AS396982

AS396982 is an active 32-bit autonomous system number registered under ARIN to Google LLC (org handle GOOGL-2, Mountain View, CA). Unlike AS15169, which carries Google's own core infrastructure, AS396982 is explicitly designated for Google Cloud Platform customer workloads: the ARIN RDAP record carries the remark "* This ASN is used for Google Cloud Platform *" and a registrant-level note that "The IP addresses under this Org-ID are in use by Google Cloud customers." The ASN sits in the IANA 32-bit AS block 396189–397212 assigned by ARIN, and is announced and active. Routing observation (bgp.he.net) shows it originating roughly 3,395 IPv4 prefixes and 215 IPv6 prefixes — on the order of 20 million IPv4 addresses — while peering exclusively with other Google-owned ASNs (AS15169, AS19527, AS139070, AS139190), consistent with a customer-facing cloud ASN that transits through Google's own global backbone rather than buying external transit. CAIDA ranks it 12498 globally, with a customer cone of 1 ASN, ~3,297 prefixes, and ~19,892,224 addresses. Google operates a Selective peering policy (publicly routable ASN, /24 minimum, dual BGP sessions, complete PeeringDB record, 24x7 NOC, IXP presence) through its ISP peering portal, and lists AS396982 as one of four peerable Google ASNs. No notable operator-level abuse signal was found as of 2026-06-25: it is not on Spamhaus ASN-DROP, and CleanTalk reports a low aggregate spam rate (0.82%), consistent with a large shared cloud host where a minority of customer instances generate complaints rather than operator intent.

Operator

Google LLC (network GOOGLE-CLOUD-PLATFORM; ARIN org handle GOOGL-2; 1600 Amphitheatre Parkway, Mountain View, CA 94043, US) [Confirmed] — ARIN RDAP autnum/396982, peeringdb.com/asn/396982

Country / RIR

US, ARIN (authoritative RIR per RIPEstat abuse-contact-finder) [Confirmed] — ARIN RDAP, stat.ripe.net abuse-contact-finder

Allocated

2018-08-15 (ARIN RDAP autnum AS396982 top-level registration event — a first-party RIR fact, NOT an org/contact-level date); last changed 2021-11-16 [Confirmed] — ARIN RDAP autnum/396982 top-level events

Org status

active; ARIN-validated; PeeringDB org status OK; tech/admin POC ZG39-ARIN (validated), abuse POC GCABU-ARIN (ARIN-unvalidated since 2022-04-09) [Confirmed] — ARIN RDAP autnum/396982, peeringdb.com/asn/396982

Contacts

noc@google.com (24x7 operational/BGP); google-cloud-compliance@google.com / arin-contact@google.com (abuse/compliance/RIR); GCE abuse-report form for spam/abuse [Confirmed] — ARIN RDAP, isp.google.com/iwantpeering

Security/abuse context (NEUTRAL, DATED)

no notable operator-level abuse signal as of 2026-06-25 — NOT on Spamhaus ASN-DROP; CleanTalk reports 0.82% spam rate (3,452 spam-active of 419,563 detected IPs); URLhaus/ThreatFox/AbuseIPDB maintain per-ASN pages but were CAPTCHA/403-blocked (exact counts Unknown); NANOG archives show routing-table appearances only, no abuse threads. Compromised customer VMs (cryptomining, phishing) are industry-wide shared-cloud patterns, not operator intent [Likely overall; Confirmed for Spamhaus/CleanTalk] — spamhaus.org/drop/asndrop.json, cleantalk.org/blacklists/as396982, seclists.org/nanog

Network & routing

Network type

hyperscaler cloud provider ASN carrying GCP customer IP space; distinct from AS15169 (Google core infrastructure) [Confirmed] — ARIN RDAP remarks, cloud.google.com/about/locations

Size

~3,395 IPv4 prefixes / ~20,204,800 IPv4 addresses and ~215 IPv6 prefixes announced; CAIDA customer cone: 1 ASN, ~3,297 prefixes, ~19,892,224 addresses [Confirmed] — bgp.he.net/AS396982, CAIDA AS Rank

Routing/peering

announced/active; observed peers are all Google-owned ASNs — AS15169, AS19527, AS139190, AS139070; no distinct external transit upstreams identified, consistent with internal Google backbone transit [Confirmed for peers; Likely for "no external transit"] — bgp.he.net/AS396982, stat.ripe.net as-overview

Peering policy

Selective — Google peers case-by-case (publicly routable ASN, ≥/24, dual BGP sessions, complete PeeringDB record, 24x7 NOC, IXP presence, current IRR objects); requests via the Google ISP portal; AS396982 listed among four peerable Google ASNs (with AS15169, AS139070, AS139190)

[Confirmed] — isp.google.com/iwantpeering, peering.google.com/#/options/peering, peeringdb.com/asn/396982

RPKI

predominantly valid ROA coverage (bgp.he.net: ~3,585 valid origins, 3 invalid); RIPEstat rpki-validation skipped (no prefix supplied) [Confirmed for bgp.he.net counts] — bgp.he.net/AS396982

Notable usage

IP space under this ASN is used by Google Cloud Platform customers (not Google's own infrastructure), per the ARIN registrant remark; spans Google's global regions [Confirmed] — ARIN RDAP remarks, cloud.google.com/about/locations

Related ASNs

AS15169 (Google core), AS19527, AS139070, AS139190 (Google Asia Pacific) [Confirmed] — bgp.he.net/AS396982

ARIN block

396189–397212, IANA 32-bit AS Numbers Registry, assigned by ARIN [Confirmed] — stat.ripe.net as-overview

Analyst note

IPinfo classifies the ASN as Cloud/CDN/VPN/Crawler/Anycast. CAIDA ranks it 12498 globally with a customer cone of 1 ASN, ~3,297 prefixes, ~19,892,224 addresses. All dates read from the autnum top-level events[] — the GOOGL-2 (2006-09-29), ZG39-ARIN (2000-11-30), and GCABU-ARIN (2011-03-30) entity registration dates are contact-level decoys and were NOT used for allocated_date.