AS394
Operated by AFCONC-BLOCK1-AS - Air Force Systems Networking.
Summary
- // analyst note
- US Air Force / DoD ASN administered on ARIN by DISA-Columbus. ARIN serves 394 only within the aggregate AFCONC-BLOCK1-AS block record (AS379–508); block-level top-level registration event 1989-08-04 recorded as first-party RIR fact. CAIDA ASRank timed out, so as_rank/customer_cone/upstreams left null rather than fabricated. Dormant and unrouted.
- // security note
- NEUTRAL/DATED: no notable public abuse signal found as of 2026-07-02; no AS394-specific listing in Spamhaus SBL/DROP, AbuseIPDB, ThreatFox, or NANOG archives.
About this ASN.
AS394 is a legacy autonomous system number registered under ARIN to Air Force Systems Networking, a U.S. Department of Defense / U.S. Air Force organization (ARIN registrant handle 7ESG, address Maxwell AFB, Gunther Annex, Alabama). ARIN does not expose a distinct per-ASN RDAP object for 394; it is served under an aggregate block record named AFCONC-BLOCK1-AS covering AS379 through AS508, administered on ARIN by the Defense Information Systems Agency (DISA) at Columbus, Ohio (abuse/registration contact disa.columbus.ns.mbx.arin-registrations@mail.mil). The key triage point for AS394 is that it is effectively dormant today: RIPEstat reports it is not announced (announced: false), with zero IPv4 and zero IPv6 prefixes, zero of 323 IPv4 RIS peers and zero of 321 IPv6 RIS peers seeing it, and zero observed neighbours. The only routing history on record is a single legacy /16, 138.13.0.0/16, first seen 2001-07-17 and last seen 2003-01-06 — not visible in BGP since. The block-level ARIN registration event dates to 1989-08-04, a founding-era DoD allocation. CAIDA AS Rank could not be retrieved (the lookup timed out), so rank, customer cone, and upstreams are Unknown rather than fabricated. RPKI posture is not assessable because there are no active originations and thus no ROAs. No notable public abuse signal was found as of 2026-07-02 across Spamhaus, AbuseIPDB, ThreatFox, and NANOG archive searches — an absence-of-signal result consistent with a dormant, government-held ASN.
- Operator
- Air Force Systems Networking (U.S. DoD / U.S. Air Force; ARIN registrant handle 7ESG, Maxwell AFB, Gunther Annex, AL) [Confirmed] — ARIN RDAP autnum/394, bgp.he.net/AS394
- Country / RIR
- US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin); ARIN RDAP
- Allocated
- 1989-08-04 (ARIN autnum top-level registration event for the AFCONC-BLOCK1-AS block covering AS379–AS508; a first-party RIR fact, not an IEEE date); block-level last changed 2008-06-06 [Confirmed] — ARIN RDAP autnum top-level events[]
- AS name / block
- AFCONC-BLOCK1-AS, an aggregate ARIN record spanning startAutnum 379 – endAutnum 508 [Confirmed] — ARIN RDAP autnum/394
- Org status
- active registration status per ARIN (block-level AFCONC-BLOCK1-AS is Active), but AS394 shows no current BGP announcements — allocated-but-unrouted [Confirmed] — ARIN RDAP autnum/394
- Contacts
- disa.columbus.ns.mbx.arin-registrations@mail.mil; +1-844-347-2457 ext.2; admin contact DISA-Columbus, 300 North James Road, Whitehall, OH 43213 [Confirmed] — ARIN RDAP entity REGIS10-ARIN
Security/abuse context (NEUTRAL, DATED)
no notable public abuse signal found as of 2026-07-02 — no AS394-specific listing in Spamhaus SBL/DROP, AbuseIPDB, ThreatFox, or NANOG archives; a related Air Force Systems Networking ASN was rated 0/100 fraud risk by Scamalytics (indicative, not proof) [Likely — absence-of-evidence from search, not a direct API negative] — spamhaus.org, threatfox.abuse.ch, scamalytics.com
Network & routing
- Network type
- U.S. government / military network (DoD, Air Force) — not a commercial ISP, content, or enterprise network [Confirmed] — bgp.he.net/AS394, whois.ipip.net/AS394
- Size / routing
- dormant — announced: false; 0 IPv4 prefixes, 0 IPv6 prefixes, 0 announced IPs; 0/323 IPv4 and 0/321 IPv6 RIS peers see it; 0 observed neighbours [Confirmed] — RIPEstat routing-status (2026-07-02)
- Historical routing
- prefix 138.13.0.0/16 originated by AS394, first seen 2001-07-17, last seen 2003-01-06; not seen in BGP since [Confirmed] — RIPEstat routing-status
- Peering
- no PeeringDB net record (peeringdb.com/api/net?asn=394 → HTTP 404); no public peering policy located [Confirmed for the 404; Unknown for policy] — peeringdb.com API
- AS rank / customer cone / upstreams
- Unknown — CAIDA ASRank fetch timed out and web corroboration on bgp.he.net/bgp.tools surfaced no usable AS394-specific page (search noise from an unrelated Alaska Airlines flight "AS394"); not fabricated [Unknown]
- RPKI
- not assessable — AS394 announces no prefixes, so there are no ROAs; RIPEstat rpki-validation skipped (requires a prefix parameter, none announced) [Confirmed]
- Related identity
- some third-party sources (Hurricane Electric, bgplookingglass) attribute the AFCONC block to the 754th Electronic Systems Group; the ARIN registrant of record is "Air Force Systems Networking" [Likely] — bgp.he.net/AS394, bgplookingglass.com
- Analyst note
- ARIN serves 394 only within the aggregate AFCONC-BLOCK1-AS block record (AS379–508), so AS394-specific registration/update timestamps distinct from its siblings could not be independently isolated; the block-level top-level dates are recorded as the best-available first-party RIR facts. Dormant, government-held, unrouted ASN.