Autonomous system detail

AS398

Not announced

Operated by AFCONC-BLOCK1-AS - Air Force Systems Networking.

Summary

// analyst note
AS398 has no discrete RDAP autnum object; canonical fetch returns the shared AFCONC-BLOCK1-AS block record (handle AS379, AS379–AS508). All registry facts (registrant, address, 1989-08-04 registration) are block-level and inherited. RIPEstat resource=398 confirms announced=false and 0 currently seen prefixes; CAIDA errored (timeout) this pass, so as_rank/customer_cone left null.
// security note
NEUTRAL/DATED: no notable public abuse, hijack, route-leak, or outage signal found as of 2026-07-02; not on Qrator Radar's AS398 hijacks page, Spamhaus/AbuseIPDB-indexed sources, NANOG archives, or Reddit.
IPv4 prefixes
0
~0 addresses
IPv6 prefixes
0
Peer networks
0
0 up · 0 down
IANA block
1-1876
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: Medium

AS398 is a legacy autonomous system number registered under ARIN as part of the block record AFCONC-BLOCK1-AS, which spans AS379 through AS508. The registrant organization is "Air Force Systems Networking" (ARIN OrgId 7ESG), a U.S. Department of Defense / U.S. Air Force entity whose registry address is 501 East Moore Dr., Bldg 884, Rm 1100, Gunter Annex, Maxwell AFB, Alabama. Registry contact, abuse, and technical handling for the block route through DISA-Columbus (disa.columbus.ns.mbx.arin-registrations@mail.mil), reflecting Defense Information Systems Agency administration rather than a commercial ISP. AS398 does not resolve to a discrete ARIN autnum object of its own; RDAP for autnum 398 returns the shared block record (handle AS379), so its registry facts — including the top-level registration event of 1989-08-04 — are inherited block-level facts. The number is effectively dormant in the public routing system: RIPEstat reports announced=false, zero currently announced IPv4/IPv6 prefixes, and 0 of 323 (v4) and 0 of 321 (v6) RIS peers seeing it, though routing history shows past visibility (first_seen 2000-08-18, last_seen 2025-09-19). No operator-official website, PeeringDB network profile, or published peering policy exists for AS398 — consistent with DoD's centrally gated DISN boundary rather than per-ASN commercial peering. No notable public abuse, hijack, or outage signal was found for AS398 as of 2026-07-02 across Qrator Radar, Spamhaus/AbuseIPDB-indexed sources, NANOG archives, and Reddit networking communities; that absence is itself the sourced finding.

Operator
Air Force Systems Networking (ARIN OrgId 7ESG; U.S. Air Force / DoD, administered by DISA) [Confirmed] — ARIN RDAP autnum 398 (https://rdap.arin.net/registry/autnum/398)
Country / RIR
US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin)
Allocated
1989-08-04 (ARIN RDAP top-level autnum registration event on the AFCONC-BLOCK1-AS block record; RIR registry date, NOT an IEEE date); block last changed 2008-06-06 [Confirmed] — ARIN RDAP autnum top-level events
Block context
AS398 has no discrete RDAP autnum object; it is a within-block number of AFCONC-BLOCK1-AS (AS379–AS508, handle AS379), sharing the same registrant, address, and registration event as siblings AS379/AS385/AS386/AS390/AS391 [Confirmed] — ARIN RDAP (handle AS379, startAutnum 379, endAutnum 508)
Org status
active per ARIN RDAP status (inherited from parent block record); operational routing use not confirmed by any operator-official source; third-party BGP data suggests currently unrouted [Confirmed for RDAP status; Unknown for operational use] — ARIN RDAP autnum 398
Contacts
disa.columbus.ns.mbx.arin-registrations@mail.mil; +1-844-347-2457 ext.2; registrant address 501 East Moore Dr., Bldg 884, Rm 1100, Gunter Annex, Maxwell AFB, AL 36114, US [Confirmed for abuse/registration via RDAP block record] — ARIN RDAP autnum 398

Security/abuse context (NEUTRAL, DATED)

no notable public abuse, hijack, route-leak, or outage signal found as of 2026-07-02 — not on Qrator Radar's AS398 hijacks page, nor in Spamhaus/AbuseIPDB-indexed results, NANOG archives, or Reddit r/networking [Likely — absence-of-evidence from indexed sources] — radar.qrator.net/as/398/security-issues/hijacks, archive.nanog.org

Network & routing

Network type
U.S. government / military network (DoD / U.S. Air Force), DISA-administered; not a commercial ISP, hosting, or content network [Confirmed] — ARIN RDAP autnum 398
Size / routing
dormant — announced=false; 0 currently announced IPv4/IPv6 prefixes; 0/323 v4 and 0/321 v6 RIS peers; observed_neighbours 0 [Confirmed] — RIPEstat as-overview + routing-status (query 2026-07-02)
Routing history
previously visible — first_seen prefix 158.157.0.0/16 on 2000-08-18; last_seen prefix 139.241.227.0/24 on 2025-09-19 [Confirmed] — RIPEstat routing-status
Peering policy
none published; PeeringDB network lookup for AS398 returns 404; a same-name org profile (org/20118) exists but does not list AS398; DoD peering is DISN-boundary gated [Confirmed (absence)] — peeringdb.com/asn/398, peeringdb.com/org/20118
RPKI
not assessable — AS398 announces no prefixes, so there are no ROAs to validate (RIPEstat rpki-validation skipped, no prefix) [Confirmed] — RIPEstat rpki-validation (skipped)
Notable usage
none documented on any operator-official source; no discrete public-facing page for AS398 or the block. Third-party BGP data (non-operator) shows the ASN currently unrouted [Unknown for operator-official usage; Confirmed for third-party BGP inactivity] — bgp.he.net/AS398, ARIN RDAP autnum 398
Analyst note
The canonical fetch for autnum 398 returns the shared AFCONC-BLOCK1-AS block object (handle AS379); all registry facts are block-level and inherited. AS398-specific routing/CAIDA data was not independently isolated beyond RIPEstat's resource=398 responses; CAIDA lookup errored (timeout) this pass. Clean, dormant DoD block number.
[ 02 ] — Announced prefixes

What this network routes.

0 prefixes total · RIPEstat data · cached, not real-time
// IPv4 prefixes0
No IPv4 prefixes announced.
// IPv6 prefixes0
No IPv6 prefixes announced.
[ 03 ] — Notable peers & upstreams

Who it talks to.

0 observed neighbours
Neighbour data unavailable from public BGP collectors.