AS405

AS405 is a legacy autonomous system number registered under ARIN and held by a U.S. Air Force / Department of Defense entity recorded as "Air Force Systems Networking" (registrant org handle 7ESG, Maxwell AFB, AL). It is not a discrete ARIN object: querying autnum 405 returns the canonical block record AFCONC-BLOCK1-AS, whose handle is AS379 with startAutnum 379 and endAutnum 508, so AS405 falls inside a single legacy block that ARIN registered on 1989-08-04. That block-level top-level RDAP registration event is the first-party registry allocation date and is recorded here; the later dates carried by the nested org (7ESG: registration 2008-06-05) and point-of-contact (REGIS10-ARIN: registration 2009-06-24) entities are entity/contact-record dates and are treated as decoys, not the allocation. Operationally, AS405 is a small stub network: RIPEstat shows it announcing exactly one IPv4 prefix (139.241.8.0/24, 256 addresses) and no IPv6, with 322 of 323 RIS peers seeing the v4 announcement. CAIDA ranks it 67700 with a singleton customer cone (1 ASN, 1 prefix, 256 addresses) and an AS degree of provider 1, peer 0, customer 0 — a single-homed end-site with one upstream, whose identity CAIDA does not name in this snapshot. Routing history reaches back to a first-seen of 2002-01-30 (then 131.35.0.0/16, since changed). CAIDA geolocates the AS near Columbus, Ohio (39.97, -83.01), consistent with the DISA-Columbus abuse contact, while the registrant HQ is Maxwell AFB, Alabama. No PeeringDB net object exists (404) and no operator website, peering policy, or IXP membership was found. No notable public abuse or threat signal was found as of 2026-07-02 across Spamhaus, AbuseIPDB, NANOG archives, and Reddit — a sourced neutral null consistent with a small, low-footprint military allocation, not a verified clean-reputation claim.

Operator / holder

Air Force Systems Networking (U.S. Department of Defense / U.S. Air Force; ARIN registrant org handle 7ESG, 501 East Moore Dr., Bldg 884 Rm 1100, Gunther Annex, Maxwell AFB, AL 36114, US) [Confirmed] — https://rdap.arin.net/registry/autnum/405

Country / RIR

US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin), https://rdap.arin.net/registry/autnum/405

Allocated

1989-08-04 (ARIN registry date from the autnum TOP-LEVEL events[], eventAction=registration; first-party RIR fact, NOT an IEEE date); last changed 2008-06-06 [Confirmed] — https://rdap.arin.net/registry/autnum/405

AS name

AFCONC-BLOCK1-AS [Confirmed] — https://rdap.arin.net/registry/autnum/405

Website

Unknown — no dedicated operator website for this ASN; af.mil blocks automated fetch (403) with no page referencing this ASN/block located [Unknown] — https://www.af.mil

Contacts

abuse disa.columbus.ns.mbx.arin-registrations@mail.mil (DISA-Columbus, 300 North James Road, Whitehall, OH 43213, US; +1-844-347-2457 ext2) [Confirmed] — https://rdap.arin.net/registry/entity/REGIS10-ARIN, https://stat.ripe.net/AS405

Org status

active [Confirmed] — https://rdap.arin.net/registry/autnum/405

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-07-02 across Spamhaus, AbuseIPDB, NANOG archives, and Reddit networking communities; consistent with a small, low-footprint DoD-affiliated network — absence likely reflects low visibility rather than a verified clean record

Network & routing

Network type

U.S. federal government / military (DoD) legacy ASN; a single-homed stub / end-site, not a commercial or transit operator [Likely] — https://rdap.arin.net/registry/autnum/405, https://ipinfo.io/AS405

Size / routing

announces 1 IPv4 prefix (139.241.8.0/24, 256 addresses), 0 IPv6; visibility 322/323 RIS peers v4, 0/321 v6; observed neighbours 1 [Confirmed] — RIPEstat routing-status / announced-prefixes (https://stat.ripe.net/AS405)

CAIDA topology

AS rank 67700; customer cone = 1 ASN / 1 prefix / 256 addresses; AS degree total 1 (provider 1, peer 0, customer 0); clique member true; IXP null [Confirmed] — https://asrank.caida.org/

Upstreams

Unknown — CAIDA reports provider-degree 1 but does not name the provider ASN; RIPEstat observed_neighbours 1 likely the same upstream, identity not returned [Unknown]

Routing history

first seen 2002-01-30 (131.35.0.0/16, since changed); last seen 2026-07-02 (139.241.8.0/24) [Confirmed] — https://stat.ripe.net/AS405

RPKI

not assessed — RIPEstat rpki-validation was skipped (no --prefix supplied); no ROA/validation state reported without a per-prefix query [Unknown]

Geo footprint

CAIDA geolocates to ~39.97, -83.01 (central Ohio, near Columbus/Whitehall), consistent with the DISA-Columbus abuse contact; registrant HQ is Maxwell AFB, AL — administrative vs. operational split [Confirmed] — https://asrank.caida.org/

Peering policy

Unknown — no PeeringDB net object for AS405 (404); no public peering policy found [Unknown] — https://www.peeringdb.com/asn/405

RDAP block quirk

querying autnum 405 returns the block record handle AS379 (startAutnum 379, endAutnum 508); AS405 is covered since 379 <= 405 <= 508. All top-level dates/name/status pertain to this block record [Confirmed] — https://rdap.arin.net/registry/autnum/405

Analyst note

Encountered as a legacy 1989 U.S. Air Force ASN inside block AFCONC-BLOCK1-AS (range 379–508). Not a commercial operator, so about/company, peering-policy, and PeeringDB pages do not exist (404s are honest nulls). allocated_date recorded from the block's top-level ARIN registration event per registry-first rule.