Autonomous system
AS10959 BAC-NPC
Unclassified ARIN
Summary
Bank of America
enterprise legacy
BAC-NPC is registered to Bank of America, National Association, the banking subsidiary of one of the largest financial institutions in the United States. The AS itself is tiny: RIS observes 2 IPv4 prefixes covering 512 addresses, no IPv6, and 1 observed neighbour.
What it's used for
Two /24s and a single upstream is not the whole of Bank of America's internet presence. A firm of that size runs many autonomous systems and holds far more address space than this; what you are looking at here is one small, separately routed corner of it. Both prefixes (192.136.66.0/24 and 192.104.169.0/24) are legacy class-C space, and the single observed neighbour means this AS is reached through one provider rather than being part of the bank's multihomed core.
Notable
Segmented, minimally routed ASNs like this are common in banking. Regulated financial institutions tend to keep specific functions, acquired business units, or partner-facing connections on their own numbering and their own AS, so that the routing and the security boundary line up with the compliance boundary. What exactly sits behind this particular pair of prefixes is not something the routing data reveals, and this card does not speculate.
Interesting
The address blocks are early class-C assignments, meaning they predate CIDR and almost certainly predate the mergers that produced the bank in its current form. Financial-sector address space is often a fossil record of the institutions that were absorbed along the way.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
1 upstream, 0 downstream and 1 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS3561 | CenturyLink Communications, LLC | 119 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-23, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 2 prefixes · 512 addresses IPv6 0 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 2 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS10959- Registry name
- BAC-NPC
- Registrant
- Bank of America, National Association
- Abuse contact
- ABUSE@bankofamerica.com
- Registered
- 1998-02-26
- Last changed
- 2012-02-24
- Allocation
- assigned
Routing security
RPKI and IRR
- RPKI
- 0% valid · 0 valid, 2 with no ROA
- ROAs
- 0 authorising AS10959
- ASPA
- no ASPA record
- IRR
- 0% registered · 0 of 2 announcements
- Route objects
- 0 naming AS10959
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,779 prefixes, as published 2026-10-24. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere