Network · AS5696

AS5696 Express Scripts Incorporated

AS5696 (Express Scripts Incorporated) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Network check ASN

AS5696

OwnerExpress Scripts Incorporated
KindInternet service provider
Servers, not peopleno
IPv4 addresses131,840
IPv4 ranges5
IPv6 ranges0

Risk score0

Nothing suspicious found.

Largest IPv4 ranges

167.211.0.0/16
167.18.0.0/16
199.204.159.0/24
199.204.156.0/24
198.27.9.0/24

Ranges and owner from DB-IP (CC BY 4.0), updated 2026-10-21.

Check an IP address →

Detect it in code

Spot AS5696 traffic at signup.

Send the visitor's IP. The response includes the ASN, the owner and flags.hosting.

curl https://veqen-app.com/v1/ip/check \
  -H "Authorization: Bearer $VEQEN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"ip": "203.0.113.7"}'

import os, requests

r = requests.post(
    "https://veqen-app.com/v1/ip/check",
    headers={"Authorization": f"Bearer {os.environ['VEQEN_API_KEY']}"},
    json={"ip": "203.0.113.7"},
    timeout=10,
)
result = r.json()
print(result["risk"]["verdict"], result["risk"]["reasons"])

const res = await fetch("https://veqen-app.com/v1/ip/check", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.VEQEN_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"ip": "203.0.113.7"}),
});
const result = await res.json();
console.log(result.risk.verdict, result.risk.reasons);

Questions

About AS5696

Is AS5696 a datacenter or VPN network?

AS5696 (Express Scripts Incorporated) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Who owns AS5696?

AS5696 is registered to Express Scripts Incorporated. It announces about 131,840 IPv4 addresses.

How do I detect traffic from AS5696?

Call the Veqen IP check with the visitor's address. The response includes the ASN, the owner and whether the network is a datacenter, VPN network, relay or ISP.