domains / families / security / asn-infrastructure-mapping

asn-infrastructure-mapping

separate

Map organization IP infrastructure via ASN, CIDR, TLD expansion, and reverse DNS.

When to use

• You have a target domain and want to discover EVERY IP owned by the organization.
• Passive subdomain enumeration found only a few hosts — the rest may be on sibling TLDs or different IP ranges.
• The target has a known ASN that can be expanded to full CIDR blocks.
• Services on non-standard ports are invisible to web-only recon.
• Acquired subsidiaries or international domains may sit on different ASNs with weaker security.

When not to use

• scanning entire hosting provider CIDR ranges
• scanning out-of-scope targets

Skill page

Source