ASN & ISP Lookup

The internet is not one network, it is tens of thousands of networks that agree to carry each other’s traffic. Each one is an autonomous system, and each has a number. A large provider announces the address blocks it owns under its AS number, and every other network learns that route. When a server answers you, the reply travels back along the route built from those announcements.

The number is administered, not invented. Regional internet registries allocate AS numbers the same way they allocate addresses, and a network must have one before it can announce routes globally. The format is a 32-bit integer, widened from the original 16 bits when the first range began to run short. A handful of ranges, such as 64512 to 65534 and 4200000000 upwards, are reserved for private use inside a single operator and never appear on the public internet.

Three fields above tell a related story. The AS number is the routing identity, the handle a network uses to announce routes. The AS name is the label the registry holds for it, usually a shortened company name. The domain is the operator’s website, where the registry has one on file. Together they answer a practical question a site cares about: who is this connection coming from.

That answer is about your access network, which is often but not always the brand you pay. A small provider buys wholesale transit and announces its addresses under a larger carrier’s AS, so the record names the carrier. A mobile virtual network operator rents capacity from a host network and looks identical to it here. Offices that connect through a corporate gateway may appear under a head-office AS in another country.

For most people the AS name matches the ISP closely enough to be useful. When it does not, the reason is almost always a commercial arrangement upstream, not a mistake. The IP address test shows the organisation your address is registered to, which is usually the same record seen from a different angle.

The single most important thing to understand about this signal is its size. A national provider’s AS number covers every subscriber it has. In a country with tens of millions of users that is millions of people behind one number, spread across a whole region. Nothing in the ASN distinguishes a household in one city from a business in another.

That makes it excellent for bulk decisions and useless for singling anyone out. A site can use it to choose an edge server near your provider, route around a network with known problems, or set a rough regional default. What it cannot do is identify you, because everyone else on the same provider presents the same number. If a site wants to tell you apart it has to reach for something else, such as the browser fingerprint.

There is a real difference between an access network and a hosting network, and it shows up here. Access networks, what most people would call ISPs, sell connections to homes and businesses. Hosting networks sell servers: cloud instances, virtual private servers, proxies, and the exit nodes of commercial VPNs. Both are legitimate, but they behave differently. Abuse, scraping and automated sign-ups concentrate on the second kind, because renting a server is cheap and disposable.

So the AS name has become one of the signals sites use to decide how much to trust a connection. If the network resolves to a cloud or VPN provider, a site cannot see who is really behind the request, and it may respond with a captcha, a block, or a stricter sign-up flow. The panel above applies a keyword check for exactly this, looking for provider names such as datacenter, cloud, hosting and the well-known VPN brands.

Two reasons cause most surprising results. The first is stale registry data: when a provider sells a block or reorganises its networks, the records can lag behind the routing by weeks or longer, so the name attached to your address may belong to whoever held it before. The second is resale. Blocks move between operators constantly, and the registration often trails the change.

The other common case is a VPN or proxy that has already rerouted you. If the ASN suddenly names a hosting company you have never dealt with, the most likely explanation is that your traffic is exiting through one of their servers. That is worth confirming rather than assuming, so check the WebRTC leak test for your real address and the geolocation test to see whether the reported location moved with it.

Where the ASN is genuinely useful is stable comparison. Note it once, then check again after a change: a new provider, a VPN switched on, a move to a different network. Because the number covers so many people, it never moves for ordinary reasons, so a real change is meaningful.