AS763

AS763 is a dormant ASN registered to IBM under ARIN (registry name IBM-PEN-TEST) that has not appeared in the global BGP routing table since mid-2025, making it inactive rather than currently reachable.

ARIN RDAP identifies the registrant as International Business Machines Corporation, based in Research Triangle Park, North Carolina, with the registration listed as active. The ASN's registry name, IBM-PEN-TEST, points to internal use as a source-IP block for penetration-testing or security-scanning activity rather than as production transit infrastructure, though this could not be confirmed against IBM's own security-testing pages (they returned HTTP 403 to automated fetch).

AS763's routing history shows at least two distinct IPv4 blocks: it first appeared announcing 158.84.0.0/14 — part of IBM's own legacy address space — on 2000-08-18, and last originated 12.166.224.0/24 (described in third-party looking-glass data as "ATT SOLUTIONIBM - MSA") on 2025-06-10, reaching the Internet via AT&T Enterprises (AS7018) as its upstream. Both RIPEstat and bgp.he.net agree the ASN went dark around 2025-06-10 to 2025-06-17 and has announced nothing since; CAIDA's AS Rank confirms a rank of 79,459 with a singleton customer cone (0 prefixes, 0 addresses) and zero degree in every relationship category.

ARIN RDAP publishes no registration date on the AS763 autnum object itself — its top-level events[] contains exactly one entry, a "last changed" event dated 2023-02-10. A separate date, 1992-02-08, belongs to the nested IBM-1 registrant entity's own registration event, not to the autnum record; this was confirmed directly against the live RDAP payload. allocated_date is recorded here as a confirmed null: ARIN does not publish an allocation date for this ASN.

Operator

International Business Machines Corporation (IBM); ARIN registry name IBM-PEN-TEST [Confirmed] — https://rdap.arin.net/registry/autnum/763

Country / RIR

US, ARIN [Confirmed] — https://rdap.arin.net/registry/autnum/763

Allocated

Unknown — the autnum's top-level RDAP events[] contains exactly one event, a "last changed" entry dated 2023-02-10; no top-level "registration" eventAction exists on this record. 1992-02-08 belongs to the nested IBM-1 registrant entity's own registration event, not to the autnum itself, and is not used as the ASN's allocation date

[Confirmed absence] — https://rdap.arin.net/registry/autnum/763, https://rdap.arin.net/registry/entity/IBM-1

Org status

active registration at ARIN (registrant IBM-1); admin/abuse/tech contact RAIN-ARIN (ipreg@us.ibm.com, +1-800-426-7378), Research Triangle Park, NC 27709-2195 [Confirmed] — https://rdap.arin.net/registry/autnum/763

Contacts

ipreg@us.ibm.com; +1-800-426-7378; 3039 Cornwallis Road, Research Triangle Park, NC 27709-2195 [Confirmed] — https://rdap.arin.net/registry/autnum/763

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-07-28 — 0 NANOG mailing-list matches for "AS763"; Spamhaus, AbuseIPDB, and Cisco Talos could not be queried (HTTP 403), so their status is Unknown rather than confirmed-clean [Likely for the negative NANOG result; Unknown for the blocked feeds] — https://www.mail-archive.com/search?l=nanog%40nanog.org&q=AS763

Network & routing

Network type

enterprise/corporate single-prefix ASN; dormant since mid-2025; registry name suggests penetration-testing/security-scanning use, not production transit [Confirmed for topology; Likely for stated use] — https://bgp.he.net/AS763, https://rdap.arin.net/registry/autnum/763

Size

dormant — 0 IPv4 prefixes / 0 addresses and 0 IPv6 prefixes currently announced; historically announced 158.84.0.0/14 (first seen 2000-08-18) and, most recently, 12.166.224.0/24 (last seen 2025-06-10) via AT&T; CAIDA customer cone = 1 ASN (itself), 0 prefixes, 0 addresses

[Confirmed] — https://stat.ripe.net/AS763, https://api.asrank.caida.org/v2/restful/asns/763, https://bgp.he.net/AS763

Routing/peering

NOT currently announced; not visible in global BGP since 2025-06-17 (bgp.he.net) / last seen 2025-06-10 (RIPEstat); only historical relationship visible is AT&T Enterprises (AS7018) as upstream; no PeeringDB listing, no IX presence [Confirmed for current absence; Likely for the AT&T relationship] — https://bgp.he.net/AS763, https://www.peeringdb.com/asn/763, https://api.asrank.caida.org/v2/restful/asns/763

RPKI

not assessable / Unknown — no ROA data surfaced by RIPEstat, bgp.he.net, or bgp.tools; RIPEstat's rpki-validation endpoint requires a specific prefix and was not run for a dormant ASN [Unknown] — https://stat.ripe.net/AS763, https://bgp.he.net/AS763, https://bgp.tools/as/763

Notable usage

registry name IBM-PEN-TEST suggests use as an IBM penetration-testing/security-scanning source IP block; unconfirmed against IBM's own site (403 on fetch attempts) [Likely] — https://rdap.arin.net/registry/autnum/763

Related ASNs

none confirmed as affiliated; AS7018 (AT&T Enterprises, LLC) appears only as historical transit provider, not a related IBM ASN [Confirmed for the transit relationship] — https://bgp.he.net/AS763

Analyst note

dormant enterprise ASN with a pentest-suggestive registry name. ARIN RDAP publishes no allocation date on the autnum object — its only top-level event is a 2023-02-10 last-changed entry; the 1992-02-08 date belongs to the nested IBM-1 org entity's own registration event, not to the autnum. ipinfo.io separately showed a 1970-01-01 value for this ASN, identified as a Unix-epoch placeholder artifact and excluded outright.