AS392

AS392 is a legacy 16-bit autonomous system number registered under ARIN to the U.S. Air Force. It has an unusual registry shape: ARIN's RDAP autnum lookup for 392 does not resolve to an individual object but to a single block-delegation record — handle AS379, name AFCONC-BLOCK1-AS, spanning startAutnum 379 through endAutnum 508 (the contiguous range AS379–AS508). AS392 is one un-individuated member of that Air Force block; its holder is org handle 7ESG, "Air Force Systems Networking," registered at Maxwell AFB, Alabama, with administrative, technical, and abuse contact handled by DISA-Columbus in Whitehall, Ohio (disa.columbus.ns.mbx.arin-registrations@mail.mil). The key triage point is that AS392 is dormant: RIPEstat reports announced: false with zero IPv4 prefixes, zero IPv6 prefixes, zero RIS peers seeing it (0/323 v4, 0/321 v6), and zero observed neighbours, so it carries no visible global BGP footprint. CAIDA ASRank timed out on both the original and a confirmation fetch, so AS rank and customer cone are honestly Unknown rather than fabricated. RPKI posture is not assessable because the ASN announces no prefixes against which to validate ROAs. No notable public abuse signal was found as of 2026-07-02 — Spamhaus ASN-DROP, AbuseIPDB, and NANOG-archive searches surfaced nothing specific to AS392 — consistent with a quiet, reserved military block member rather than a leased or hijacked commercial ASN.

Operator

Air Force Systems Networking (U.S. Air Force / DoD; ARIN org handle 7ESG) [Confirmed] — ARIN RDAP autnum/392, ipinfo.io/AS392

Country / RIR

US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin)

Allocated

1989-08-04 (ARIN registry date from the containing block's autnum top-level events[], eventAction registration — a first-party RIR fact, NOT an IEEE date); last changed 2008-06-06 [Confirmed] — ARIN RDAP autnum/392 top-level events

Org status

active per ARIN RDAP status[] (reflects registration status of the containing block, not evidence of operational/public network activity) [Confirmed] — ARIN RDAP autnum/392

Contacts

disa.columbus.ns.mbx.arin-registrations@mail.mil (abuse/admin/tech, DISA-Columbus, 300 North James Road, Whitehall, OH 43213); registrant address 501 East Moore Dr, Bldg 884 Rm 1100 Gunther Annex, Maxwell AFB, AL 36114 [Confirmed] — ARIN RDAP autnum/392, RIPEstat abuse-contact-finder

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-07-02 — no AS392-specific results in Spamhaus ASN-DROP, AbuseIPDB, or NANOG archives; consistent with a legacy DoD-allocated ASN. Note: web-search tooling does not query those databases directly, so this is a sourced null, not a certified clean bill of health

Network & routing

Network type

government/military internal network (legacy ARIN block registration, not a commercial ISP/hosting/content network); ipinfo.io classes it "Inactive ISP, Business or Hosting" with 0 IPv4, 0 IPv6, 0 domains, 0 peers [Confirmed] — ipinfo.io/AS392

Size

dormant — 0 IPv4 prefixes / 0 IPv4 addresses and 0 IPv6 prefixes; 0 observed neighbours [Confirmed] — RIPEstat routing-status / announced-prefixes (2026-07-02)

Routing/peering

NOT announced — announced: false; 0 RIS peers seeing it (0/323 v4, 0/321 v6); no upstreams or peers visible [Confirmed]. Peering policy not publicly documented; AS392 is absent from the ASNs listed under the "Air Force Systems Networking" org on PeeringDB

[Unknown] — RIPEstat routing-status, peeringdb.com/org/20118

RPKI

not assessable — AS392 announces no prefixes, so there are no ROAs to validate (RIPEstat rpki-validation skipped: requires a --prefix) [Unknown] — RIPEstat rpki-validation

AS rank / customer cone

Unknown — CAIDA ASRank query timed out on both the canonical fetch and a confirmation re-fetch; not fabricated [Unknown] — CAIDA ASRank (timeout)

Notable usage

none identifiable — no active routes, peers, or hosted domains; appears to be a dormant/reserved legacy block member within a large contiguous Air Force ASN range [Likely] — ipinfo.io/AS392

Block structure

ARIN RDAP for 392 resolves to a single block-delegation record (handle AS379, startAutnum 379, endAutnum 508 = AS379–AS508, name AFCONC-BLOCK1-AS). AS392 has no distinct RDAP handle, name, or separate registration event apart from this block [Confirmed] — ARIN RDAP autnum/392

Analyst note

Encountered as a dormant legacy ASN whose ARIN RDAP query resolves to a block-delegation record (AS379–AS508) rather than an individual object. The 1989-08-04 registration date is the block's first-party ARIN top-level event and is recorded as allocated_date (not an IEEE/OUI-style database artifact). Clean, inactive military ASN.