AS668
Operated by DNIC-AS-00668 - United States Department of Defense (DoD).
Summary
- // analyst note
- Actively-routed DoD/DREN ASN, not dormant. Core identity, allocation date (1990-04-24, RIR top-level fact), and CAIDA metrics are Confirmed and cross-corroborated (RDAP + RIPEstat + CAIDA ASRank). CAIDA asnDegree is 38 total = 3 providers / 15 peers / 20 customers; the 3-provider count corroborates the ~3-upstream figure, though the specific upstream ASNs and a reliable peer sample could not be authoritatively enumerated (Unknown). Third-party BGP-aggregator prefix counts conflict (~187 vs ~217 IPv4) and are reported as a range rather than a single figure. RPKI posture is Unknown — the source RPKI call requires a per-prefix query that wasn't run. Registrant address (Columbus/Whitehall, OH) reflects DISA's admin office, not the network's actual geographic/routing footprint.
- // security note
- No CVE, botnet/C2 report, or named incident ties to AS668; CleanTalk shows 0.00% currently-active spam rate in its sampled block; HE BGP toolkit flags 'announces bogons' as a routing-hygiene issue, not confirmed abuse; Spamhaus could not be queried directly.
About this ASN.
AS668 (DNIC-AS-00668) is an active, currently-announcing autonomous system registered to the United States Department of Defense and operated as DREN — the Defense Research and Engineering Network — under DoD's High Performance Computing Modernization Program (HPCMP).
ARIN's registry records the ASN's top-level allocation as 1990-04-24, with the record last changed 2025-09-12. The registrant organization is USDDD (United States Department of Defense), administered through the DoD Network Information Center (DNIC) at DISA's Columbus, Ohio facility, which also handles abuse and administrative contacts.
DREN carries DoD's high-performance-computing research, engineering, and test-and-evaluation traffic. Its fourth-generation backbone (DREN 4, completed June 2023) links DoD Supercomputing Resource Centers and 150+ distributed sites at 1–100 Gbps, has run dual IPv4/IPv6 since 2003, and splits into a DoD-only (DO) segment with no internet routes and a Public External (PX) segment that peers and transits. A separately encrypted overlay, SDREN, carries classified traffic.
Unlike a dormant legacy ASN, AS668 is live in the global routing table: RIPEstat's snapshot lists prefixes including 128.160.0.0/17, 140.27.8.0/22, and 192.88.110.0/24, among others (the source list was truncated, so this is a partial sample). Third-party BGP aggregators disagree on the exact scale, reporting somewhere between roughly 187 and 217 IPv4 prefixes; CAIDA ranks it 1532 globally with a customer cone of 21 ASNs and 280 prefixes.
- Operator
- United States Department of Defense (DoD); ARIN registrant org USDDD, administered by the DoD Network Information Center (DNIC); operationally run as DREN under HPCMP [Confirmed] — https://rdap.arin.net/registry/autnum/668, https://www.hpc.mil/solution-areas/networking
- Country / RIR
- US, ARIN [Confirmed] — https://rdap.arin.net/registry/autnum/668
- Allocated
- 1990-04-24 (ARIN RDAP autnum TOP-LEVEL registration event, distinct from the entity/org-level dates nested under entities[]); last changed 2025-09-12 [Confirmed] — https://rdap.arin.net/registry/autnum/668
- Org status
- Active (ARIN RDAP autnum status); HPCMP is an active DoD/DoW program office established 1992, headquartered in Vicksburg, MS [Confirmed] — https://rdap.arin.net/registry/autnum/668, https://www.hpc.mil/solution-areas/networking
Security/abuse
no CVE, botnet/C2 report, or named incident ties to AS668 specifically; CleanTalk shows 0.00% currently-active spam rate in its sampled 6.0.0.0/8 block (2,398 of 16,777,216 IPs ever flagged historically, 0 currently active); HE's BGP toolkit flags AS668 as "announces bogons," a routing-hygiene flag rather than an abuse allegation; Spamhaus's authoritative lists could not be queried directly [Likely for clean abuse record; Unknown for Spamhaus] — https://cleantalk.org/blacklists/as668/6.0.0.0/8, https://bgp.he.net/AS668
Network & routing
- Network type
- government/research WAN — DoD HPC research, engineering, and test-and-evaluation network (DREN 4 backbone); PeeringDB self-lists as Educational/Research [Confirmed] — https://www.hpc.mil/solution-areas/networking/dren-sdren-network-capabilities-and-technical-overview, https://www.peeringdb.com/api/net?asn=668
- Routing status
- actively announced, not dormant — RIPEstat listed at least 7 prefixes as of 2026-07-18 (128.160.0.0/17, 199.209.144.0/22, 140.27.8.0/22, 192.88.110.0/24, 198.253.40.0/21, 214.29.136.0/21, 198.253.168.0/21); the source list was truncated mid-array so this is a partial sample, not the full announced set [Confirmed for sample; Unknown for total count] — https://stat.ripe.net/AS668
- CAIDA AS rank
- 1532; customer cone 21 ASNs / 280 prefixes / 3,457,792 addresses; asnDegree 38 total = 3 providers / 15 peers / 20 customers [Confirmed] — https://asrank.caida.org/asns/668
- Upstreams / peer sample
- CAIDA reports 3 providers, corroborating the WebSearch-derived "~3 upstreams" figure; the specific upstream ASNs and a reliable per-ASN peer sample could not be attributed to an authoritative source, so the enumerated identities stay Unknown while the ~3 count is Confirmed [Confirmed for count; Unknown for enumerated ASNs] — https://asrank.caida.org/asns/668, https://bgp.he.net/AS668
- RPKI
- Unknown at the per-prefix level — the RIPEstat rpki-validation call was self-skipped ("no --prefix supplied"), and RPKI validity is assessed per prefix, not per ASN; HE's BGP toolkit separately reports zero RPKI-valid originations as of 2026-07-18 [Unknown for posture; Confirmed for the zero-valid flag] — https://stat.ripe.net/AS668, https://bgp.he.net/AS668
- Peering policy
- no dedicated peering-policy page found on hpc.mil; a self-managed PeeringDB record (net "DREN (aka HPCMP)", org id 1947) lists policy_general = Open, favoring peers supporting IPv4+IPv6, unicast+multicast, and 9K jumbo MTU [Likely] — https://www.peeringdb.com/api/net?asn=668
- Notable usage
- DREN 4 backbone (completed June 2023) connects DoD Supercomputing Resource Centers and 150+ distributed sites at 1–100 Gbps, fully dual-stack IPv4/IPv6 since 2003 (DoD's first IPv6 network); splits into a DoD-only (DO) segment with no internet routes and a Public External (PX) peering/transit segment; hosts SDREN, an NSA Type-1-encrypted overlay[Confirmed] — https://www.hpc.mil/solution-areas/networking/dren-sdren-network-capabilities-and-technical-overview
- ASN / name
- AS668 — DNIC-AS-00668 [Confirmed] — https://rdap.arin.net/registry/autnum/668
- Prefix counts
- third-party BGP aggregators disagree — one synthesis reports 187 IPv4 / 2 IPv6 originated (310 total incl. non-originated announcements); another reports 217 IPv4 / 140 IPv6. Treat as a conflicting range, not a fixed figure [Likely] — https://bgp.he.net/AS668, https://bgp.tools/as/668
- Address estimate
- ~2,656,000 IPv4 addresses per BGP aggregator snapshots; CAIDA's customer-cone metric (a different measure — cone size, not announced space) is 3,457,792 addresses [Likely] — https://bgp.he.net/AS668, https://asrank.caida.org/asns/668
- Registrant / admin address
- USDDD org address 3990 E. Broad Street, Columbus, OH 43218; abuse/NOC (MIL-HSTMST-ARIN) and admin/technical (REGIS10-ARIN) contacts both list DISA-Columbus, 300 North James Road, Whitehall, OH 43213 — this is DISA's registration/admin office, not the network's physical or routing footprint[Confirmed] — https://rdap.arin.net/registry/autnum/668
- Disambiguation
- AS668 is NOT AS8003, the ASN behind the widely-reported 2021 "Pentagon activates dormant IPv4 space / world's largest honeypot" story (7.0.0.0/8, 11.0.0.0/8, 22.0.0.0/8 via the GRSCORP pilot) [Confirmed] — https://mailman.nanog.org/pipermail/nanog/2021-March/212569.html, https://www.theregister.com/2021/04/26/defense_department_ipv6/
What this network routes.
- 131.214.0.0/16
- 131.218.0.0/16
- 164.49.0.0/16
- 164.191.0.0/16
- 140.5.0.0/16
- 131.122.0.0/16
- 131.121.0.0/16
- 137.128.0.0/16
- 140.32.0.0/16
- 144.3.0.0/16
- 130.163.0.0/16
- 163.240.0.0/16
- 129.92.0.0/16
- 147.227.0.0/16
- 132.45.0.0/16
- 158.12.0.0/16
- 140.6.0.0/16
- 129.229.0.0/16
- 131.120.0.0/16
- 132.193.0.0/16
- 140.25.0.0/16
- 157.187.0.0/16
- 6.4.0.0/16
- 140.178.0.0/16
- 155.154.0.0/16
- 164.172.0.0/16
- 128.132.0.0/16
- 130.109.0.0/16
- 140.31.0.0/16
- 155.141.0.0/16
- 150.125.0.0/16
- 143.56.0.0/16
- 164.173.0.0/16
- 128.160.0.0/17
- 155.148.0.0/17
- 6.3.0.0/17
- 131.250.0.0/17
- 131.250.128.0/18
- 134.166.0.0/18
- 6.2.0.0/18
- 155.148.128.0/18
- 131.92.192.0/18
- 147.241.192.0/18
- 134.166.64.0/18
- 198.14.32.0/19
- 6.2.64.0/19
- 155.148.192.0/19
- 198.253.128.0/19
- 147.248.48.0/20
- 131.250.192.0/20
- 198.253.192.0/20
- 164.122.0.0/20
- 134.166.144.0/20
- 199.31.16.0/20
- 155.148.224.0/20
- 147.241.128.0/21
- 131.92.168.0/21
- 147.241.160.0/21
- 198.253.64.0/21
- 131.92.136.0/21
- 147.241.168.0/21
- 155.29.152.0/21
- 155.148.240.0/21
- 199.208.32.0/21
- 131.92.144.0/21
- 147.241.88.0/21
- 147.241.176.0/21
- 199.209.144.0/21
- 214.9.96.0/21
- 198.154.16.0/21
- 147.241.72.0/21
- 214.29.136.0/21
- 147.241.80.0/21
- 198.253.168.0/21
- 198.253.40.0/21
- 199.209.240.0/21
- 199.209.248.0/21
- 204.222.64.0/21
- 147.241.56.0/21
- 147.241.120.0/22
- 6.2.104.0/22
- 131.92.176.0/22
- 6.2.96.0/22
- 147.241.96.0/22
- 140.27.8.0/22
- 147.241.104.0/22
- 199.209.144.0/22
- 147.241.112.0/22
- 131.92.132.0/22
- 6.2.120.0/22
- 134.166.128.0/22
- 6.2.112.0/22
- 192.171.8.0/22
- 131.92.164.0/22
- 205.66.100.0/22
- 198.154.176.0/23
- 131.92.180.0/23
- 204.222.8.0/23
- 131.92.184.0/23
- 198.154.174.0/23
- 206.37.30.0/23
- 199.123.88.0/23
- 131.92.182.0/23
- 140.27.14.0/23
- 199.123.86.0/23
- 198.97.234.0/23
- 198.154.24.0/23
- 140.27.10.0/23
- 204.44.136.0/23
- 131.92.162.0/23
- 204.222.6.0/23
- 134.166.132.0/23
- 134.166.136.0/23
- 140.27.12.0/23
- 199.209.150.0/23
- 206.37.28.0/23
- 199.10.20.0/24
- 205.67.232.0/24
- 192.5.17.0/24
- 214.27.178.0/24
- 147.241.118.0/24
- 199.9.0.0/24
- 192.67.80.0/24
- 204.238.129.0/24
- 192.12.124.0/24
- 199.10.148.0/24
- 192.16.167.0/24
- 131.92.131.0/24
- 214.9.94.0/24
- 206.37.224.0/24
- 192.31.147.0/24
- 199.31.107.0/24
- 192.100.92.0/24
- 205.111.251.0/24
- 134.166.138.0/24
- 206.37.252.0/24
- 192.86.66.0/24
- 199.10.19.0/24
- 192.171.12.0/24
- 198.253.253.0/24
- 6.11.254.0/24
- 199.10.18.0/24
- 192.160.159.0/24
- 192.5.22.0/24
- 192.175.87.0/24
- 198.253.252.0/24
- 192.160.158.0/24
- 192.5.21.0/24
- 214.9.95.0/24
- 199.10.62.0/24
- 199.10.127.0/24
- 199.123.113.0/24
- 140.25.98.0/24
- 192.42.141.0/24
- 199.209.149.0/24
- 199.10.17.0/24
- 192.190.228.0/24
- 199.9.1.0/24
- 192.88.110.0/24
- 192.5.23.0/24
- 207.133.211.0/24
- 192.5.148.0/24
- 134.166.135.0/24
- 199.208.158.0/24
- 192.48.242.0/24
- 198.253.110.0/24
- 134.164.220.0/24
- 207.132.147.0/24
- 214.10.25.0/24
- 6.11.1.0/24
- 205.111.252.0/24
- 198.97.236.0/24
- 199.123.105.0/24
- 205.68.95.0/24
- 214.9.92.0/24
- 192.190.229.0/24
- 192.55.117.0/24
- 214.4.136.0/24
- 131.92.186.0/24
- 6.15.100.0/24
- 199.10.16.0/24
- 199.123.90.0/24
- 192.58.244.0/24
- 192.67.93.0/24
- 198.154.173.0/24
- 198.253.56.0/24
- 199.9.2.0/24
- 6.11.51.0/24
- 147.241.126.0/24
- 134.166.134.0/24
- 6.11.250.0/24
- 192.138.87.0/24
- 199.10.233.0/24
- 2001:480::/32
Who it talks to.
| ASN | Operator | Role |
|---|---|---|
| AS6939 | HURRICANE - Hurricane Electric LLC | upstream |
| AS701 | UUNET - Verizon Business | upstream |
| AS2914 | NTT-DATA-2914 - NTT America, Inc. | upstream |
| AS11537 | INTERNET2-RESEARCH-EDU - Internet2 | upstream |
| AS7575 | AARNET-AS-AP - Australian Academic and Research Network (AARNet) | upstream |
| AS35889 | GOREX - University of Hawaii | upstream |
| AS10764 | STARTAP - University of Illinois | upstream |
| AS22335 | MREN - Metropolitan Research and Education Network | upstream |
| AS6360 | UNIVHAWAII - University of Hawaii | upstream |
| AS518 | DNIC-AS-00518 - United States Department of Defense (DoD) | downstream |
| AS121 | DNIC-AS-00121 - United States Department of Defense (DoD) | downstream |
| AS687 | DNIC-AS-00687 - United States Department of Defense (DoD) | downstream |
| AS22 | DNIC-AS-00022 - Navy Network Information Center (NNIC) | downstream |
| AS289 | DNIC-AS-00289 - Headquarters, USAISC | downstream |
| AS13 | DNIC-AS-00013 - Headquarters, USAISC | downstream |
| AS252 | DNIC-AS-00252 - Headquarters, USAISC | downstream |
| AS5957 | DNIC-ASBLK-05800-06055 - United States Department of Defense (DoD) | downstream |
| AS6009 | DNIC-ASBLK-05800-06055 - United States Department of Defense (DoD) | downstream |
| AS37 | DNIC-AS-00037 - Navy Network Information Center (NNIC) | downstream |
| AS84 | DNIC-AS-00084 - Navy Network Information Center (NNIC) | downstream |