asn
Operator: Adriano Provvisiero (nitefood)
Locally installable tool for IP, ASN and BGP research, with traceroute, JSON output and its own API server.
Technical Infrastructure
Product
Free Bash tool for network research. Can run as a command-line program or as your own lookup or traceroute server.
Availability and source date
Active
As of: 16 October 2026.
No functionality test has been performed.
Use in OSINT research
Links IP addresses to network operators, routes, network ranges and published reputation information. Helps assess a target’s technical infrastructure.
Queries
| Input | Result | Result type |
|---|---|---|
| IP address + Domain / website + URL | Associated network range, ASN, organisation, abuse contacts and additional geolocation and reputation information. Domains and URLs are first resolved to IP addresses. | Retrieved |
| ASN | Organisation, announced network ranges, BGP neighbours, peering connections and available BGP incident statistics. | Retrieved |
| Company / organisation name | Matching network ranges and AS numbers for the organisation being searched. | Retrieved |
| IP address + Domain / website + URL | Traceroute, active by default: visible network hops and the ASN or routing information identified for them. Can be disabled with -n. | Technical check according to provider |
Features
- Links IPv4 and IPv6 addresses to network operators and AS numbers.
- Shows network ranges, BGP statistics and peering connections.
- Checks the RPKI association between a network range and an AS number.
- Adds IP reputation and available Shodan information.
- Runs traceroutes by default, with information about network hops; can be disabled with -n.
- Provides JSON output and a self-hosted lookup API server.
Categories
- Technical Infrastructure
- IP & ASN
- Internet scanning
Coverage
Dataset
Live queries and information from external services, including RIPEStat, Team Cymru, PeeringDB, CAIDA, Shodan and reputation services. No regional data collection of its own.
Access
Installation and deployment
Locally installable · Self-hosted
Local Bash program or Docker container. Optional web and JSON API server of your own, including on a remote computer. The server uses a local address by default.
Requirements
Bash 4.2 or later and the network programs listed in the README. Direct installation or Docker. Additional data from some sources requires separate API keys.
Export
Text output and compact or formatted JSON. Server mode also provides HTML output and JSON endpoints.
Provider
Adriano Provvisiero (nitefood)
Country of establishment
Unknown
Interfaces
API
Available. Your own lookup API server in server mode, with JSON endpoints. The data providers also queried are separate sources.
MCP
Not documented. Not documented in the README, installation and release pages reviewed.
AI agents
Not documented. Not documented in the README, installation and release pages reviewed.
Maintenance
Licence
MIT
Latest activity
Commit 10/2026
Stars
approx. 1,900 (as of 16 October 2026)
Legal note
Limitations
- Reputation, location and vulnerability information comes from external sources and is not measured by asn itself.
- Traceroute is active by default and can be disabled with -n. It sends network packets and shows the connection from the perspective of the computer running it.
- According to the README, the basic server has no authentication of its own. External access must be restricted.
Guides and practical reports
Official · README: installation, lookups and API mode
Adriano Provvisiero / nitefood · EN
Explains local installation, Docker, inputs and running your own lookup server.