AS406

AS406 is a legacy autonomous system number registered under ARIN to Air Force Systems Networking, a U.S. Department of Defense / U.S. Air Force numbering resource administered by DISA (the Defense Information Systems Agency). Like its siblings, it has no discrete ARIN RDAP autnum object; it falls inside a single block registration — handle AS379, ASName AFCONC-BLOCK1-AS, spanning startAutnum 379 through endAutnum 508 — a large sequential DoD allocation. The registrant org (ARIN OrgId 7ESG) carries a Maxwell AFB, Alabama address, and abuse/administrative/technical contact routes to the DISA-Columbus registration group in Whitehall, Ohio. AS406 is a small, single-homed stub network that is actively routed today: RIPEstat and CAIDA agree it originates 2 IPv4 /24 prefixes (139.241.9.0/24 and 198.218.225.0/24), roughly 512 IPv4 addresses, with no IPv6 announcements. CAIDA AS Rank places it at 54406 with a customer cone of just itself (1 ASN, 2 prefixes, 512 addresses) and an AS degree of total 1 / provider 1 — a single upstream, no visible peers or customers. Its lone observed upstream is AS27064 (DoD Network Information Center). IPv4 visibility is broad (322 of 323 RIS peers see it), while IPv6 visibility is zero. RPKI posture is not assessed here (RIPEstat's validation endpoint is per-prefix and no prefix was supplied). No notable public abuse signal was found as of 2026-07-02 — AS406 is absent from the Spamhaus ASN-DROP list and returned no AS406-specific hits across AbuseIPDB, Talos, threat feeds, or NANOG archives — consistent with a clean, actively-routed military stub whose restricted public visibility (no PeeringDB record, no published peering policy) reflects operational-security posture rather than reputational concern.

Operator

Air Force Systems Networking (U.S. DoD / U.S. Air Force; ARIN OrgId 7ESG; administered by DISA) [Confirmed] — ARIN RDAP autnum/406 (registrant vcard), ipinfo.io/AS406

Country / RIR

US, ARIN [Confirmed] — ARIN RDAP; RIPEstat as-overview (block "1-1876, Assigned by ARIN"); RIPEstat abuse-contact-finder (authoritative_rir: arin)

Allocated

1989-08-04 (ARIN registry date from the RDAP autnum TOP-LEVEL events[], handle AS379; NOT an IEEE date — IEEE publishes no ASN registration dates); last changed 2008-06-06 [Confirmed] — ARIN RDAP autnum top-level events (registration / last changed)

Org status

active per ARIN RDAP status array (inherited from the parent AFCONC-BLOCK1-AS block record); third-party BGP independently confirms AS406 is currently routed; no operator-official page confirms current routing use of AS406 specifically [Confirmed for RDAP status and third-party routing activity] — ARIN RDAP autnum/406, bgp.he.net/AS406

Contacts

DISA-Columbus Registration group, disa.columbus.ns.mbx.arin-registrations@mail.mil, +1-844-347-2457 ext2; 300 North James Road, Whitehall, OH 43213; registrant address 501 East Moore Dr., Bldg 884, Rm 1100, Gunter Annex, Maxwell AFB, AL 36114

[Confirmed] — ARIN RDAP autnum/406, RIPEstat abuse-contact-finder

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-07-02 — AS406 absent from Spamhaus ASN-DROP (checked 2026-07-02; list had 422 records, AS406 not among them), and no AS406-specific hits across AbuseIPDB, Talos, abuse.ch/FireHOL, or NANOG archives; restricted public visibility reflects military operational-security posture, not reputational concern

Network & routing

Network type

U.S. government/military network (DoD / USAF), administered by DISA; not a commercial ISP, hosting, content, or transit network [Confirmed] — ARIN RDAP, DISA DISN Connection Process Guide

Size

actively routed — 2 IPv4 /24 prefixes (139.241.9.0/24, 198.218.225.0/24), ~512 IPv4 addresses; 0 IPv6 prefixes; customer cone = 1 ASN (itself), 2 prefixes, 512 addresses [Confirmed] — RIPEstat announced-prefixes / routing-status, CAIDA AS Rank

Routing/peering

announced = true [Confirmed]. Single-homed stub — AS degree total 1 (customer 0, peer 0, provider 1); observed upstream AS27064 (DoD Network Information Center); RIPEstat observed_neighbours = 1 [Confirmed for degree/neighbour count; Likely for the specific upstream ASN, per bgp.he.net third-party observation]. IPv4 seen by 322/323 RIS peers; IPv6 seen by 0/321 (no v6 announced) [Confirmed] — RIPEstat routing-status, CAIDA AS Rank, bgp.he.net/AS406. No published peering policy; PeeringDB org page (org/20118) does not list AS406 and the direct AS406 network record returns HTTP 404

[Confirmed] — peeringdb.com/asn/406, peeringdb.com/org/20118

RPKI

not assessed — RIPEstat rpki-validation is per-prefix and was self-skipped (no prefix supplied); no per-prefix ROA data retrieved [Unknown] — RIPEstat rpki-validation

AS rank / cone

CAIDA AS Rank 54406; customer cone = singleton (1 ASN, 2 prefixes, 512 addresses); clique member = true [Confirmed] — CAIDA AS Rank (asrank.caida.org/asns/406)

Routing history

first seen 2021-02-23 (prefix 128.26.74.0/24); last seen 2026-07-02 (prefix 198.218.225.0/24) [Confirmed] — RIPEstat routing-status

Notable usage

no operator-official documentation of specific mission usage; third-party BGP data shows AS406 as a within-block DoD/USAF number carrying two small Air Force /24 blocks. bgp.he.net additionally flags a bogon-announcement observation (third-party, not attributed to the operator)

[Confirmed as third-party observation] — bgp.he.net/AS406

Geo footprint

United States — registrant Maxwell AFB, AL; abuse/admin/tech contact DISA-Columbus, Whitehall, OH [Confirmed]. CAIDA geolocates the ASN to ~36.2009 N, -84.7082 W (eastern TN/KY border), which does not match the registrant address — treat the coordinate as a low-confidence CAIDA-derived estimate, not a verified facility location

[Likely] — ARIN RDAP autnum/406 vcard, CAIDA AS Rank

Related ASNs

sibling within-block DoD ASNs in the AFCONC-BLOCK1-AS range (AS379, AS385, AS386, AS390, AS391, AS398, and others through AS508) attributed to Air Force Systems Networking [Likely] — ARIN RDAP block record (AS379, startAutnum 379 → endAutnum 508)

Allocation provenance

AS406 has no discrete RDAP object; it resolves into the shared AFCONC-BLOCK1-AS block record (handle AS379, startAutnum 379 → endAutnum 508). The 1989-08-04 registration is the block's TOP-LEVEL autnum event, recorded per project rule as a first-party RIR fact. Nested entity dates (REGIS10-ARIN reg 2009-06-24; 7ESG org reg 2008-06-05) are org/contact-record dates and were excluded as decoys

[Confirmed] — ARIN RDAP autnum/406

Analyst note

Encountered as an actively-routed within-block DoD/USAF stub ASN sharing a single legacy block registration; a small profile (2 /24s, single upstream, no cone) that is normal for a military stub, not a data-quality concern. Registry facts confirmed via ARIN RDAP; routing counts confirmed via RIPEstat and CAIDA. Sibling entries AS379–AS508 will share the identical allocated_date/last_changed/registrant since they resolve to one RDAP block record — not a copy-paste error.