AS385

AS385 is a legacy autonomous system number registered under ARIN to Air Force Systems Networking, a U.S. Department of the Air Force / Department of Defense network entity whose registration and abuse handling are administered by DISA-Columbus (the Defense Information Systems Agency). As with its siblings in the range, ARIN's RDAP autnum lookup for the number 385 resolves not to a discrete per-ASN object but to a range-level record — handle "AS379", name "AFCONC-BLOCK1-AS", covering startAutnum 379 through endAutnum 508. Individual ASNs in that legacy block were bulk-registered to Air Force Systems Networking (ARIN OrgId 7ESG) and do not each carry a separate registry object, so the registrant identity, address, and dates below are inherited from that block record and independently corroborated by ipinfo.io, bgpview.io, and Hurricane Electric. The distinguishing fact for AS385 — and where it diverges from actively routed siblings such as AS384 — is that it is currently dormant: RIPEstat reports announced=false with zero prefixes in the routing table, zero of 323 IPv4 RIS peers and zero of 321 IPv6 RIS peers seeing it, and zero observed neighbours. Historical RIS data shows it once originated space, first seen 199.31.3.0/24 on 2002-02-07 and last seen 132.50.158.0/24 on 2023-06-29; Hurricane Electric likewise notes it has not been visible in the global routing table since June 29, 2023. The block's top-level ARIN registration event dates to 1989-08-04 (last changed 2008-06-06). No AS385-specific abuse, hijack, or route-leak signal was found across Spamhaus, NANOG archives, or general reputation aggregators as of 2026-07-02 — a neutral, dated null consistent with a withdrawn legacy federal ASN rather than an active operator.

Operator

Air Force Systems Networking (U.S. Department of the Air Force / DoD; ARIN registrant handle 7ESG; registration administered by DISA-Columbus) [Confirmed] — ARIN RDAP autnum/385, bgp.he.net/AS385, whois.ipip.net/AS385

Country / RIR

US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin), as-overview

Allocated

1989-08-04 (ARIN RDAP autnum TOP-LEVEL registration event for the AFCONC-BLOCK1-AS block AS379–508 containing AS385; this is the first-party RIR allocation fact, NOT an IEEE date); last changed 2008-06-06 [Confirmed] — ARIN RDAP autnum top-level events[] (nested entity events 2008-06-05/2025-03-13 and 2009-06-24/2026-02-12 excluded as contact/org record decoys)

Org status

active registration but operationally dormant. ARIN RDAP status for the containing block is "active"; RIPEstat announced=false, so AS385 is currently unannounced/withdrawn (differs from sibling AS384, which is actively announcing) [Confirmed] — ARIN RDAP autnum/385, RIPEstat as-overview

Contacts

disa.columbus.ns.mbx.arin-registrations@mail.mil (abuse/admin/tech, DISA-Columbus, 300 North James Road, Whitehall, OH 43213); registrant HQ Maxwell AFB, AL [Confirmed] — RIPEstat abuse-contact-finder, ARIN RDAP autnum/385

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-07-02 — not in Spamhaus DROP/ASN-DROP, NANOG archives, or general reputation aggregators; a single-source 2011 personal-blog claim was found and deliberately excluded as below the sourcing bar. A bgp.he.net "announces bogons" flag reflects the ASN's inactive/reclaimed status in HE's automated bogon tracking, not a documented malicious-routing event

Network & routing

Network type

U.S. federal government / military network, part of the DoD Information Network (DODIN); range-level record "AFCONC-BLOCK1-AS", registrant address 501 East Moore Dr., Bldg 884 Rm 1100, Gunther Annex, Maxwell AFB, AL 36114 [Confirmed] — ARIN RDAP autnum/385, whois.ipip.net/AS385

Size

currently announces 0 IPv4 prefixes and 0 IPv6 prefixes (dormant/withdrawn); 0 announced address space [Confirmed] — RIPEstat routing-status / as-overview / announced-prefixes (2026-07)

Routing/peering

NOT currently announced — RIPEstat announced=false; 0 of 323 v4 RIS peers and 0 of 321 v6 RIS peers see it; 0 observed neighbours. Historical originations: first seen 199.31.3.0/24 on 2002-02-07, last seen 132.50.158.0/24 on 2023-06-29; bgp.he.net notes no global-table visibility since 2023-06-29, and historically lists AS367 (U.S. DoD) as a primary observed peer [Confirmed for current status; Likely for historical peer per third-party BGP observation] — RIPEstat routing-status, bgp.he.net/AS385. No PeeringDB entry specific to AS385, so peering policy is not publicly published [Confirmed for absence]

RPKI

not assessable from this pass — RIPEstat rpki-validation was skipped (no prefix supplied) and there is no currently announced prefix to validate [Confirmed] — RIPEstat rpki-validation

Notable usage

legacy internal U.S. Air Force / DoD address space, part of the pre-CIDR military numbering block; no commercial or public-facing usage; currently withdrawn from global routing [Likely] — bgp.he.net/AS385, ARIN RDAP autnum/385

Related ASNs

sibling ASNs in the AFCONC-BLOCK1-AS block AS379–508 registered to the same Air Force Systems Networking org (e.g. AS384, actively announcing and single-homed to AS27064, DoD Network Information Center); AS367 (U.S. DoD) appears as a historical observed peer for AS385 [Confirmed for block siblings; Likely for AS367 peering] — ARIN RDAP autnum/385, bgp.he.net/AS385

Analyst note

RDAP for "385" resolves to a range-level record (AS379–508, handle AS379); registrant/address/dates are inherited from that block and cross-corroborated. Unlike sibling AS384, AS385 is currently unannounced (last seen 2023-06-29). Website is Unknown — a government/military block has no operator corporate/about page. CAIDA AS-rank/cone data was unavailable (fetch timed out) and is left null, not fabricated. bgp.he.net lists two org-name variants ("Air Force Systems Networking" and "754th Electronic Systems Group") — both the same USAF/DoD entity.