Network · AS26211

AS26211 Proofpoint, Inc.

AS26211 (Proofpoint, Inc.) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Network check ASN

AS26211

  • OwnerProofpoint, Inc.
  • KindInternet service provider
  • Servers, not peopleno
  • IPv4 addresses14,592
  • IPv4 ranges18
  • IPv6 ranges2
Risk score0

Nothing suspicious found.

Largest IPv4 ranges

  • 67.231.144.0/21
  • 205.220.160.0/21
  • 148.163.144.0/21
  • 208.56.8.0/22
  • 208.56.56.0/22
  • 205.220.168.0/22
  • 148.163.132.0/22
  • 67.231.158.0/23
  • 66.159.248.0/23
  • 66.159.240.0/23
  • 208.86.202.0/23
  • 205.220.190.0/23

Ranges and owner from DB-IP (CC BY 4.0), updated 2026-10-21.

Check an IP address →

Detect it in code

Spot AS26211 traffic at signup.

Send the visitor's IP. The response includes the ASN, the owner and flags.hosting.

curl https://veqen-app.com/v1/ip/check \
  -H "Authorization: Bearer $VEQEN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"ip": "203.0.113.7"}'
import os, requests

r = requests.post(
    "https://veqen-app.com/v1/ip/check",
    headers={"Authorization": f"Bearer {os.environ['VEQEN_API_KEY']}"},
    json={"ip": "203.0.113.7"},
    timeout=10,
)
result = r.json()
print(result["risk"]["verdict"], result["risk"]["reasons"])
const res = await fetch("https://veqen-app.com/v1/ip/check", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.VEQEN_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"ip": "203.0.113.7"}),
});
const result = await res.json();
console.log(result.risk.verdict, result.risk.reasons);
Questions

About AS26211

Is AS26211 a datacenter or VPN network?

AS26211 (Proofpoint, Inc.) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Who owns AS26211?

AS26211 is registered to Proofpoint, Inc.. It announces about 14,592 IPv4 addresses.

How do I detect traffic from AS26211?

Call the Veqen IP check with the visitor's address. The response includes the ASN, the owner and whether the network is a datacenter, VPN network, relay or ISP.