ASN Lookup API Reference

// Overview

Free, no-auth API for Autonomous System lookups. Returns ASN details, CIDR prefix lists, and ready-to-use firewall configs for any AS number. Data sourced from iptoasn.com via the internal Atlas service, updated daily.

// Base URL

https://asn.ipinfo.app

// Errors

All errors return JSON with error, request, and status fields.

{
  "error":   "We can't find a result for your query.",
  "request": "99999",
  "status":  404
}

400 Bad Request 404 Not Found 410 Gone 429 Rate Limited 502 Atlas Unavailable

// ASN Details

GET /api/json/details/{asn}

Returns summary data for an Autonomous System: org name, total prefix count, IPv4/IPv6 address space size, and subnet mask distribution.

Parameter	Type	Description
{asn}	integer	AS number in the URL path. Accepts bare integer (`13335`) or `AS`-prefixed (`AS13335`).

Example Request

GET /api/json/details/AS13335

Response 200

{
  "asn":     13335,
  "name":    "CLOUDFLARENET - Cloudflare",
  "iprec":   5600,
  "v4size":  1476096,
  "v6size":  78455046144,
  "smaskv4": { "24": 2240, "20": 167, ... },
  "smaskv6": { "48": 5200, "32": 8,   ... }
}

Note: v6size is counted in /64 equivalents. The time field from the legacy API has been removed.

// Search

GET /api/json/search/?search={query}

Search for ASNs. Handles three input types automatically: an IP address resolves to its owning ASN; an AS number (with or without the AS prefix) does a direct lookup; anything else does a case-insensitive partial match on the org name. Returns up to 25 results.

Parameter	Type	Description
search	string	Org name, IP address (`1.1.1.1`), or AS number (`13335` / `AS13335`).

Example Requests

GET /api/json/search/?search=cloudflare
GET /api/json/search/?search=1.1.1.1
GET /api/json/search/?search=AS13335

Response 200

[
  { "asn": 13335, "name": "CLOUDFLARENET - Cloudflare" },
  { "asn": 209242, "name": "CLOUDFLARE-WARP" }
]

200 OK 404 No results 429 Rate limited (30 req/min)

// My ASN

GET /api/json/myasn

Resolves the caller's IP address to its owning ASN. Useful for showing visitors their own network information.

Response 200

{
  "ip":   "1.1.1.1",
  "asn":  13335,
  "name": "CLOUDFLARENET - Cloudflare"
}

// CIDR List

GET /api/json/list/{asn}

Returns the complete flat list of CIDR prefixes for an ASN, with both IPv4 and IPv6 entries. Use this when you need raw prefix strings without any format-specific wrapping. Prefixes are automatically aggregated — adjacent announcements are collapsed into the minimal covering set before being returned.

Example Requests

GET /api/json/list/AS13335      ↳ JSON { name, type, list }
GET /api/text/list/AS13335      ↳ plain text, one CIDR per line
GET /api/download/list/AS13335  ↳ download as list_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET - Cloudflare",
  "type": "ipList",
  "list": [
    "104.16.0.0/12",
    "172.64.0.0/13",
    "2606:4700::/32",
    ...
  ]
}

// Format Endpoints

Each format is available in three URL trees. Replace {asn} with a bare integer (13335) or AS-prefixed form (AS13335).

/api/json/<format>/{asn} — JSON envelope { name, type, list } where list is an array of config strings
/api/text/<format>/{asn} — plain text, one line per entry
/api/download/<format>/{asn} — plain text with Content-Disposition: attachment for direct file download

The raw format is JSON-only (no text or download variant).

All formats return aggregated prefix lists. BGP routing tables often contain disaggregated announcements — a single logical block split into many smaller prefixes for traffic engineering. We collapse adjacent and overlapping CIDRs into the minimal covering set so you get fewer, cleaner firewall rules. The aggregation is lossless: we never add addresses that aren't actually announced by the AS.

// ipset

GET /api/json/ipset/{asn}

Linux ipset hash:net commands. Creates two named sets — {asn}-4 (inet/IPv4) and {asn}-6 (inet6/IPv6) — then adds every prefix to the appropriate set. Suitable for use with iptables -m set --match-set.

Example Requests

GET /api/json/ipset/AS13335      ↳ JSON { name, type, list }
GET /api/text/ipset/AS13335      ↳ plain text, one command per line
GET /api/download/ipset/AS13335  ↳ download as ipset_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "ipset",
  "list": [
    "ipset -N 13335-4 hash:net family inet",
    "ipset -N 13335-6 hash:net family inet6",
    "ipset -A 13335-4 104.16.0.0/12",
    "ipset -A 13335-4 172.64.0.0/13",
    "ipset -A 13335-6 2606:4700::/32",
    ...
  ]
}

// iptables

GET /api/json/iptables/{asn}

iptables INPUT DROP rules. IPv4 prefixes use iptables; IPv6 prefixes use ip6tables. Append directly to your existing INPUT chain.

Example Requests

GET /api/json/iptables/AS13335
GET /api/text/iptables/AS13335
GET /api/download/iptables/AS13335  ↳ iptables_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "iptables",
  "list": [
    "iptables -A INPUT -s 104.16.0.0/12 -j DROP",
    "iptables -A INPUT -s 172.64.0.0/13 -j DROP",
    "ip6tables -A INPUT -s 2606:4700::/32 -j DROP",
    ...
  ]
}

// nginx

GET /api/json/nginx/{asn}

nginx deny directives. Paste these lines into an nginx geo or map block, or directly into a location context to block all prefixes belonging to the AS.

Example Requests

GET /api/json/nginx/AS13335
GET /api/text/nginx/AS13335
GET /api/download/nginx/AS13335  ↳ nginx_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "nginx",
  "list": [
    "deny 104.16.0.0/12;",
    "deny 172.64.0.0/13;",
    "deny 2606:4700::/32;",
    ...
  ]
}

// cisco

GET /api/json/cisco/{asn}

Cisco ASA object network statements. IPv4 entries use dotted-decimal subnet masks; IPv6 entries use CIDR notation. Objects are named {asn}-4-SN0, {asn}-4-SN1, …, {asn}-6-SN0, …

Example Requests

GET /api/json/cisco/AS13335
GET /api/text/cisco/AS13335
GET /api/download/cisco/AS13335  ↳ cisco_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "cisco",
  "list": [
    "object network 13335-4-SN0",
    " subnet 104.16.0.0 255.240.0.0",
    "object network 13335-4-SN1",
    " subnet 172.64.0.0 255.248.0.0",
    "object network 13335-6-SN0",
    " subnet 2606:4700::/32",
    ...
  ]
}

// juniper

GET /api/json/juniper/{asn}

Juniper JunOS set policy-options prefix-list statements. IPv4 prefixes go into the {asn}v4 list; IPv6 prefixes go into {asn}v6.

Example Requests

GET /api/json/juniper/AS13335
GET /api/text/juniper/AS13335
GET /api/download/juniper/AS13335  ↳ juniper_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "juniper",
  "list": [
    "set policy-options prefix-list 13335v4 104.16.0.0/12",
    "set policy-options prefix-list 13335v4 172.64.0.0/13",
    "set policy-options prefix-list 13335v6 2606:4700::/32",
    ...
  ]
}

// htaccess

GET /api/json/htaccess/{asn}

Apache .htaccess deny rules using mod_access_compat (Apache 2.4+ with compatibility module). The list always starts with Order Deny,Allow.

Example Requests

GET /api/json/htaccess/AS13335
GET /api/text/htaccess/AS13335
GET /api/download/htaccess/AS13335  ↳ htaccess_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "htaccess",
  "list": [
    "Order Deny,Allow",
    "Deny from 104.16.0.0/12",
    "Deny from 172.64.0.0/13",
    "Deny from 2606:4700::/32",
    ...
  ]
}

// ipblackhole

GET /api/json/ipblackhole/{asn}

Linux kernel blackhole (null-route) add commands. Silently drops all traffic to the AS by installing static blackhole routes in the kernel routing table. Also used in BGP RTBH (Remotely Triggered Black Hole) setups.

Example Requests

GET /api/json/ipblackhole/AS13335
GET /api/text/ipblackhole/AS13335
GET /api/download/ipblackhole/AS13335  ↳ ipblackhole_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "ip blackhole",
  "list": [
    "ip route add blackhole 104.16.0.0/12",
    "ip route add blackhole 172.64.0.0/13",
    "ip route add blackhole 2606:4700::/32",
    ...
  ]
}

// ipblackholerem

GET /api/json/ipblackholerem/{asn}

Linux kernel blackhole (null-route) del commands. Removes the static blackhole routes previously added with the ipblackhole format. Download filename uses ipblackhole_remove_ prefix to match the original PHP app convention.

Example Requests

GET /api/json/ipblackholerem/AS13335
GET /api/text/ipblackholerem/AS13335
GET /api/download/ipblackholerem/AS13335  ↳ ipblackhole_remove_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "ip blackhole remove",
  "list": [
    "ip route del blackhole 104.16.0.0/12",
    "ip route del blackhole 172.64.0.0/13",
    "ip route del blackhole 2606:4700::/32",
    ...
  ]
}

// raw

GET /api/json/raw/{asn}

Structured per-CIDR breakdown returning an object for each prefix with the IP address, dotted-decimal subnet mask, prefix length, and IP version. IPv6 subnet masks are the string "FALSE" (no dotted-decimal representation). JSON-only — no /text/ or /download/ variant.

Example Request

GET /api/json/raw/AS13335

Response 200

{
  "name": "CLOUDFLARENET",
  "type": "raw",
  "list": [
    {
      "ip":         "104.16.0.0",
      "subnetMask": "255.240.0.0",
      "cidr":       "12",
      "type":       4
    },
    {
      "ip":         "2606:4700::",
      "subnetMask": "FALSE",
      "cidr":       "32",
      "type":       6
    },
    ...
  ]
}

Note: cidr is the prefix length as a string. type is 4 or 6.

// tsv

GET /api/json/tsv/{asn}

Tab-separated values with a header row. Four columns: IP Address, Subnet Mask, CIDR (prefix length), Type (4 or 6). IPv6 subnet masks are FALSE.

Example Requests

GET /api/json/tsv/AS13335
GET /api/text/tsv/AS13335
GET /api/download/tsv/AS13335  ↳ tsv_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "tsv",
  "list": [
    "IP Address\tSubnet Mask\tCIDR\tType",
    "104.16.0.0\t255.240.0.0\t12\t4",
    "172.64.0.0\t255.248.0.0\t13\t4",
    "2606:4700::\tFALSE\t32\t6",
    ...
  ]
}

// csv

GET /api/json/csv/{asn}

Comma-separated values with a header row. Four columns: IP Address, Subnet Mask, CIDR (prefix length), Type (4 or 6). IPv6 subnet masks are FALSE.

Example Requests

GET /api/json/csv/AS13335
GET /api/text/csv/AS13335
GET /api/download/csv/AS13335  ↳ csv_13335.txt

Response 200 (JSON)

{
  "name": "CLOUDFLARENET",
  "type": "csv",
  "list": [
    "IP Address,Subnet Mask,CIDR,Type",
    "104.16.0.0,255.240.0.0,12,4",
    "172.64.0.0,255.248.0.0,13,4",
    "2606:4700::,FALSE,32,6",
    ...
  ]
}

// Removed Endpoints (410 Gone)

The following endpoints depended on CockroachDB historical snapshots which are no longer maintained. They return 410 Gone. Historical data is still available at asn-legacy.ipinfo.app.

Endpoint	Was	Status
/api/json/archive/…	Historical CIDR snapshot for a specific timestamp	410
/api/json/archiveRaw/…	Raw archived record	410
/api/json/growth/…	IP space growth over time	410
/api/json/growthSplit/…	Growth split by IP version	410
/api/json/snapshots/…	List of available archive timestamps	410
/api/json/peersv4/…	IPv4 BGP peer list	410
/api/json/peersv6/…	IPv6 BGP peer list	410
/api/json/directPeers*/…	Direct peer adjacencies	410
/api/json/peerWordlist*/…	Peer ASN wordlists for brute-forcing	410