Autonomous system detail

AS666

Not announced

Operated by CTNOSC-ASN-666 - Headquarters, USAISC.

Summary

// analyst note
RDAP autnum status reads 'active' but live BGP presence ended in June 2022 — dormant legacy DoD ASN, not an operating network. Entity-level dates in the RDAP payload (technical/abuse contact REGIS10-ARIN, registrant org HEADQU-3) were excluded as decoys in favor of the autnum top-level registration event.
// security note
No notable public abuse signal found as of 2026-07-18: absent from Spamhaus ASN-DROP; no BGP hijack/route-leak reports found.
IPv4 prefixes
0
~0 addresses
IPv6 prefixes
0
Peer networks
0
0 up · 0 down
IANA block
1-1876
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: Medium

AS666 is a legacy U.S. Army autonomous system, registered to Headquarters, USAISC in 1990, that currently announces zero prefixes and is not visible on the live BGP table. ARIN's autnum status reads "active," but that reflects the registration remaining valid administratively, not current routing activity — RIPEstat and CAIDA both confirm it originates nothing today.

The registration traces to CTNOSC (Consolidated Theater Network Operations and Security Center), a network-defense element inside the U.S. Army's network-operations lineage. USAISC (1984) evolved into U.S. Army Signal Command (1996) and then NETCOM — Army Network Enterprise Technology Command (2002–present) — under U.S. Army Cyber Command, headquartered at Fort Huachuca, AZ. ARIN's org record was never updated past the 1984-era "USAISC" name.

RIS BGP archives show AS666 did announce prefixes for a window between March 2020 and June 2022 (first seen 185.35.136.0/22, last seen 103.79.72.0/24), but no RIS peer currently sees any route from it — 0 of 325 IPv4 peers and 0 of 320 IPv6 peers. CAIDA ranks it 79,459 globally, with a customer cone of just itself: 0 prefixes, 0 addresses.

PeeringDB lists an "Open" peering policy for AS666, but the same record shows zero prefixes, no IXP presence, and traffic "Not Disclosed" — consistent with an inactive/placeholder listing rather than an active peering relationship. No dedicated public network-services page for this ASN could be located on any official Army domain (netcom.army.mil returned HTTP 403 on direct fetch).

Operator
Headquarters, USAISC (U.S. Army; ARIN org handle HEADQU-3), lineage now NETCOM / U.S. Army Cyber Command, Fort Huachuca, AZ [Confirmed] — ARIN RDAP autnum/entity records
Country / RIR
US, ARIN [Confirmed] — RIPEstat abuse-contact-finder (authoritative_rir: arin)
Allocated
1990-04-19 (ARIN autnum top-level registration event); last changed 2012-11-06 [Confirmed] — ARIN RDAP autnum top-level events (entity-level dates for the technical/abuse contact and registrant org records were identified as decoys and excluded)
Org status
command lineage (NETCOM/Army Cyber Command) is active and operating; the AS666 registration itself is stale — registrant name never migrated off "USAISC," last updated 2012-11-06, zero announced prefixes [Likely] — army.mil/netcom, ARIN RDAP

Security/abuse context

no notable public abuse signal as of 2026-07-18 — absent from Spamhaus ASN-DROP; one unrelated 2014 NANOG-archive troll email spoofed an "AS666 NOC" signature, not actual abuse from this ASN

[Confirmed] — spamhaus.org/drop/asndrop.txt, seclists.org/nanog/2014/Aug/311

Abuse contact

disa.columbus.ns.mbx.arin-registrations@mail.mil; +1-844-347-2457 ext 2; DISA-Columbus, 300 North James Road, Whitehall, OH 43213

[Confirmed] — RIPEstat abuse-contact-finder, ARIN RDAP

Network & routing

Network type
U.S. government/military (Army) network, not a commercial ISP; legacy/dormant on the public-routing side [Confirmed] — PeeringDB, ARIN RDAP
Size
dormant — 0 IPv4 prefixes / 0 addresses, 0 IPv6 prefixes; customer cone = 1 ASN (itself), 0 prefixes, 0 addresses [Confirmed] — RIPEstat routing-status, CAIDA AS Rank (2026-07-18)
Routing/peering
NOT currently announced — 0/325 IPv4 RIS peers, 0/320 IPv6 RIS peers see it; CAIDA degree total 0 (customer 0, peer 0, provider 0); historical announcement window 2020-03-10 to 2022-06-22 [Confirmed] — RIPEstat routing-status, CAIDA AS Rank
PeeringDB listing
policy "Open," but 0 prefixes, no IX presence, traffic not disclosed — read as an inactive/placeholder entry [Confirmed] — https://www.peeringdb.com/asn/666
RPKI
not assessable — zero prefixes currently announced, so no ROA to validate [Unknown] — RIPEstat rpki-validation (skipped, requires a prefix parameter)
Notable usage
no current public-routing usage; historical BGP window only (2020–2022) [Confirmed]. Official website content for the operating command is unverified — netcom.army.mil returned HTTP 403 on direct fetch [Unknown] — https://www.netcom.army.mil/
Related ASNs
none identified in this research pass [Unknown]
Analyst note
RDAP status reads "active" but live BGP presence ended June 2022; treat as a dormant legacy DoD registration, not an operating network.
[ 02 ] — Announced prefixes

What this network routes.

0 prefixes total · RIPEstat data · cached, not real-time
// IPv4 prefixes0
No IPv4 prefixes announced.
// IPv6 prefixes0
No IPv6 prefixes announced.
[ 03 ] — Notable peers & upstreams

Who it talks to.

0 observed neighbours
Neighbour data unavailable from public BGP collectors.