17.253.144.10 — datacenter / hosting IP, not residential.
Weak hosting-network indicators — 3 signals matched across 3 intelligence sources. moderate confidence in this reading.
Protocol handshake
Live OpenVPN, IKEv2, WireGuard, SOCKS5, and HTTP-CONNECT probes. Ground truth on positive.
Proxy-identifying header on 80: "Via: http/1.1 defra3-edge-bx-024.ts.apple.com (acdn/329.16654)"
Shodan observation
Passive ~30-day port fingerprint. VPN/proxy software CPE matches and observed ports.
Shodan has observed 2 open port(s) on this IP
ASN classification
Team Cymru allocation data + PeeringDB self-declared network type.
ASN AS714 is a known pure-CDN edge (Apple) — datacenter and content-host signals suppressed
Should I block this IP?
Practical guidance by use case — fraud, ad-ops, streaming, and general websites.
This IP belongs to a hosting provider (AWS, GCP, Vultr, OVH, DigitalOcean, etc.). It's not a confirmed VPN, but it's also not a real consumer device. Common origins: scrapers, server-side fetches, automated browsers, self-hosted VPNs (Algo / WireGuard / OpenVPN on a VPS).
- Fraud / risk teams
- Treat as bot-tier traffic by default. Real customers rarely connect from datacenter IPs — when they do, it's almost always a self-hosted VPN. Step-up auth is the right call.
- Ad ops / programmatic
- Filter from billable inventory. Datacenter IPs serving display ads are essentially never real users.
- Streaming / geo-licensing
- Block. Whether it's an AWS exit serving as a personal VPN or a scraper, neither is your audience.
About IP address 17.253.144.10
17.253.144.10 is an IPv4 address routed via AS714 (Apple Inc.) and geo-located to United States. The verdict above combines six free, no-auth intelligence sources: local db-ip ASN data, the Tor Project exit list, public proxy feeds (TheSpeedX / Proxifly / FireHOL), Team Cymru + PeeringDB for ASN classification, RIPE NCC for BGP topology and abuse contacts, and Shodan InternetDB for ~30-day port observation.
Verdicts are recomputed on every page load and cached for up to one hour upstream. No data about your browser or identity is persisted.