Pentester's Promiscuous Notebook
BlogGitHubTwitter
Search…
README
⚒️ Pentest
C2
Infrastructure
Misc
OSINT
Password Brute Force
Perimeter
1C
ADFS
Cisco
DNS
Exchange
Information Gathering
IPSec
Java RMI
Lync & Skype for Business
NTP
Outlook
OWA
SharePoint
SMTP
SSH
Subdomain Takeover
Shells
Web
Wi-Fi
⚔️ Red Team
Basics
Cobalt Strike
Infrastructure
Malware Development
SE
⚙️ Admin
Git
Linux
Networking
Virtualization
Windows
Powered By GitBook
Perimeter

Autonomous Systems

Info via IP

dig:
$ dig $(dig -x 127.0.0.1 | grep PTR | tail -n 1 | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}').origin.asn.cymru.com TXT +short
whois:
$ whois -h whois.cymru.com -- '-v 127.0.0.1'
$ whois -h whois.radb.net 127.0.0.1

Info via ASN

whois:
$ whois -h whois.cymru.com -- '-v AS48666'
$ whois -h whois.radb.net AS48666

Search AS

Map IP addresses to AS by origin and netname with ignoring potentionally unwanted netname values by keywords:
whois.sh
#!/bin/bash
# Usage: whois.sh ip_list.txt
​
for ip in `cat $1`; do
WHOIS=`whois $ip`
ASNUM=`echo $WHOIS | grep -i "origin:" | tr -d ' ' | cut -d ":" -f 2 | tr #x27;\n' ','`
NETNAME=`echo $WHOIS | grep -i "netname:" | tr -d ' ' | cut -d ":" -f 2`
if ! echo "$NETNAME" | grep -iqF -e pppoe -e ipoe; then
echo "$ASNUM,$NETNAME,$ip"
fi
done
Difference between as-name, aut-num, origin, netname, etc. may be found on RIPE.
Previous
Generate Wordlists
Next
1C
Last modified 9mo ago
Copy link
On this page
Autonomous Systems
Info via IP
Info via ASN
Search AS