AS354

AS354 is a legacy autonomous system number registered under ARIN to the United States Department of Defense (DoD) and administered by the Defense Information Systems Agency (DISA) through the DoD Network Information Center (DNIC) in Columbus, Ohio. It is not an independently registered ASN: ARIN's RDAP autnum object for 354 returns the block record DNIC-ASBLK-00306-00371, a contiguous range of AS numbers (AS306–AS371) allocated to the DoD as a single registry object. The registrant entity is USDDD (United States Department of Defense), with technical and abuse roles held by DISA-Columbus (MIL-HSTMST-ARIN) and registration handled by REGIS10-ARIN — both reachable at +1-844-347-2457 and at mail.mil addresses. The triage point for AS354 is that it is effectively dormant for IPv4 and only intermittently active for IPv6: RIPEstat reports zero IPv4 prefixes announced (the last IPv4 origination, 55.44.0.0/16, was seen in 2016), while two IPv6 /40 blocks (2609:12b:5000::/40 and 2609:e000:5000::/40) were announced through mid-June 2026 and then withdrew by 2026-06-26, leaving the AS not announced at the 2026-06-28 query time. Only one BGP neighbour was observed, and that single peer is AS306 — another ASN inside the same DoD block — so AS354 functions as a stub within internal U.S. military routing infrastructure rather than a transit or commercial network. No public abuse, hijack, leak, or threat-intelligence signal was found for AS354 across community blocklists, NANOG archives, and multiple threat feeds as of 2026-06-28; a Hurricane Electric "announces bogons" flag is shared across several DoD ASNs in the block and reads as a classification artifact, not malicious activity. AS rank, customer cone, upstream identity, and RPKI posture could not be determined from the registry and routing sources consulted and are recorded as Unknown.

Operator

United States Department of Defense (DoD), administered by DISA / DoD Network Information Center (DNIC), Columbus, OH (ARIN registrant handle USDDD) [Confirmed] — ARIN RDAP autnum/354, usa.gov DISA agency page

Country / RIR

US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin), ARIN RDAP autnum/354

Allocated

1989-06-30 (ARIN RDAP autnum top-level registration event for the DNIC-ASBLK-00306-00371 block covering AS354; this is the first-party RIR registry date, not an IEEE date); last changed 2025-09-12 [Confirmed] — ARIN RDAP autnum top-level events

Org status

U.S. federal government agency — DoD combat-support administration via DISA; not a commercial or non-profit entity [Confirmed] — usa.gov DISA agency page, ARIN RDAP autnum/354

Contacts

disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil and disa.columbus.ns.mbx.arin-registrations@mail.mil; +1-844-347-2457 ext. 2; DISA-Columbus, 300 North James Road, Whitehall, OH 43213 (registrant org address: 3990 E. Broad Street, Columbus, OH 43218)

[Confirmed] — ARIN RDAP autnum/354, RIPEstat abuse-contact-finder

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-06-28 — absent from bountyyfi/bad-asn-list, AbuseIPDB (404), Spamhaus, abuse.ch/ThreatFox, Silent Push, and NANOG archives; the HE "announces bogons" flag is shared across multiple DoD ASNs in the block and reads as a data-classification artifact, not malicious activity [Confirmed for the null finding; Likely for the bogon-flag interpretation] — github.com/bountyyfi/bad-asn-list, bgp.he.net/AS354, threatfox.abuse.ch

Network & routing

Network type

government / military stub AS within DoD block DNIC-ASBLK-00306-00371 (AS306–AS371); single-homed, provides no transit; the only observed peer is AS306 (also DoD) [Confirmed] — ARIN RDAP autnum/354, bgp.he.net/AS354, RIPEstat routing-status

Size

dormant for IPv4 — 0 IPv4 prefixes / 0 IPv4 addresses announced (last IPv4 seen 55.44.0.0/16 on 2016-10-15); two IPv6 /40 prefixes (2609:12b:5000::/40, 2609:e000:5000::/40) intermittently announced in June 2026, withdrawn by 2026-06-26

[Confirmed] — RIPEstat announced-prefixes / routing-status (2026-06)

Routing/peering

not announced as of 2026-06-28 (as-overview announced=false); IPv4 visibility 0/326 RIS peers, IPv6 visibility 324/324 RIS peers when the v6 prefixes were live; 1 observed BGP neighbour (AS306) [Confirmed] — RIPEstat as-overview / routing-status. No PeeringDB record and no published peering policy for AS354; DoD interconnects only via CIO-approved controlled gateways, not open peering

[Likely] — peeringdb.com (404), DISN CPG

RPKI

not assessable from sources consulted — RIPEstat rpki-validation was skipped (no prefix supplied) and no ROA data was returned; HE shows no RPKI ROAs for the announced prefixes [Unknown] — RIPEstat rpki-validation (skipped), bgp.he.net/AS354

Notable usage

one of the ASNs (AS306–AS371) inside the DoD DNIC block used for internal U.S. military network infrastructure; currently announces only two IPv6 /40 blocks and no IPv4 [Confirmed] — bgp.he.net/AS354, ipinfo.io/AS354

Related ASNs

AS306–AS371 (the full DNIC-ASBLK-00306-00371 DoD block); AS306 is the single observed BGP peer of AS354 [Confirmed] — ARIN RDAP autnum/354, RIPEstat routing-status

Analyst note

Encountered as a block-registered DoD ASN — RDAP returns the DNIC-ASBLK-00306-00371 block object rather than a per-ASN record. IPv4-dormant since 2016; only intermittently IPv6-active; stub with one DoD-internal peer. Clean, no abuse signal. AS rank / customer cone / upstream identity / RPKI not available from the sources consulted.