AS309
Operated by DNIC-ASBLK-00306-00371 - United States Department of Defense (DoD).
Summary
- // analyst note
- Dormant DoD block-member ASN. RDAP resolves to the United States Department of Defense via block DNIC-ASBLK-00306-00371; ARIN models per-AS records as a block (per-AS309 RDAP 404, block record starts at AS306). No global-routing announcements since 2023-01-23. CAIDA data unavailable (timeout); RPKI not assessable.
- // security note
- NEUTRAL/DATED: no notable public abuse signal found as of 2026-06-28; absent from ipapi.is top-1000 most-abusive ASN list (2026-06-23); no Spamhaus/AbuseIPDB/NANOG/BGP-hijack records surfaced.
About this ASN.
AS309 is a legacy autonomous system number registered under ARIN to the United States Department of Defense (DoD) and administered through the Defense Information Systems Agency's DoD Network Information Center (DNIC) in Columbus, Ohio. It is not an individually-allocated ASN but one member of the contiguous block DNIC-ASBLK-00306-00371 (AS306 through AS371), all held by the DoD under ARIN org handle USDDD. The key triage point for AS309 is that it is dormant in the global routing table: RIPEstat reports announced=false, with zero IPv4 and zero IPv6 prefixes currently visible across the RIS peer fleet (0 of 323 v4 peers, 0 of 321 v6 peers as of 2026-06-27). It historically carried a small number of prefixes — first seen 2005-12-29 (193.19.246.0/24) and last seen 2023-01-23 (214.29.237.0/24) — but those announcements have since been withdrawn, so the ASN has shown no BGP activity for over three years. The 214.x.x.x space falls inside the DoD-reserved range and is bogon from the public-internet perspective. CAIDA AS Rank, customer-cone, and upstream data could not be retrieved (the CAIDA endpoint timed out), and RPKI posture is not assessable because there are no active originations to validate. The ASN's effective dormancy means it presents minimal current routing-attack surface, and no notable public abuse signal was found as of 2026-06-28 — not on the ipapi.is top-1000 most-abusive ASN list, nor in any indexed Spamhaus, AbuseIPDB, or NANOG record consulted. Several reputation services (Talos, CINS, gated Spamhaus/AbuseIPDB lookups) returned 403 and could not be confirmed either way, so the clean read is tagged accordingly.
- Operator
- United States Department of Defense (DoD), administered by DISA's DoD Network Information Center (DNIC), Columbus, OH; ARIN org handle USDDD [Confirmed] — ARIN RDAP autnum/309 registrant entity, bgp.he.net/AS309
- Country / RIR
- US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin), ARIN RDAP
- Allocated
- 1989-06-30 (ARIN registry date for block DNIC-ASBLK-00306-00371, read from the autnum TOP-LEVEL events[] registration action — a first-party RIR fact, NOT an IEEE date); last changed 2025-09-12 [Confirmed] — ARIN RDAP autnum/309 top-level events
- IANA block
- AS 1–1876, assigned by ARIN (IANA 16-bit Autonomous System Numbers Registry) [Confirmed] — RIPEstat as-overview
- Org status
- active U.S. federal government combat-support agency (DISA, established 1991-06-25 from the Defense Communications Agency); ARIN registration active; org address 3990 E. Broad Street, Columbus, OH 43218 [Confirmed for ARIN status/address; Likely for DISA history] — ARIN RDAP, en.wikipedia.org/wiki/Defense_Information_Systems_Agency
- Contacts
- disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil (Network DoD / DISA-Columbus, 300 North James Road, Whitehall OH 43213); registrations mailbox disa.columbus.ns.mbx.arin-registrations@mail.mil; tel +1-844-347-2457 ext.2 [Confirmed] — ARIN RDAP entity MIL-HSTMST-ARIN, RIPEstat abuse-contact-finder
- Website
- https://www.disa.mil/ (parent-agency site; no AS309-specific public page exists) [Confirmed] — disa.mil
Security/abuse context (NEUTRAL, DATED)
no notable public abuse signal found as of 2026-06-28 — not on the ipapi.is top-1000 most-abusive ASN list (current 2026-06-23), and no Spamhaus/AbuseIPDB/NANOG/BGP-hijack records surfaced. Talos, CINS, and direct Spamhaus/AbuseIPDB lookups returned 403 (gated) and are unconfirmed. Dormant routing posture means minimal current attack surface
Network & routing
- Network type
- U.S. Federal Government / Military — internal DoD network allocation; effectively dormant [Confirmed] — bgp.he.net/AS309, bgp.tools/as/309, networksdb.io/autonomous-system/AS309
- Size
- dormant — 0 IPv4 prefixes / 0 IPv4 addresses and 0 IPv6 prefixes currently announced; 0 of 323 v4 RIS peers and 0 of 321 v6 RIS peers see it [Confirmed] — RIPEstat routing-status / as-overview (2026-06-27)
- Routing/peering
- NOT announced (announced=false); 0 observed neighbours; historical only — first seen 2005-12-29 (193.19.246.0/24), last seen 2023-01-23 (214.29.237.0/24). One historically-documented peer was AS3544 (also DoD), indicating a closed, internal-only arrangement; no public peering policy exists [Confirmed for routing-status; Likely for the closed-peering inference] — RIPEstat routing-status, bgp.he.net/AS309, bgp.tools/as/309
- RPKI
- not assessable — AS309 announces no prefixes, so there are no ROAs to validate; RIPEstat rpki-validation skipped (no active prefix supplied) [Confirmed] — RIPEstat rpki-validation
- AS rank / customer cone
- Unknown — CAIDA AS Rank endpoint timed out; with no current announcements, rank/cone are not meaningful [Unknown] — CAIDA fetch error (timeout)
- Notable usage
- AS309 is a dormant/internal allocation within the DoD's 306–371 block, administered by DISA's DoD Network Information Center (DNIC) in Columbus, OH (contact disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil). DISA operates the Defense Information Systems Network (DISN), NIPRNet, SIPRNet, and JWICS on behalf of the U.S. military [Confirmed for DNIC admin via RDAP; Likely for the broader DISA mission summary] — ARIN RDAP, en.wikipedia.org/wiki/Defense_Information_Systems_Agency
- Block
- AS309 is part of DNIC-ASBLK-00306-00371 (AS306–AS371), all assigned to the DoD; ARIN models this as a block, so a per-AS309 RDAP record returns 404 and the block record (startAutnum 306) answers [Confirmed] — ARIN RDAP autnum/309
- Analyst note
- Encountered as a dormant DoD block-member ASN. WHOIS/RDAP resolves to the United States Department of Defense via the DNIC-ASBLK-00306-00371 block; live routing is absent (no announcements since Jan 2023). Clean, inactive, government-held ASN.