AS367

AS367 is a legacy autonomous system number registered under ARIN to the United States Department of Defense (DoD). It is not issued its own per-ASN RDAP object; instead ARIN publishes a single autnum object (handle AS306, name DNIC-ASBLK-00306-00371) covering the contiguous range AS306–AS371, so any lookup within that range returns the same block-level record. The registrant is the DoD Network Information Center (DNIC), administered day to day by the Defense Information Systems Agency (DISA) out of DISA-Columbus (Whitehall/Columbus, Ohio), with abuse and NOC contact at disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil. The block's ARIN RDAP top-level registration event is dated 1989-06-30, with a last-changed metadata event on 2025-09-12; these are the authoritative first-party registry dates for AS367 (the entity-nested contact records dated 1993-05-26 and 2009-06-24 are administrative decoys, not the allocation event). The parent autnum status is active and AS367 is announced. Routing sources disagree on scale: RIPEstat's live pull (2026-07-01) reports roughly 1,500 IPv4 and 44 IPv6 prefixes, while bgp.he.net's public page reports about 2,497 IPv4 and 36 IPv6 prefixes — the gap likely reflects different snapshot windows, and both figures are reported rather than one being chosen. The address footprint is large, including several /16s (e.g. 147.239.0.0/16), consistent with a substantial DoD network numbering resource rather than a commercial transit or content operator. AS rank, customer cone, specific upstream/peer ASNs, and per-prefix RPKI posture were not independently verified in this pass and are left Unknown rather than fabricated (aggregator snippets suggest on the order of a few upstreams and low-double-digit peers, but the pages were not opened). No notable public abuse signal was found as of 2026-07-01 — nothing AS367-specific in Spamhaus DROP/ASN-DROP, AbuseIPDB, abuse.ch, or NANOG archives. A distinct sibling ASN in the same block, AS335, carries AbuseIPDB reports and must not be conflated with AS367. A low-authority CleanTalk spam-stats page exists for one /22 within the block, and a search-summary claim that AS367 "announces bogons" could not be verified; both are treated as weak/Unknown signals.

Operator

United States Department of Defense (DoD); registrant handle USDDD, administered by the DoD Network Information Center (DNIC) / Defense Information Systems Agency (DISA) from DISA-Columbus, Whitehall/Columbus, OH [Confirmed] — ARIN RDAP autnum (rdap.arin.net/registry/autnum/367), bgp.he.net/AS367

Country / RIR

US, ARIN [Confirmed] — ARIN RDAP; RIPEstat abuse-contact-finder (authoritative_rir: arin)

Allocated

1989-06-30 (ARIN RDAP autnum TOP-LEVEL registration event for block DNIC-ASBLK-00306-00371; a first-party RIR date, NOT an IEEE/OUI artifact); last changed 2025-09-12 [Confirmed] — ARIN RDAP autnum top-level events (nested MIL-HSTMST-ARIN 1993-05-26 / REGIS10-ARIN 2009-06-24 are contact-record decoys, not the allocation event)

Org status

active — ARIN RDAP reports status "active" for the parent autnum block (handle AS306, DNIC-ASBLK-00306-00371) containing AS367; DISA is an active U.S. federal combat-support agency [Confirmed] — ARIN RDAP autnum

Contacts

abuse/NOC disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil (MIL-HSTMST-ARIN); registrations disa.columbus.ns.mbx.arin-registrations@mail.mil (REGIS10-ARIN); phone +1-844-347-2457 ext2; DISA-Columbus, 300 North James Road, Whitehall, OH 43213; registrant 3990 E. Broad Street, Columbus, OH 43218

[Confirmed] — ARIN RDAP autnum; RIPEstat abuse-contact-finder

IANA reference

(blank — no IANA RFC reference applies to an ASN allocation record) [Unknown]

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-07-01 — nothing AS367-specific in Spamhaus DROP/ASN-DROP, AbuseIPDB, abuse.ch, or NANOG archives; a low-authority CleanTalk spam-stats page exists for one /22; the "announces bogons" claim is unverified/Unknown; do NOT conflate with sibling AS335 (same DNIC block, has AbuseIPDB reports)

Network & routing

Network type

U.S. federal government / military network numbering resource (Defense Information Systems Network / DISN context); no operator-published document maps AS367 itself to a specific network-type label with a citable URL [Unknown for AS367-specific label; Confirmed for DoD/DISN context] — ARIN RDAP autnum, disa.mil

Size

contested across sources — RIPEstat (live pull, 2026-07-01) ~1,500 IPv4 prefixes / 44 IPv6; bgp.he.net ~2,497 IPv4 / 36 IPv6; range reported, not resolved (likely differing snapshot windows) [Likely] — bgp.he.net/AS367, bgp.tools/as/367

Routing/peering

announced=true per RIPEstat as-overview; aggregator snippets indicate on the order of a few upstreams and ~14 peers (pages not opened, specific ASNs Unknown); no public PeeringDB record; external DoD connectivity via the DISA DISN Connection Process, not an ISP-style peering policy

[Likely for counts; Unknown for peer ASNs] — bgp.he.net/AS367, bgp.tools/as/367

RPKI

not assessed — RPKI validity is per-prefix; no single prefix was validated in this pass, so an ASN-level verdict is Unknown [Unknown] — RIPEstat rpki-validation skipped (no prefix supplied)

Notable usage

one of several ASNs under DoD/DISA-administered numbering resources (block AS306–AS371); third-party BGP data is consistent with large U.S. government address space (several /16s, e.g. 147.239.0.0/16) rather than commercial transit or content; no operator-published usage description found

[Likely] — bgp.he.net/AS367, bgpview.io/asn/367

Related ASNs

AS306 (lead ASN of the same DNIC block; block spans AS306–AS371); AS335 (distinct sibling ASN in the same block, keep separate — it carries AbuseIPDB reports, AS367 does not) [Confirmed for AS306; Confirmed for AS335 as distinct] — ARIN RDAP autnum, abuseipdb.com/check/AS335

Block membership

AS367 falls within a single ARIN autnum object, handle AS306, name DNIC-ASBLK-00306-00371, startAutnum 306 / endAutnum 371; ARIN exposes no finer per-AS367 date, so the block-level date above is authoritative for AS367 by design [Confirmed] — ARIN RDAP autnum

Analyst note

Legacy (1989) DoD DNIC block ASN with a substantial routed footprint and a clean public abuse posture. The 1989-06-30 date is block-level (shared across AS306–AS371) but is the correct first-party ARIN date for AS367. Prefix counts differ between RIPEstat and bgp.he.net; both reported. Keep clearly separate from sibling AS335. (Note: A5 characterized AS367 as a zero-peer "stub AS"; that conflicts with the announced=true / ~1,500–2,497-prefix / ~14-peer signals from A1/A3, so it is NOT asserted here — topology detail left Unknown rather than resolved to "stub.")