Network · AS17561

AS17561 Larus Limited

AS17561 (Larus Limited) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Network check ASN

AS17561

  • OwnerLarus Limited
  • KindInternet service provider
  • Servers, not peopleno
  • IPv4 addresses444,416
  • IPv4 ranges330
  • IPv6 ranges0
Risk score0

Nothing suspicious found.

Largest IPv4 ranges

  • 156.251.128.0/17
  • 154.80.128.0/17
  • 156.228.64.0/18
  • 154.221.64.0/18
  • 45.203.160.0/19
  • 177.29.96.0/19
  • 156.228.224.0/19
  • 156.228.128.0/19
  • 156.224.96.0/19
  • 154.216.160.0/19
  • 154.195.32.0/19
  • 45.203.144.0/20

Ranges and owner from DB-IP (CC BY 4.0), updated 2026-10-21.

Check an IP address →

Detect it in code

Spot AS17561 traffic at signup.

Send the visitor's IP. The response includes the ASN, the owner and flags.hosting.

curl https://veqen-app.com/v1/ip/check \
  -H "Authorization: Bearer $VEQEN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"ip": "203.0.113.7"}'
import os, requests

r = requests.post(
    "https://veqen-app.com/v1/ip/check",
    headers={"Authorization": f"Bearer {os.environ['VEQEN_API_KEY']}"},
    json={"ip": "203.0.113.7"},
    timeout=10,
)
result = r.json()
print(result["risk"]["verdict"], result["risk"]["reasons"])
const res = await fetch("https://veqen-app.com/v1/ip/check", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.VEQEN_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"ip": "203.0.113.7"}),
});
const result = await res.json();
console.log(result.risk.verdict, result.risk.reasons);
Questions

About AS17561

Is AS17561 a datacenter or VPN network?

AS17561 (Larus Limited) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Who owns AS17561?

AS17561 is registered to Larus Limited. It announces about 444,416 IPv4 addresses.

How do I detect traffic from AS17561?

Call the Veqen IP check with the visitor's address. The response includes the ASN, the owner and whether the network is a datacenter, VPN network, relay or ISP.