What is ASN intelligence?
Every major network on the internet — ISPs, cloud providers, CDNs, enterprises — is assigned an Autonomous System Number. ASN intelligence reveals the complete network topology: who peers with whom, what IP space is announced, how stable the routing is, and who to contact for abuse reports. This is foundational for infrastructure attribution, threat hunting, and network security assessments.
Key Terminology
- BGP (Border Gateway Protocol)
- The routing protocol that holds the internet together. BGP peers exchange routing information to determine the best path for traffic between autonomous systems. Analyzing BGP relationships reveals the real topology of the internet.
- Upstream vs Downstream Peers
- Upstream (transit) peers provide connectivity to the broader internet — they're the network's ISPs. Downstream peers receive connectivity — they're the network's customers. This hierarchy reveals business relationships and traffic flow patterns.
- Prefix Announcement
- When a network announces a prefix via BGP, it tells the internet "send traffic for these IPs to me." Monitoring prefix announcements reveals the actual IP space a network controls, which may differ from what WHOIS records show.
ASN Intel — Frequently Asked Questions
What is an ASN and why does it matter for OSINT?
An Autonomous System Number (ASN) identifies a network operator on the internet. Every ISP, cloud provider, CDN, and large organization has one. Analyzing an ASN reveals who they peer with, what IP space they announce, their routing stability, and their abuse contact information — essential for attribution, infrastructure mapping, and incident response.
What is BGP peering power?
Peering power indicates how many BGP routing paths include this neighbor relationship. Higher power means the peering link is seen by more BGP route collectors worldwide, indicating a stronger, more established relationship.