Autonomous system detail

AS668

Announced

Operated by DNIC-AS-00668 - United States Department of Defense (DoD).

Summary

// analyst note
Actively-routed DoD/DREN ASN, not dormant. Core identity, allocation date (1990-04-24, RIR top-level fact), and CAIDA metrics are Confirmed and cross-corroborated (RDAP + RIPEstat + CAIDA ASRank). CAIDA asnDegree is 38 total = 3 providers / 15 peers / 20 customers; the 3-provider count corroborates the ~3-upstream figure, though the specific upstream ASNs and a reliable peer sample could not be authoritatively enumerated (Unknown). Third-party BGP-aggregator prefix counts conflict (~187 vs ~217 IPv4) and are reported as a range rather than a single figure. RPKI posture is Unknown — the source RPKI call requires a per-prefix query that wasn't run. Registrant address (Columbus/Whitehall, OH) reflects DISA's admin office, not the network's actual geographic/routing footprint.
// security note
No CVE, botnet/C2 report, or named incident ties to AS668; CleanTalk shows 0.00% currently-active spam rate in its sampled block; HE BGP toolkit flags 'announces bogons' as a routing-hygiene issue, not confirmed abuse; Spamhaus could not be queried directly.
IPv4 prefixes
193
~2.6M addresses
IPv6 prefixes
1
announced
Peer networks
37
9 up · 27 down
IANA block
1-1876
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: Medium

AS668 (DNIC-AS-00668) is an active, currently-announcing autonomous system registered to the United States Department of Defense and operated as DREN — the Defense Research and Engineering Network — under DoD's High Performance Computing Modernization Program (HPCMP).

ARIN's registry records the ASN's top-level allocation as 1990-04-24, with the record last changed 2025-09-12. The registrant organization is USDDD (United States Department of Defense), administered through the DoD Network Information Center (DNIC) at DISA's Columbus, Ohio facility, which also handles abuse and administrative contacts.

DREN carries DoD's high-performance-computing research, engineering, and test-and-evaluation traffic. Its fourth-generation backbone (DREN 4, completed June 2023) links DoD Supercomputing Resource Centers and 150+ distributed sites at 1–100 Gbps, has run dual IPv4/IPv6 since 2003, and splits into a DoD-only (DO) segment with no internet routes and a Public External (PX) segment that peers and transits. A separately encrypted overlay, SDREN, carries classified traffic.

Unlike a dormant legacy ASN, AS668 is live in the global routing table: RIPEstat's snapshot lists prefixes including 128.160.0.0/17, 140.27.8.0/22, and 192.88.110.0/24, among others (the source list was truncated, so this is a partial sample). Third-party BGP aggregators disagree on the exact scale, reporting somewhere between roughly 187 and 217 IPv4 prefixes; CAIDA ranks it 1532 globally with a customer cone of 21 ASNs and 280 prefixes.

Operator
United States Department of Defense (DoD); ARIN registrant org USDDD, administered by the DoD Network Information Center (DNIC); operationally run as DREN under HPCMP [Confirmed] — https://rdap.arin.net/registry/autnum/668, https://www.hpc.mil/solution-areas/networking
Country / RIR
US, ARIN [Confirmed] — https://rdap.arin.net/registry/autnum/668
Allocated
1990-04-24 (ARIN RDAP autnum TOP-LEVEL registration event, distinct from the entity/org-level dates nested under entities[]); last changed 2025-09-12 [Confirmed] — https://rdap.arin.net/registry/autnum/668
Org status
Active (ARIN RDAP autnum status); HPCMP is an active DoD/DoW program office established 1992, headquartered in Vicksburg, MS [Confirmed] — https://rdap.arin.net/registry/autnum/668, https://www.hpc.mil/solution-areas/networking

Security/abuse

no CVE, botnet/C2 report, or named incident ties to AS668 specifically; CleanTalk shows 0.00% currently-active spam rate in its sampled 6.0.0.0/8 block (2,398 of 16,777,216 IPs ever flagged historically, 0 currently active); HE's BGP toolkit flags AS668 as "announces bogons," a routing-hygiene flag rather than an abuse allegation; Spamhaus's authoritative lists could not be queried directly [Likely for clean abuse record; Unknown for Spamhaus] — https://cleantalk.org/blacklists/as668/6.0.0.0/8, https://bgp.he.net/AS668

Network & routing

Network type
government/research WAN — DoD HPC research, engineering, and test-and-evaluation network (DREN 4 backbone); PeeringDB self-lists as Educational/Research [Confirmed] — https://www.hpc.mil/solution-areas/networking/dren-sdren-network-capabilities-and-technical-overview, https://www.peeringdb.com/api/net?asn=668
Routing status
actively announced, not dormant — RIPEstat listed at least 7 prefixes as of 2026-07-18 (128.160.0.0/17, 199.209.144.0/22, 140.27.8.0/22, 192.88.110.0/24, 198.253.40.0/21, 214.29.136.0/21, 198.253.168.0/21); the source list was truncated mid-array so this is a partial sample, not the full announced set [Confirmed for sample; Unknown for total count] — https://stat.ripe.net/AS668
CAIDA AS rank
1532; customer cone 21 ASNs / 280 prefixes / 3,457,792 addresses; asnDegree 38 total = 3 providers / 15 peers / 20 customers [Confirmed] — https://asrank.caida.org/asns/668
Upstreams / peer sample
CAIDA reports 3 providers, corroborating the WebSearch-derived "~3 upstreams" figure; the specific upstream ASNs and a reliable per-ASN peer sample could not be attributed to an authoritative source, so the enumerated identities stay Unknown while the ~3 count is Confirmed [Confirmed for count; Unknown for enumerated ASNs] — https://asrank.caida.org/asns/668, https://bgp.he.net/AS668
RPKI
Unknown at the per-prefix level — the RIPEstat rpki-validation call was self-skipped ("no --prefix supplied"), and RPKI validity is assessed per prefix, not per ASN; HE's BGP toolkit separately reports zero RPKI-valid originations as of 2026-07-18 [Unknown for posture; Confirmed for the zero-valid flag] — https://stat.ripe.net/AS668, https://bgp.he.net/AS668
Peering policy
no dedicated peering-policy page found on hpc.mil; a self-managed PeeringDB record (net "DREN (aka HPCMP)", org id 1947) lists policy_general = Open, favoring peers supporting IPv4+IPv6, unicast+multicast, and 9K jumbo MTU [Likely] — https://www.peeringdb.com/api/net?asn=668
Notable usage
DREN 4 backbone (completed June 2023) connects DoD Supercomputing Resource Centers and 150+ distributed sites at 1–100 Gbps, fully dual-stack IPv4/IPv6 since 2003 (DoD's first IPv6 network); splits into a DoD-only (DO) segment with no internet routes and a Public External (PX) peering/transit segment; hosts SDREN, an NSA Type-1-encrypted overlay
[Confirmed] — https://www.hpc.mil/solution-areas/networking/dren-sdren-network-capabilities-and-technical-overview
ASN / name
AS668 — DNIC-AS-00668 [Confirmed] — https://rdap.arin.net/registry/autnum/668
Prefix counts
third-party BGP aggregators disagree — one synthesis reports 187 IPv4 / 2 IPv6 originated (310 total incl. non-originated announcements); another reports 217 IPv4 / 140 IPv6. Treat as a conflicting range, not a fixed figure [Likely] — https://bgp.he.net/AS668, https://bgp.tools/as/668
Address estimate
~2,656,000 IPv4 addresses per BGP aggregator snapshots; CAIDA's customer-cone metric (a different measure — cone size, not announced space) is 3,457,792 addresses [Likely] — https://bgp.he.net/AS668, https://asrank.caida.org/asns/668
Registrant / admin address
USDDD org address 3990 E. Broad Street, Columbus, OH 43218; abuse/NOC (MIL-HSTMST-ARIN) and admin/technical (REGIS10-ARIN) contacts both list DISA-Columbus, 300 North James Road, Whitehall, OH 43213 — this is DISA's registration/admin office, not the network's physical or routing footprint
[Confirmed] — https://rdap.arin.net/registry/autnum/668
Disambiguation
AS668 is NOT AS8003, the ASN behind the widely-reported 2021 "Pentagon activates dormant IPv4 space / world's largest honeypot" story (7.0.0.0/8, 11.0.0.0/8, 22.0.0.0/8 via the GRSCORP pilot) [Confirmed] — https://mailman.nanog.org/pipermail/nanog/2021-March/212569.html, https://www.theregister.com/2021/04/26/defense_department_ipv6/
[ 02 ] — Announced prefixes

What this network routes.

194 prefixes total · RIPEstat data · cached, not real-time
// IPv4 prefixes193
  1. 131.214.0.0/16/16
  2. 131.218.0.0/16/16
  3. 164.49.0.0/16/16
  4. 164.191.0.0/16/16
  5. 140.5.0.0/16/16
  6. 131.122.0.0/16/16
  7. 131.121.0.0/16/16
  8. 137.128.0.0/16/16
  9. 140.32.0.0/16/16
  10. 144.3.0.0/16/16
  11. 130.163.0.0/16/16
  12. 163.240.0.0/16/16
  13. 129.92.0.0/16/16
  14. 147.227.0.0/16/16
  15. 132.45.0.0/16/16
  16. 158.12.0.0/16/16
  17. 140.6.0.0/16/16
  18. 129.229.0.0/16/16
  19. 131.120.0.0/16/16
  20. 132.193.0.0/16/16
  21. 140.25.0.0/16/16
  22. 157.187.0.0/16/16
  23. 6.4.0.0/16/16
  24. 140.178.0.0/16/16
  25. 155.154.0.0/16/16
  26. 164.172.0.0/16/16
  27. 128.132.0.0/16/16
  28. 130.109.0.0/16/16
  29. 140.31.0.0/16/16
  30. 155.141.0.0/16/16
  31. 150.125.0.0/16/16
  32. 143.56.0.0/16/16
  33. 164.173.0.0/16/16
  34. 128.160.0.0/17/17
  35. 155.148.0.0/17/17
  36. 6.3.0.0/17/17
  37. 131.250.0.0/17/17
  38. 131.250.128.0/18/18
  39. 134.166.0.0/18/18
  40. 6.2.0.0/18/18
  41. 155.148.128.0/18/18
  42. 131.92.192.0/18/18
  43. 147.241.192.0/18/18
  44. 134.166.64.0/18/18
  45. 198.14.32.0/19/19
  46. 6.2.64.0/19/19
  47. 155.148.192.0/19/19
  48. 198.253.128.0/19/19
  49. 147.248.48.0/20/20
  50. 131.250.192.0/20/20
  51. 198.253.192.0/20/20
  52. 164.122.0.0/20/20
  53. 134.166.144.0/20/20
  54. 199.31.16.0/20/20
  55. 155.148.224.0/20/20
  56. 147.241.128.0/21/21
  57. 131.92.168.0/21/21
  58. 147.241.160.0/21/21
  59. 198.253.64.0/21/21
  60. 131.92.136.0/21/21
  61. 147.241.168.0/21/21
  62. 155.29.152.0/21/21
  63. 155.148.240.0/21/21
  64. 199.208.32.0/21/21
  65. 131.92.144.0/21/21
  66. 147.241.88.0/21/21
  67. 147.241.176.0/21/21
  68. 199.209.144.0/21/21
  69. 214.9.96.0/21/21
  70. 198.154.16.0/21/21
  71. 147.241.72.0/21/21
  72. 214.29.136.0/21/21
  73. 147.241.80.0/21/21
  74. 198.253.168.0/21/21
  75. 198.253.40.0/21/21
  76. 199.209.240.0/21/21
  77. 199.209.248.0/21/21
  78. 204.222.64.0/21/21
  79. 147.241.56.0/21/21
  80. 147.241.120.0/22/22
  81. 6.2.104.0/22/22
  82. 131.92.176.0/22/22
  83. 6.2.96.0/22/22
  84. 147.241.96.0/22/22
  85. 140.27.8.0/22/22
  86. 147.241.104.0/22/22
  87. 199.209.144.0/22/22
  88. 147.241.112.0/22/22
  89. 131.92.132.0/22/22
  90. 6.2.120.0/22/22
  91. 134.166.128.0/22/22
  92. 6.2.112.0/22/22
  93. 192.171.8.0/22/22
  94. 131.92.164.0/22/22
  95. 205.66.100.0/22/22
  96. 198.154.176.0/23/23
  97. 131.92.180.0/23/23
  98. 204.222.8.0/23/23
  99. 131.92.184.0/23/23
  100. 198.154.174.0/23/23
  101. 206.37.30.0/23/23
  102. 199.123.88.0/23/23
  103. 131.92.182.0/23/23
  104. 140.27.14.0/23/23
  105. 199.123.86.0/23/23
  106. 198.97.234.0/23/23
  107. 198.154.24.0/23/23
  108. 140.27.10.0/23/23
  109. 204.44.136.0/23/23
  110. 131.92.162.0/23/23
  111. 204.222.6.0/23/23
  112. 134.166.132.0/23/23
  113. 134.166.136.0/23/23
  114. 140.27.12.0/23/23
  115. 199.209.150.0/23/23
  116. 206.37.28.0/23/23
  117. 199.10.20.0/24/24
  118. 205.67.232.0/24/24
  119. 192.5.17.0/24/24
  120. 214.27.178.0/24/24
  121. 147.241.118.0/24/24
  122. 199.9.0.0/24/24
  123. 192.67.80.0/24/24
  124. 204.238.129.0/24/24
  125. 192.12.124.0/24/24
  126. 199.10.148.0/24/24
  127. 192.16.167.0/24/24
  128. 131.92.131.0/24/24
  129. 214.9.94.0/24/24
  130. 206.37.224.0/24/24
  131. 192.31.147.0/24/24
  132. 199.31.107.0/24/24
  133. 192.100.92.0/24/24
  134. 205.111.251.0/24/24
  135. 134.166.138.0/24/24
  136. 206.37.252.0/24/24
  137. 192.86.66.0/24/24
  138. 199.10.19.0/24/24
  139. 192.171.12.0/24/24
  140. 198.253.253.0/24/24
  141. 6.11.254.0/24/24
  142. 199.10.18.0/24/24
  143. 192.160.159.0/24/24
  144. 192.5.22.0/24/24
  145. 192.175.87.0/24/24
  146. 198.253.252.0/24/24
  147. 192.160.158.0/24/24
  148. 192.5.21.0/24/24
  149. 214.9.95.0/24/24
  150. 199.10.62.0/24/24
  151. 199.10.127.0/24/24
  152. 199.123.113.0/24/24
  153. 140.25.98.0/24/24
  154. 192.42.141.0/24/24
  155. 199.209.149.0/24/24
  156. 199.10.17.0/24/24
  157. 192.190.228.0/24/24
  158. 199.9.1.0/24/24
  159. 192.88.110.0/24/24
  160. 192.5.23.0/24/24
  161. 207.133.211.0/24/24
  162. 192.5.148.0/24/24
  163. 134.166.135.0/24/24
  164. 199.208.158.0/24/24
  165. 192.48.242.0/24/24
  166. 198.253.110.0/24/24
  167. 134.164.220.0/24/24
  168. 207.132.147.0/24/24
  169. 214.10.25.0/24/24
  170. 6.11.1.0/24/24
  171. 205.111.252.0/24/24
  172. 198.97.236.0/24/24
  173. 199.123.105.0/24/24
  174. 205.68.95.0/24/24
  175. 214.9.92.0/24/24
  176. 192.190.229.0/24/24
  177. 192.55.117.0/24/24
  178. 214.4.136.0/24/24
  179. 131.92.186.0/24/24
  180. 6.15.100.0/24/24
  181. 199.10.16.0/24/24
  182. 199.123.90.0/24/24
  183. 192.58.244.0/24/24
  184. 192.67.93.0/24/24
  185. 198.154.173.0/24/24
  186. 198.253.56.0/24/24
  187. 199.9.2.0/24/24
  188. 6.11.51.0/24/24
  189. 147.241.126.0/24/24
  190. 134.166.134.0/24/24
  191. 6.11.250.0/24/24
  192. 192.138.87.0/24/24
  193. 199.10.233.0/24/24
// IPv6 prefixes1
  1. 2001:480::/32/32
[ 03 ] — Notable peers & upstreams

Who it talks to.

37 observed neighbours
// Notable connectionsTop 20 of 37
ASNOperatorRole
AS6939 HURRICANE - Hurricane Electric LLC upstream
AS701 UUNET - Verizon Business upstream
AS2914 NTT-DATA-2914 - NTT America, Inc. upstream
AS11537 INTERNET2-RESEARCH-EDU - Internet2 upstream
AS7575 AARNET-AS-AP - Australian Academic and Research Network (AARNet) upstream
AS35889 GOREX - University of Hawaii upstream
AS10764 STARTAP - University of Illinois upstream
AS22335 MREN - Metropolitan Research and Education Network upstream
AS6360 UNIVHAWAII - University of Hawaii upstream
AS518 DNIC-AS-00518 - United States Department of Defense (DoD) downstream
AS121 DNIC-AS-00121 - United States Department of Defense (DoD) downstream
AS687 DNIC-AS-00687 - United States Department of Defense (DoD) downstream
AS22 DNIC-AS-00022 - Navy Network Information Center (NNIC) downstream
AS289 DNIC-AS-00289 - Headquarters, USAISC downstream
AS13 DNIC-AS-00013 - Headquarters, USAISC downstream
AS252 DNIC-AS-00252 - Headquarters, USAISC downstream
AS5957 DNIC-ASBLK-05800-06055 - United States Department of Defense (DoD) downstream
AS6009 DNIC-ASBLK-05800-06055 - United States Department of Defense (DoD) downstream
AS37 DNIC-AS-00037 - Navy Network Information Center (NNIC) downstream
AS84 DNIC-AS-00084 - Navy Network Information Center (NNIC) downstream
Neighbours observed via public BGP collectors; not a complete peering list.