AS336

AS336 is a legacy autonomous system number registered under ARIN to the United States Department of Defense (DoD) and administered by the Defense Information Systems Agency (DISA) through the DoD Network Information Center (DoD NIC), operated from DISA-Columbus in Whitehall/Columbus, Ohio. It is not a standalone allocation: ARIN RDAP for autnum/336 resolves to the bulk block object DNIC-ASBLK-00306-00371, which spans AS306 through AS371 and groups dozens of DoD ASNs under a single registrant entity (org handle USDDD). The block's top-level registration event is dated 1989-06-30, placing this allocation among the early Internet-era DoD number assignments; the record was last changed 2025-09-12. Operationally AS336 is a stub: it is single-homed to AS306 (also DoD), carries no transit customers, has no PeeringDB entry, and shows a single observed BGP neighbour. RIPEstat records 25 IPv4 prefixes — drawn from legacy Class A DoD space in the 55.28.x.x and 55.75.x.x ranges, roughly a /16-aggregate footprint of around 131,000 addresses — plus one IPv6 prefix, 2608:12a:3300::/40. Routing for these prefixes was first observed in 2008-08-14 and was visible to nearly all RIS peers (324/326 v4, 324/324 v6) through 2026-06-26, although the as-overview snapshot at query time showed announced=false, consistent with intermittent or recently-paused announcement rather than a withdrawn allocation. No notable public abuse signal was found as of 2026-06-28: AS336 is absent from Spamhaus blocklists, CleanTalk (0% spam rate), community ASN-DROP lists, Feodo Tracker, and NANOG incident archives; the few AbuseIPDB reports against IPs in DoD space are stale with 0% active confidence. A standing interpretive caution applies to all DoD address blocks — third parties have historically misidentified DoD ranges as suspicious because ISPs have squatted on unrouted DoD space for internal infrastructure — but this is not evidence of activity originating from AS336.

Operator

United States Department of Defense (DoD); administered by DISA (Defense Information Systems Agency) via the DoD Network Information Center; ARIN registrant handle USDDD [Confirmed] — rdap.arin.net/registry/autnum/336, ipinfo.io/AS336, bgp.tools/as/336

Country / RIR

US, ARIN [Confirmed] — rdap.arin.net/registry/autnum/336, RIPEstat abuse-contact-finder (authoritative_rir: arin)

Allocated

1989-06-30 (ARIN registry date — top-level autnum registration event for block DNIC-ASBLK-00306-00371; an RIR first-party fact, NOT an IEEE date); last changed 2025-09-12 [Confirmed] — rdap.arin.net/registry/autnum/336 top-level events

Org status

U.S. federal government entity. DISA is a DoD combat support agency (established as Defense Communications Agency 1960; renamed DISA 1991; HQ Fort George G. Meade, Maryland) operating the DNIC hostmaster/NOC for the block; parent is the U.S. Department of Defense

[Confirmed] — en.wikipedia.org/wiki/Defense_Information_Systems_Agency, usa.gov/agencies/defense-information-systems-agency

Contacts

NOC/tech/abuse disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil; phone +1-844-347-2457 ext 2 (Network DoD, MIL-HSTMST-ARIN); registrations disa.columbus.ns.mbx.arin-registrations@mail.mil (REGIS10-ARIN); registrant 3990 E. Broad Street, Columbus, OH 43218; NOC DISA-Columbus, 300 North James Road, Whitehall, OH 43213

[Confirmed] — rdap.arin.net/registry/autnum/336, stat.ripe.net abuse-contact-finder ?resource=336

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-06-28 — not in Spamhaus, CleanTalk (0% spam rate), community ASN blocklists, Feodo Tracker, or NANOG archives; stale AbuseIPDB reports on DoD IPs carry 0% active confidence. Caution: DoD ranges are frequently misclassified by third-party tools due to ISP squatting on unrouted DoD space, not malicious DoD activity [Likely] — cleantalk.org/blacklists/asn336, spamhaus.org/drop/asndrop.txt, blog.erratasec.com/2013/12/dod-address-space-its-not-conspiracy.html

Network & routing

Network type

stub AS — single-homed, provides no transit; U.S. federal government / military network within the DoD NIC block [Confirmed] — ipinfo.io/AS336, whatismyip.com/asn/AS336/, bgp.tools/as/336

Size

25 IPv4 prefixes (legacy DoD 55.28.x.x / 55.75.x.x space, ~/16-aggregate footprint, ~131,072 addresses) + 1 IPv6 prefix 2608:12a:3300::/40 [Confirmed] — stat.ripe.net announced-prefixes ?resource=AS336, bgp.tools/as/336

Routing/peering

single observed neighbour; sole upstream/peer is AS306 (also DoD); first seen 2008-08-14, last seen 2026-06-26; RIS visibility 324/326 (v4) and 324/324 (v6) when announced; as-overview snapshot at 2026-06-28T08:00 showed announced=false; no PeeringDB entry for AS336

[Confirmed] — stat.ripe.net routing-status / as-overview ?resource=AS336, ipinfo.io/AS336

RPKI

Unknown — RPKI validation requires a per-prefix query that was not run; no ROA status confirmed from available data [Unknown]

AS rank / customer cone

Unknown — CAIDA AS Rank and customer-cone data not available in fetched sources [Unknown]

Notable usage

one of dozens of ASNs in the DoD NIC-managed block AS306–371; routing administered from DISA-Columbus (300 North James Road, Whitehall, OH 43213; 3990 E. Broad Street, Columbus, OH 43218). Part of DISN (Defense Information System Network) infrastructure

[Confirmed] — rdap.arin.net/registry/autnum/336, bgp.tools/as/336

Related ASNs

AS306 (United States Department of Defense — sole observed peer/upstream of AS336); block spans AS306–AS371 [Confirmed] — rdap.arin.net/registry/autnum/336, ipinfo.io/AS336

Block name

DNIC-ASBLK-00306-00371 (covers AS306–AS371; ARIN returns this block object for any AS in range) [Confirmed] — rdap.arin.net/registry/autnum/336

Community corroboration

NANOG mailing list archives searched for AS336 mentions; no operator incidents, outages, or public discussion found specific to AS336 (2021–2026). Reddit networking communities showed no indexed discussion. General DoD routing discussions exist (e.g., 2021 NANOG threads on DoD IP space and AS8003/GRSCORP), but AS336 itself remains operationally quiet and lacks community reputation signal

[Confirmed abstention: no fabrication] — seclists.org/nanog/, kentik.com/blog/the-mystery-of-as8003

Analyst note

Encountered as a single-homed DoD stub ASN resolving through the bulk block record DNIC-ASBLK-00306-00371 (AS306–AS371) rather than a discrete AS336 object. allocated_date 1989-06-30 read from the top-level autnum registration event; entity/POC-level RDAP dates (1993-05-26, 2009-06-24, 2007-01-12) are contact/org-record dates and were correctly excluded as the allocation date. Sole observed peer is AS306 (also DoD). Clean, minimal-profile government network. Abstained from inventing AS-rank, cone, or RPKI figures — those stay null/unknown.