75/100
Fraud score
high risk
What we know about 173.249.255.226.
VPN
Detected
Proxy
Clean
Tor
Clean
Relay
Clean
Datacenter
Detected
Mobile
Clean
VPN connection detected (unknown provider). Traffic is being routed through a commercial VPN service, masking the user's real IP address. Flagged for suspicious activity by our honeypot sensors. Lower confidence - may warrant additional verification. Located in a high-risk network neighborhood where 98% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation
Network
- ASN
- AS11878
- Organization
- tzulo, inc.
- ISP
- tzulo, inc.
- Connection type
- Data Center
- Cloud provider
- –
- Residential proxy
- No
- Shared connection
- No
Location
- Country
- United States (US)
- Region
- Illinois
- City
- Chicago
- Coordinates
- 41.8835, -87.6305
- Timezone
- America/Chicago
- rDNS
- –
- Hostname
- static-173-249-255-226.cust.tzulo.com
History
- First seen
- Aug 15, 2026
- Last seen
- Nov 2, 2026
- Times seen
- 595
Threat signatures · 2
Subnet (/24)
- IPs observed
- 132
- Abusive
- 130
- Abuse ratio
- 98%
No reports on 173.249.255.226 yet.
Nobody has reported 173.249.255.226 yet. If it attacked you, be the first: every report feeds the free, open database that everyone can use.
173.249.255.226, answered.
Yes. FFraud classifies 173.249.255.226 as a VPN endpoint. Connection type: Data Center.
FFraud scores 173.249.255.226 at 75/100 (high risk) because VPN connection detected (unknown provider). Traffic is being routed through a commercial VPN service, masking the user's real IP address. Flagged for suspicious activity by our honeypot sensors. Lower confidence - may warrant additional verification. Located in a high-risk network neighborhood where 98% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.
173.249.255.226 is operated by tzulo, inc. (AS11878), located in Chicago, United States.
The score reflects high-confidence signals: VPN connection detected (unknown provider). Traffic is being routed through a commercial VPN service, masking the user's real IP address. Flagged for suspicious activity by our honeypot sensors. Lower confidence - may warrant additional verification. Located in a high-risk network neighborhood where 98% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.
Check another IP. One at a time, instantly.
173.249.255.226: fraud score 75 of 100, High risk
173.249.255.226
tzulo, inc. · United States
75/100
Fraud score
- VPN: yes
- Proxy: no
- Tor: no
- Datacenter: yes