Network reconnaissance tool for ASN lookups, BGP analysis, RPKI validation, IP geolocation, and threat intelligence gathering
ASN is a network reconnaissance and analysis tool that performs comprehensive lookups on IP addresses, ASNs, and network prefixes. It retrieves detailed information about Autonomous Systems including organization details, BGP statistics, peering relationships, announced prefixes, and global AS rankings. The tool also performs AS path traces using mtr, detects Internet Exchange Points, and validates RPKI data to identify potential BGP hijacks or route leaks.
The tool integrates threat intelligence capabilities by querying multiple reputation databases and performing IP fingerprinting through Shodan's InternetDB API. It identifies open ports, known vulnerabilities, operating systems, and hardware for target IPs. Additional features include bulk geolocation processing, country-specific CIDR block mapping, and organization-based network range searches. The tool can classify IP types (anycast, mobile, proxy, datacenter) and detect bogon addresses with RFC classification.
ASN operates in multiple modes: as a command-line tool for interactive investigations, as a web-based traceroute server accessible via browser, and as a JSON API endpoint for integration with other tools. It supports Shodan-based reconnaissance without sending packets to targets, making it suitable for incident response and OSINT workflows. The tool queries over 15 different services including Team Cymru, PeeringDB, CAIDA ASRank, RIPEStat, and various threat intelligence providers.