AS527
Operated by DNIC-AS-00527 - United States Department of Defense (DoD).
Summary
- // analyst note
- Dormant DoD/DNIC legacy ASN, unannounced since August 2018. A third-party 'ANSBACH-GW1-AS' name association was found to rest on a mismatched citation (referencing a different AS number) and was excluded as unreliable.
- // security note
- NEUTRAL/DATED: no notable public abuse signal found as of 2026-07-10; not found in Spamhaus threat-intel resources or NANOG archives.
About this ASN.
AS527 is a legacy ARIN autonomous system number registered to the United States Department of Defense (DoD) under the handle DNIC-AS-00527. DNIC stands for the DoD Network Information Center, the registration function operated by the Defense Information Systems Agency (DISA) for the Department's block of ASNs; the registrant organization on file is the U.S. Department of Defense (org handle USDDD), with an administrative address in Columbus, Ohio, and operational points of contact based at DISA-Columbus in Whitehall, Ohio. The ARIN registry marks AS527 as active, but every routing data source consulted agrees it is currently unannounced: zero IPv4 and IPv6 prefixes, zero RIS peers observing it, and a CAIDA customer cone limited to itself. Historically, AS527 did originate exactly one IPv4 /24 (215.65.87.0/24) between May 2011 and August 2018, after which it dropped out of the global routing table entirely and has stayed dark since; bgp.he.net independently corroborates that it "has not been visible in the global routing table since August 11, 2018" and records a single historical BGP peer, AS27065, itself another DoD-associated ASN. No public peering policy exists — DoD network interconnection is governed internally by the DISN Connection Process Guide rather than a published BGP peering policy — and no notable public abuse or security signal was found for this ASN as of research date.
- Operator
- United States Department of Defense (DoD); RIR handle DNIC-AS-00527, operated via the DoD Network Information Center (DISA) [Confirmed] — https://rdap.arin.net/registry/autnum/527
- Country / RIR
- US, ARIN [Confirmed] — https://rdap.arin.net/registry/autnum/527
- Allocated
- 1989-09-29 (ARIN RDAP autnum top-level registration event, a first-party RIR fact — NOT an entity/POC sub-record date); last changed 2025-09-12 [Confirmed] — https://rdap.arin.net/registry/autnum/527
- Org status
- active per ARIN RDAP (status: active); registrant is a live, ongoing U.S. federal government agency (DoD), not defunct or transferred [Confirmed] — https://rdap.arin.net/registry/autnum/527
- Contacts
- MIL-HSTMST-ARIN (NOC/technical/abuse) — disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil, +1-844-347-2457 ext 2; REGIS10-ARIN (administrative/technical) — disa.columbus.ns.mbx.arin-registrations@mail.mil; both at DISA-Columbus, 300 North James Road, Whitehall, OH 43213[Confirmed] — https://rdap.arin.net/registry/autnum/527
Security/abuse context (NEUTRAL, DATED)
no notable public abuse signal found as of 2026-07-10 across Spamhaus threat-intel resources and NANOG archives; consistent with a legacy, unannounced ASN absent from route-based abuse feeds
Network & routing
- Network type
- U.S. government/military network infrastructure administered by DISA; not a commercial ISP or transit provider [Likely] — https://en.wikipedia.org/wiki/NIPRNet, https://www.disa.mil/
- Size
- currently unannounced — 0 IPv4 prefixes / 0 addresses, 0 IPv6 prefixes; CAIDA customer cone = 1 ASN (itself), 0 prefixes, 0 addresses [Confirmed] — https://stat.ripe.net/AS527, https://api.asrank.caida.org/v2/restful/asns/527
- Routing/peering
- NOT currently announced — 0 of 327 v4 / 0 of 321 v6 RIS peers seeing it; CAIDA degree total 0 (customer 0, peer 0, provider 0); no public peering policy published (DoD interconnection governed by the internal DISN Connection Process Guide / CAP, not open BGP peering)[Confirmed] — https://stat.ripe.net/AS527, https://dl.dod.cyber.mil/wp-content/uploads/connect/CPG/ConnProcGuide.html
- RPKI
- not assessable — AS527 announces no prefixes, so there are no ROAs to validate [Confirmed] — https://stat.ripe.net/AS527
- Notable usage
- historically originated exactly one IPv4 /24, 215.65.87.0/24, from 2011-05-25 to 2018-08-17; unannounced since (bgp.he.net: "has not been visible in the global routing table since August 11, 2018"); one historically observed BGP peer, AS27065, also DoD-associated[Confirmed] — https://bgp.he.net/AS527, https://stat.ripe.net/AS527
- Related ASNs
- AS27065 (historically observed BGP peer, also DoD-associated) [Likely] — https://bgp.he.net/AS527
- Analyst note
- DoD/DNIC legacy ASN, dormant since 2018. No dedicated commercial-style website exists; nic.mil (DoD registration portal) is restricted to internal DoD network access and was unreachable from the public internet during research; disa.mil covers DISA's general mission but has no AS527-specific content. A third-party source (scamalytics-derived) associated the name "ANSBACH-GW1-AS" with this ASN, but that name conflicts with the authoritative ARIN RDAP record (DNIC-AS-00527) and its supporting citation actually referenced a different AS number — treated as unreliable and excluded.