS309
Size
dormant — 0 IPv4 prefixes / 0 IPv4 addresses and 0 IPv6 prefixes currently announced; 0 of 323 v4 RIS peers and 0 of 321 v6 RIS peers see it [Confirmed] — RIPEstat routing-status / as-overview (2026-06-27)
Routing/peering
NOT announced (announced=false); 0 observed neighbours; historical only — first seen 2005-12-29 (193.19.246.0/24), last seen 2023-01-23 (214.29.237.0/24). One historically-documented peer was AS3544 (also DoD), indicating a closed, internal-only arrangement; no public peering policy exists [Confirmed for routing-status; Likely for the closed-peering inference] — RIPEstat routing-status, bgp.he.net/AS309, bgp.tools/as/309
RPKI
not assessable — AS309 announces no prefixes, so there are no ROAs to validate; RIPEstat rpki-validation skipped (no active prefix supplied) [Confirmed] — RIPEstat rpki-validation
AS rank / customer cone
Unknown — CAIDA AS Rank endpoint timed out; with no current announcements, rank/cone are not meaningful [Unknown] — CAIDA fetch error (timeout)
Notable usage
AS309 is a dormant/internal allocation within the DoD's 306–371 block, administered by DISA's DoD Network Information Center (DNIC) in Columbus, OH (contact disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil). DISA operates the Defense Information Systems Network (DISN), NIPRNet, SIPRNet, and JWICS on behalf of the U.S. military [Confirmed for DNIC admin via RDAP; Likely for the broader DISA mission summary] — ARIN RDAP, en.wikipedia.org/wiki/Defense_Information_Systems_Agency
Block
AS309 is part of DNIC-ASBLK-00306-00371 (AS306–AS371), all assigned to the DoD; ARIN models this as a block, so a per-AS309 RDAP record returns 404 and the block record (startAutnum 306) answers [Confirmed] — ARIN RDAP autnum/309
Analyst note
Encountered as a dormant DoD block-member ASN. WHOIS/RDAP resolves to the United States Department of Defense via the DNIC-ASBLK-00306-00371 block; live routing is absent (no announcements since Jan 2023). Clean, inactive, government-held ASN.
[ 02 ] — Announced prefixes

What this network routes.

0 prefixes total · RIPEstat data · cached, not real-time
// IPv4 prefixes0
No IPv4 prefixes announced.
// IPv6 prefixes0
No IPv6 prefixes announced.
[ 03 ] — Notable peers & upstreams

Who it talks to.

0 observed neighbours
Neighbour data unavailable from public BGP collectors.