What an ASN says about your connection

What an autonomous system is

An autonomous system is a collection of IP prefixes under a single, clearly defined routing policy — in practice, one operator's network. RFC 1930 sets out when an organisation needs its own AS, and each one is assigned a number by a regional Internet registry. The numbers were originally 16-bit; RFC 6793 extended them to 32 bits, which is why modern ASNs can be six digits long.

Autonomous systems announce the address blocks they are responsible for using the Border Gateway Protocol, specified in RFC 4271. Those announcements are how the rest of the Internet learns where to send traffic destined for your address, and they are public by design.

What it tells you

Because BGP announcements are public, anyone can determine which autonomous system currently originates the route covering a given address. That gives you the operator, and the operator's type is usually obvious from context.

• A consumer ISP's ASN suggests a residential or small-business connection.
• A mobile carrier's ASN suggests a phone or tethered connection, typically behind large-scale address sharing.
• A hosting or cloud provider's ASN suggests a server, a VPN exit node, or automated traffic rather than someone browsing at home.
• A corporate or university ASN suggests traffic from inside that organisation's own network.

Why sites care about it

Many services treat the ASN as a coarse signal of context. Traffic arriving from a data-centre ASN is more likely to be a bot, a scraper or a VPN than traffic from a residential ISP, so it may attract extra verification steps. This is a heuristic, not a verdict, and it produces false positives for ordinary people using perfectly legitimate VPNs.

It is also more stable than an IP address. Your individual address may change from week to week; the ASN behind it typically does not change until you change provider.

What it does not tell you

An ASN identifies a network, never a person. A large ISP's autonomous system may carry millions of subscribers, and nothing in the routing data distinguishes one from another. It does not reveal your name, your account, your street address or your device.

It also does not always name your true operator. Wholesale arrangements, transit relationships and resold connectivity mean the announcing network can be a supplier rather than the company you pay. And when you use a VPN, the ASN a site sees belongs to the VPN provider's network, not yours.

Putting it together

Read the ASN as the answer to “whose network is this?” rather than “who is this?”. Combined with the address itself and any reverse DNS hostname, it gives a reasonably honest picture of the kind of connection you are on — which is exactly as far as the data supports.

It is also the piece of the picture you have the least control over. You can change your address by reconnecting, and you can change your apparent location with a tunnel, but short of switching provider the autonomous system carrying your traffic stays exactly where it is, and it is public information the moment you open a connection.