AS390
Operated by AFCONC-BLOCK1-AS - Air Force Systems Networking.
Summary
- // analyst note
- Within-block number of a dormant/legacy military ASN block. ARIN keys resource 390 to the block record AS379 (AFCONC-BLOCK1-AS, startAutnum 379 to endAutnum 508); no discrete AS390 RDAP entity exists. RDAP status is 'active' but RIPEstat shows zero current announcements and zero RIS peer visibility. Unlike sibling AS389, AS390 has a real historical footprint (first seen 2002-02-19; last seen 2019-10-23) before withdrawal. CAIDA metrics (as_rank, customer_cone) could not be re-fetched (timeout) and are left null rather than assumed. All registry facts match the already-DONE AS379 entry; treat as a within-block duplicate-of-DONE.
- // security note
- NEUTRAL/DATED: no notable public abuse signal found as of 2026-07-02; not in Spamhaus DROP/ASN-DROP/SBL, AbuseIPDB, NANOG archives, or community ASN blocklists; searches for last-seen prefix 143.141.133.0/24 returned no matches.
About this ASN.
AS390 is a legacy autonomous system number registered under ARIN to Air Force Systems Networking — a U.S. Department of Defense / United States Air Force network resource administered by the Defense Information Systems Agency (DISA). As with its siblings, ARIN does not issue a discrete RDAP record for AS390: querying autnum/390 returns the contiguous block record handle AS379, ASName AFCONC-BLOCK1-AS, spanning startAutnum 379 through endAutnum 508, and AS390 falls inside that legacy block. The registrant org (ARIN handle 7ESG) lists an address at 501 East Moore Dr., Bldg 884 Rm 1100, Gunter Annex, Maxwell AFB, AL 36114, while abuse, administrative, and technical contact routes through DISA-Columbus (300 North James Road, Whitehall, OH 43213; disa.columbus.ns.mbx.arin-registrations@mail.mil). Community sourcing associates the block with the 754th Electronic Systems Group. The distinguishing triage point for AS390 — versus fully-dark siblings like AS389 — is that RIPEstat records a real historical routing footprint: origin AS390 was first seen announcing 137.242.0.0/16 on 2002-02-19 and last seen announcing 143.141.133.0/24 on 2019-10-23, after which it went dark. Today it is dormant: RIPEstat reports announced=false, an empty announced-prefixes array, zero RIS peer visibility (0/323 v4, 0/321 v6), zero observed neighbours, and a singleton customer cone. RDAP status remains "active." CAIDA data could not be re-fetched (query timed out), so AS-rank / customer-cone metrics for resource 390 are recorded as Unknown rather than assumed. RPKI posture is not assessable — with zero announced prefixes there are no ROAs to validate. No notable public abuse signal was found as of 2026-07-02 — not in Spamhaus DROP/SBL, AbuseIPDB, NANOG archives, or community ASN blocklists; searches for the last-seen prefix 143.141.133.0/24 against spam/malware sources also returned nothing — consistent with a clean, withdrawn military allocation whose restricted public visibility reflects operational-security policy rather than reputation.
- Operator
- Air Force Systems Networking (U.S. DoD / U.S. Air Force; ARIN OrgId 7ESG; administered by DISA; associated with the 754th Electronic Systems Group) [Confirmed] — ARIN RDAP (https://rdap.arin.net/registry/autnum/390)
- Country / RIR
- US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin); ARIN RDAP
- Allocated
- 1989-08-04 (ARIN registry date from the autnum TOP-LEVEL registration event of the parent block record AS379/AFCONC-BLOCK1-AS, NOT an IEEE date — IEEE publishes no ASN registration dates; the nested entity/org events of 2008-06-05 and 2009-06-24 are decoys); last changed 2008-06-06[Confirmed] — ARIN RDAP autnum top-level events (https://rdap.arin.net/registry/autnum/390)
- Org status
- active per ARIN RDAP; U.S. Air Force network resource administered by DISA (Gunter Annex, Maxwell AFB, AL; DISA-Columbus, OH); block-level record last changed 2008-06-06, registrant org 7ESG last updated 2025-03-13 [Confirmed] — ARIN RDAP (https://rdap.arin.net/registry/autnum/390)
- Contacts
- abuse/admin/tech via DISA-Columbus — disa.columbus.ns.mbx.arin-registrations@mail.mil, +1-844-347-2457 ext.2; registrant HQ 501 East Moore Dr., Bldg 884 Rm 1100, Gunter Annex, Maxwell AFB, AL 36114 [Confirmed] — ARIN RDAP (https://rdap.arin.net/registry/autnum/390)
Security/abuse context (NEUTRAL, DATED)
no notable public abuse signal found as of 2026-07-02 — not in Spamhaus DROP/ASN-DROP/SBL, AbuseIPDB, NANOG archives, or community ASN blocklists (C0nw0nk/ASN-BlackList, brianhama/bad-asn-list, bountyyfi/bad-asn-list, abuse.ch/URLhaus); targeted searches for the last-seen prefix 143.141.133.0/24 also returned no matches
Network & routing
- Network type
- U.S. government / military network (DoD, U.S. Air Force / AFNET); not a commercial ISP, hosting, or content network; AS390 is legacy/withdrawn [Confirmed] — ARIN RDAP; DISN Connection Process Guide (disa.mil)
- Size
- dormant — 0 IPv4 prefixes / 0 IPv4 addresses and 0 IPv6 prefixes currently announced; customer cone not independently confirmed (CAIDA fetch timed out) [Confirmed for prefixes/announcements; Unknown for cone] — RIPEstat routing-status (resource 390)
- Routing/peering
- NOT currently announced — as-overview announced=false; announced-prefixes empty; 0 RIS peers seeing it (0/323 v4, 0/321 v6); observed_neighbours 0; no public peering policy published; no PeeringDB network record for AS390 (peeringdb.com/asn/390 → 404; block org page peeringdb.com/org/20118 lists no populated peering fields and omits AS390)[Confirmed] — RIPEstat routing-status; peeringdb.com/org/20118, peeringdb.com/asn/390
- Historical routing
- first seen 2002-02-19 (137.242.0.0/16, origin AS390); last seen 2019-10-23 (143.141.133.0/24, origin AS390); withdrawn since — a genuine historical footprint distinguishing AS390 from never-announced siblings [Confirmed] — RIPEstat routing-status (resource 390)
- RPKI
- not assessable — AS390 announces no prefixes, so there are no ROAs to validate (RIPEstat rpki-validation requires a prefix; none applicable) [Unknown] — RIPEstat rpki-validation (skipped, no prefix)
- Notable usage
- part of a contiguous historical ASN block (AS379 through AS508) allocated to Air Force Systems Networking for DoD/Air Force internal networking since the earliest ASN allocations; historically routed 137.242.0.0/16 and 143.141.133.0/24 (both withdrawn); no current public-facing services documented[Likely] — RIPEstat routing-status; ARIN RDAP
- Within-block duplicate note
- ARIN keys resource 390 to the same AFCONC-BLOCK1-AS block record already fully enriched and finalized as AS379 (/asn/379/, status DONE) and shared by AS385/AS386/AS389. AS390 is not a separately allocable RDAP entity; all registry facts match the parent block[Confirmed] — ARIN RDAP (https://rdap.arin.net/registry/autnum/390); /asn/379/
- Analyst note
- Encountered as a within-block number of a dormant legacy military ASN block registered to Air Force Systems Networking via DISA; RDAP status is "active" but nothing is currently announced. Unlike sibling AS389, AS390 carries a verifiable historical routing footprint (last seen 2019-10-23) before withdrawal. Registry data resolves to the block record AS379, not a discrete AS390 record. The absence of community/peering presence reflects deliberate DoD operational security, not a defunct or ill-reputed operator. Clean, withdrawn ASN. Flagging for the checker: if the pipeline treats within-block numbers as duplicates-of-DONE, AS390 may be closed rather than published as a distinct page.