AS408

AS408 is a legacy autonomous system number registered under ARIN and administered as part of a shared U.S. military block. RDAP does not return a discrete AS408 object; the query resolves to the parent block record — handle AS379, name AFCONC-BLOCK1-AS, spanning startAutnum 379 through endAutnum 508 — whose registrant entity is Air Force Systems Networking (ARIN OrgId 7ESG, listed at Maxwell AFB, AL) with administrative, technical, and abuse contact handled by a DISA-Columbus "Registration" group in Whitehall, OH. Unlike some dark siblings in the same block, AS408 is actively routed: RIPEstat shows it announced as of 2026-07-02, seen by 322 of 323 IPv4 RIS peers, originating exactly one prefix — 139.242.72.0/24 (256 addresses) — and no IPv6. CAIDA characterizes it as a single-homed stub: AS rank 67,700, a singleton customer cone, and an AS degree of one (one provider, zero peers, zero customers), geolocated near Columbus, OH. Routing history reaches back to a first-seen origination in 2001 (then 128.236.0.0/16). No notable public abuse signal was found as of 2026-07-02: no Spamhaus DROP/ASN-DROP listing, no NANOG incident thread, and no corroborated hijack reports. One routing-hygiene note — bgp.he.net tags the announced /24 as a bogon — is a legacy-allocation filter artifact, not an independently corroborated abuse signal, and no other source associates the prefix with malicious activity.

Operator

Air Force Systems Networking (ARIN OrgId 7ESG); AS408 is a within-block number of the shared registration handle AS379 / AFCONC-BLOCK1-AS (AS379–AS508) [Confirmed] — ARIN RDAP autnum/408 (rdap.arin.net/registry/autnum/408)

Country / RIR

US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin)

Allocated

1989-08-04 (ARIN top-level autnum registration event on the parent block record; a first-party RIR fact, NOT an IEEE date — IEEE publishes no ASN dates); block last changed 2008-06-06 [Confirmed] — ARIN RDAP autnum top-level events[]

Org status

active per ARIN RDAP status array; no operator-official (DISA/Air Force) page confirms or denies current use of AS408 by name [Confirmed for RDAP status; Unknown for operator-published confirmation] — ARIN RDAP autnum/408

Contacts

abuse disa.columbus.ns.mbx.arin-registrations@mail.mil (DISA-Columbus, Whitehall, OH 43213); registrant address 501 East Moore Dr., Bldg 884, Rm 1100, Gunther Annex, Maxwell AFB, AL 36114 [Confirmed] — ARIN RDAP autnum/408 / RIPEstat abuse-contact-finder

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-07-02 — not on Spamhaus DROP/ASN-DROP, no NANOG incident threads, no corroborated hijack/abuse reports; AbuseIPDB and Talos returned 403 to automated fetch (Unknown, not confirmed-clean). bgp.he.net tags the /24 as a bogon — a routing-hygiene/legacy-allocation artifact, not a corroborated abuse signal [Confirmed for absence-of-listing; Likely for the bogon tag being hygiene] — bgp.he.net/AS408, spamhaus.org/drop

Network & routing

Network type

U.S. government / military network — Department of Defense / U.S. Air Force, administered by DISA under the DODIN framework; not a commercial ISP, hosting, content, or transit network [Confirmed] — ARIN RDAP autnum/408, disa.mil

Size

1 IPv4 prefix / 256 IPv4 addresses (139.242.72.0/24); 0 IPv6 prefixes; CAIDA customer cone = 1 ASN, 1 prefix, 256 addresses (stub/edge) [Confirmed] — RIPEstat routing-status / CAIDA AS Rank

Routing/peering

announced (active) — 322/323 IPv4 RIS peers see it, 0/321 IPv6; CAIDA AS degree total 1 (customer 0, peer 0, provider 1); observed_neighbours 1; first seen 2001-09-06 (128.236.0.0/16), last seen 2026-07-02 (139.242.72.0/24)

[Confirmed] — RIPEstat routing-status / CAIDA AS Rank. Named upstream ASN not in source data [Unknown]

Peering policy

none published — no PeeringDB network record for AS408 (404); DoD external interconnection is centrally gated via approved gateways, not per-ASN publicized peering [Confirmed (absence)] — peeringdb.com/asn/408

RPKI

not evaluated — RIPEstat rpki-validation was skipped (no --prefix supplied); a per-prefix ROA check against 139.242.72.0/24 was not run this pass [Unknown]

Notable usage

actively announces 139.242.72.0/24 via a single upstream (reported as DoD, AS27064, by third-party sources) — routing-topology data, not operator-published [Likely] — ipinfo.io/AS408, asrank.caida.org/asns/408

Related ASNs

sibling within-block numbers of AFCONC-BLOCK1-AS (AS379–AS508), incl. AS379, AS385, AS386, AS389, AS390, AS407 already enriched in this pipeline [Confirmed] — ARIN RDAP autnum/408

Analyst note

Encountered as an actively-routed member of a shared legacy DoD ARIN block; RDAP resolves to the block-level AS379 record whose top-level registration event (1989-08-04) is the authoritative allocated_date for AS408. Small single-homed stub; no abuse signal.