Autonomous system
AS11251 DSTL-2-11251 - Disney Streaming Services
Hosting ARIN Content
Summary
Disney Streaming Services
enterprise legacy
AS11251 (DSTL-2-11251) belongs to Disney Streaming Services, the Walt Disney Company subsidiary in New York City that builds and runs Disney's direct-to-consumer streaming platforms. Despite the low AS number, this is a recycled ASN: ARIN registered it to Disney in 2018.
What it's used for
The internet edge of a streaming technology company. RIS observes 19 IPv4 prefixes carrying 4,864 addresses, 12 IPv6 prefixes, and 13 observed neighbours. That combination is worth reading carefully, because the brand invites the wrong conclusion. Thirteen neighbours and under 5,000 addresses is an enterprise footprint, not a content-delivery network. Disney does not push Disney+ and ESPN+ video to viewers from this ASN at anything like the scale the name suggests. Mass video delivery rides commercial CDNs. What this space plausibly carries is the company's own edge, interconnect and service infrastructure, and the pack has no reverse DNS on it to say more precisely than that.
Almost every prefix RDAP resolved is registered to Disney itself, under DISNEY-DSS, DISNEY-DSS-2 and DISNEY-MNT. The one exception, 8.5.5.0/24, is registered to Level 3 Parent LLC: that is ordinary provider-assigned carrier space, not a third-party registrant, and it is not a leasing signal.
Notable
The IPv6 posture is much stronger than the IPv4 one, with 12 prefixes against 19 IPv4 routes: a modern greenfield network built when v6 was table stakes, rather than a legacy estate retrofitted. Most of the v6 sits in 2620:138::/32 (ARIN), but 2a0e:bbc0:8000::/48 is RIPE space, the footprint of a service that had to land in Europe as well as North America.
Interesting
The AS number is the trap here. AS11251 looks like an early-internet allocation, but the ARIN registration event is dated 1 February 2018 and the DSTL-2 org handle dates to November 2018, both modern. That timing is the corporate history: Disney took majority control of BAMTech Media in 2017 and renamed it Disney Streaming Services in 2018, exactly when this number and org record appear. Disney Streaming also holds AS22604.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
7 upstream, 1 downstream and 17 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-11-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 9 prefixes · 4.10K addresses IPv6 7 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 16 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS11251- Registry name
- DSTL-2-11251
- Registrant
- Disney Streaming Services
- Abuse contact
- abuse@disneystreaming.com
- Registered
- 2018-02-01
- Last changed
- 2018-12-21
- Allocation
- assigned
Declared
PeeringDB profile
- Name
- Disney Streaming Origin
- Also known as
- DSS Origin
- Network type
- Content
- Scope
- Global
- Traffic ratio
- Heavy Outbound
- Peering policy
- Restrictive
- IRR as-set
AS-DSS-ALL- Website
- https://www.disneyplus.com/
PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.
Routing security
RPKI and IRR
- RPKI
- 89% valid · 25 valid, 3 with no ROA
- ROAs
- 5 authorising AS11251
- ASPA
- no ASPA record
- IRR
- 100% registered · 28 of 28 announcements
- Route objects
- 34 naming AS11251
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 453 networks and 1,846 prefixes, as published 2026-11-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere