AS439

AS439 is a legacy ARIN-registered autonomous system number held by the U.S. Air Force. It is not an independently provisioned network but one number inside a contiguous ARIN flat-registry block, AS379–AS508, returned under a single autnum record whose handle reads AS379 and whose name is AFCONC-BLOCK1-AS. The registrant organization is "Air Force Systems Networking" (ARIN org handle 7ESG) at Maxwell AFB, Gunther Annex, Alabama; the administrative, technical, and abuse point of contact is DISA-Columbus (Defense Information Systems Agency) in Whitehall, Ohio. The central triage fact is that AS439 is dormant: RIPEstat, CAIDA AS Rank, and the canonical RDAP/routing data all agree it announces zero IPv4 and zero IPv6 prefixes today, has no visible peers, no upstreams, no customers, and no IXP presence. CAIDA ranks it 79459 with a singleton customer cone (itself, 0 prefixes, 0 addresses) and marks it seen=false — not observed in current topology. Historical routing shows a single brief origination: 199.251.3.0/24 seen originated by AS439 from 2001-09-26 to 2001-10-23, and nothing since. RPKI posture is not assessable because there are no active originations and therefore no ROAs to validate. No public abuse, malware, botnet, C2, or BGP-hijack signal was found tied specifically to AS439 as of 2026-07-02, across threat-intel feeds, abuse databases, and NANOG archives — consistent with a dormant administrative allocation held by a military operator with limited public transparency.

Operator

Air Force Systems Networking (U.S. Air Force / U.S. Department of Defense; ARIN org handle 7ESG) [Confirmed] — ARIN RDAP autnum/439 registrant vcard

Country / RIR

US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin); CAIDA country.iso US

Allocated

1989-08-04 (ARIN registry date from the autnum top-level registration event — a first-party RIR fact, NOT an IEEE date; this is a block-level record for AS379–AS508); last changed 2008-06-06 [Confirmed] — ARIN RDAP autnum/439 top-level events

Org status

active/allocated under ARIN (RDAP status: active), but not currently visible in the global routing table; a legitimately assigned but unadvertised ASN within an active DoD block [Confirmed] — ARIN RDAP autnum/439, RIPEstat as-overview (announced: false)

Contacts

abuse/admin/tech = disa.columbus.ns.mbx.arin-registrations@mail.mil, +1-844-347-2457 ext.2, DISA-Columbus, 300 North James Road, Whitehall, OH 43213; registrant address 501 East Moore Drive, Bldg 884 Rm 1100, Gunther Annex, Maxwell AFB, AL 36114 [Confirmed] — ARIN RDAP autnum/439

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-07-02 — no threat-intel, malware/botnet/C2, BGP-hijack, abuse-feed (AbuseIPDB/Spamhaus/SpamRats), or NANOG-archive listing tied to AS439; consistent with a dormant DoD administrative allocation

Network & routing

Network type

military / U.S. federal government (DoD — U.S. Air Force, administered via DISA-Columbus); not a commercial ISP, transit, or content network [Confirmed] — ARIN RDAP autnum/439

Size

dormant — 0 IPv4 prefixes / 0 IPv4 addresses and 0 IPv6 prefixes; customer cone = 1 ASN (itself), 0 prefixes, 0 addresses [Confirmed] — RIPEstat routing-status / announced-prefixes; CAIDA AS Rank (2026-07)

Routing/peering

NOT announced — 0 RIS peers seeing it (0/324 v4, 0/320 v6); CAIDA degree total 0 (customer 0, peer 0, provider 0); RIPEstat observed_neighbours 0; no upstreams or peers visible [Confirmed]. No PeeringDB record (peeringdb.com/asn/439 returns 404); no published peering policy

[Confirmed] — RIPEstat routing-status, CAIDA AS Rank, PeeringDB

RPKI

not assessable — AS439 announces no prefixes, so there are no ROAs to validate (RIPEstat rpki-validation skipped: no prefix supplied) [Unknown] — RIPEstat rpki-validation

Notable usage

one number within the AFCONC-BLOCK1-AS block (AS379–AS508) registered as a single ARIN record to the Air Force. Historically originated a single prefix, 199.251.3.0/24, seen only 2001-09-26 to 2001-10-23; unrouted since [Confirmed] — ARIN RDAP autnum/439, RIPEstat routing-status

Related ASNs

block AS379–AS508 (AFCONC-BLOCK1-AS) shares one ARIN record [Confirmed] — ARIN RDAP autnum/439 (startAutnum 379, endAutnum 508)

Analyst note

The RDAP record queried for AS439 is a block-level flat-registry object (handle AS379, name AFCONC-BLOCK1-AS, range 379–508) returned for any ASN in that range; allocated_date and registrant apply to the whole block including AS439. Top-level events used; nested entity events (org 7ESG registered 2008-06-05, REGIS10-ARIN 2009-06-24) are decoy contact/org dates and were NOT used for allocated_date.