Network · AS395954

AS395954 Leaseweb USA, Inc.

AS395954 (Leaseweb USA, Inc.) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Network check ASN

AS395954

  • OwnerLeaseweb USA, Inc.
  • KindInternet service provider
  • Servers, not peopleno
  • IPv4 addresses551,168
  • IPv4 ranges177
  • IPv6 ranges2
Risk score0

Nothing suspicious found.

Largest IPv4 ranges

  • 23.80.0.0/16
  • 23.110.0.0/16
  • 23.107.0.0/16
  • 23.104.0.0/16
  • 23.83.0.0/18
  • 108.187.64.0/18
  • 23.19.0.0/19
  • 147.255.64.0/19
  • 147.255.192.0/19
  • 147.255.128.0/19
  • 142.91.224.0/19
  • 108.187.160.0/19

Ranges and owner from DB-IP (CC BY 4.0), updated 2026-10-22.

Check an IP address →

Detect it in code

Spot AS395954 traffic at signup.

Send the visitor's IP. The response includes the ASN, the owner and flags.hosting.

curl https://veqen-app.com/v1/ip/check \
  -H "Authorization: Bearer $VEQEN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"ip": "203.0.113.7"}'
import os, requests

r = requests.post(
    "https://veqen-app.com/v1/ip/check",
    headers={"Authorization": f"Bearer {os.environ['VEQEN_API_KEY']}"},
    json={"ip": "203.0.113.7"},
    timeout=10,
)
result = r.json()
print(result["risk"]["verdict"], result["risk"]["reasons"])
const res = await fetch("https://veqen-app.com/v1/ip/check", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.VEQEN_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"ip": "203.0.113.7"}),
});
const result = await res.json();
console.log(result.risk.verdict, result.risk.reasons);
Questions

About AS395954

Is AS395954 a datacenter or VPN network?

AS395954 (Leaseweb USA, Inc.) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Who owns AS395954?

AS395954 is registered to Leaseweb USA, Inc.. It announces about 551,168 IPv4 addresses.

How do I detect traffic from AS395954?

Call the Veqen IP check with the visitor's address. The response includes the ASN, the owner and whether the network is a datacenter, VPN network, relay or ISP.