Data · ASN & Organisation

Which network owns this IP.

Every /json/* response carries an ASN and an organisation name, cross-referenced across all five Regional Internet Registries. 520,000+ ASNs catalogued; updated daily.

Example

curl https://api.ip-atlas.io/json/1.1.1.1
{
  "asn": 13335,
  "org": "CLOUDFLARENET",
  "registry": "apnic",
  ...
}

What ASN tells you

  • Network identity. ASN 15169 = Google, 16509 = Amazon, 13335 = Cloudflare. Machine-readable.
  • Hosting vs residential. If the ASN is a cloud provider, the IP is a datacenter — regardless of what the geo says about the city.
  • Abuse routing. ASN is the level at which abuse departments operate. Combine with abuse contact to route automated takedowns.
  • Fraud signal. A residential user should not be signing up from AS14061 (DigitalOcean).

How it's built

Every Regional Internet Registry (ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC) publishes daily delegated-extended files listing every allocated IPv4 prefix and every ASN. We reconcile all five into one authoritative table and then join against ARIN whois for organisation names. Rebuilt nightly, hot-swapped with a SIGHUP.

What you don't get

We don't currently return AS-path, BGP neighbours, or live route announcements. If you need real-time BGP, services like Team Cymru's Looking Glass or RIPEstat are the right tool. On our roadmap: a Business-tier BGP live feed later in 2026.