IP Report
2a12:f547:3e0a:65c2:ef38:f46f:e1a8:57c5
Leaseweb USA, Inc. · AS30633 · Paris, France
Score 25 of 100, in the low risk band. Bands run 0 to 19 minimal, 20 to 49 low, 50 to 79 medium, 80 to 100 high.
Its risk score of 25/100 is low-to-moderate: some signal is present, but on its own it would not justify blocking a visitor.
Detection signals
Not detected: Tor, VPN, Proxy, Crawler
Summary
2a12:f547:3e0a:65c2:ef38:f46f:e1a8:57c5 is a server address in commercial hosting space, not a home or mobile connection. Traffic from it is almost always software rather than a person browsing.
The address is announced by Leaseweb USA, Inc. (AS30633) and geolocates to Paris, Ile-de-France, France.
Why this address scores 25
It sits in datacenter address space, where automated traffic vastly outnumbers human visitors.
Individually these are weak signals; together they lift the score to 25/100, which is enough to be worth noting but not enough to act on by itself.
Observation history
This address has been looked up through Predax 3 times, first on September 2, 2026.
Each lookup re-evaluates the address against current feeds, so the classification above reflects its most recent check, not a stale record.
Network & location
- ASN
- AS30633
- Country
- France (FR)
- Provider
- Leaseweb USA, Inc.
- Region
- Ile-de-France
- CIDR
- 2a12:f540::/29
- City
- Paris
- Network type
- hosting
- First seen
- 9/2/2026, 5:55:55 AM
- Last seen
- 9/2/2026, 5:55:55 AM
- Times seen
- 3
Network context
We have observed 20 addresses on Leaseweb USA, Inc. (AS30633); 100% of them carried a threat flag or a notable risk score when last checked.
That is a high concentration — on this network, an unfamiliar address deserves more caution than its individual score alone would suggest.
What to do with this
If you run a site and this address showed up
Traffic from server space is rarely a person on a browser. If this address hit your site, it was most likely a bot, a monitor, or a scripted client.
Unblocking it is only worth doing if you can tie it to a service you actually use — an uptime monitor, a payment webhook, an integration. Otherwise a block costs you nothing.
If you found this address in your logs
In your logs this address is almost certainly automation. Check the user agent and the request pattern before attributing its traffic to a human.
If you operate this address yourself and it is being blocked elsewhere, this datacenter classification is why — hosting IPs start from a lower trust position everywhere.
Loading map...
Detection sources
No risk signals triggered
This IP didn't match any of our VPN, proxy, Tor, datacenter, or crawler detectors.