If you work with proxies and keep hearing "AS24940," "Hetzner ASN," "Datacenter ASN" without quite knowing what those numbers refer to — this article clears it up. In plain English: ASN is a network's "passport" on the internet, and it determines how websites perceive you.

What ASN means in simple terms

ASN (Autonomous System Number) is a unique number assigned to an "autonomous system" on the internet. An autonomous system is a network of IP addresses owned by one organization and routed under unified policy.

Loosely: the internet is a patchwork of tens of thousands of ASes. Each AS has its own number. Hetzner — AS24940. Google — AS15169. Cloudflare — AS13335. AWS — AS16509. Comcast — AS7922. And so on.

When you rent a VPS at Hetzner, your IP gets "citizenship" in AS24940. When a site receives a request from that IP, it can look up the ASN and instantly know it's a Hetzner data center.

How ASNs are organized

ASNs are issued by Regional Internet Registries (RIRs): RIPE for Europe, ARIN for US/Canada, APNIC for Asia, LACNIC for Latin America, AFRINIC for Africa. Getting your own ASN isn't cheap or trivial — you need justification (your own routing equipment, BGP setup, networks no smaller than /24).

Originally ASNs were 16-bit (up to 65,535); now they're 32-bit (up to ~4 billion). Roughly 110,000 ASNs are issued globally today.

Why ASN matters when choosing proxies

Antifraud systems (Cloudflare, IPQS, MaxMind, fingerprintjs, etc.) maintain a database of every known ASN with tags: "datacenter," "residential ISP," "mobile carrier," "VPN provider," "known proxy network," and so on.

When a site looks up your IP, it instantly knows the ASN, and via the database — who's behind it. If the IP is in AS24940 (Hetzner) — that's Datacenter, immediately suspicious to most consumer-facing sites. If the IP is in AS6128 (Cablevision/Optimum) — that's Residential, a normal home subscriber.

So two proxies in the same country (e.g. both US) can behave radically differently against antifraud. One in a datacenter ASN gets banned in a minute. The other in a residential ASN passes freely.

How IP type is derived from ASN

ProxyLab and most analytical services use lookup tables of "ASN → network type":

  • Datacenter ASNs: Hetzner (AS24940), OVH (AS16276), DigitalOcean (AS14061), AWS (AS16509), Linode (AS63949), Google Cloud (AS15169) and hundreds more.
  • Residential ASNs: home ISPs — Comcast, Verizon FIOS, BT, Deutsche Telekom, etc. Thousands worldwide.
  • Mobile ASNs: cellular carriers — T-Mobile, Vodafone, MTS, Megafon, Orange, NTT Docomo. Fewer in number, often dedicated to mobile networks separately.
  • Hosting/VPN ASNs: dedicated to VPN services (Mullvad, ProtonVPN, NordVPN, Private Internet Access).

Antifraud engines also keep "reputation" scores per ASN: what % of traffic from this AS is fraudulent, scammy, spammy. That reputation feeds the "trust" decision when allowing or blocking a request.

How to look up an ASN

Several ways:

Common ASNs: data centers vs ISPs

A short cheat sheet:

  • AS24940 — Hetzner Online (DE) — Datacenter
  • AS16276 — OVH (FR) — Datacenter
  • AS14061 — DigitalOcean (US) — Datacenter
  • AS16509 — Amazon AWS — Datacenter
  • AS15169 — Google — Datacenter
  • AS13335 — Cloudflare — CDN/Datacenter
  • AS7922 — Comcast (US) — Residential
  • AS5089 — Virgin Media (UK) — Residential
  • AS21928 — T-Mobile (US) — Mobile
  • AS25180 — Vodafone (UK) — Mobile

If your proxy lives in a "datacenter" ASN — for strict antifraud sites (banks, marketplaces, ad accounts) it's basically useless. If it's in residential or mobile — your odds are much better.

Related: Datacenter / Residential / Mobile, Static vs Rotating, Look up your ASN.