Check any IP. Free.
VPN, proxy, Tor, datacenter, abuse history, network and location. One lookup, no signup.
185.220.101.34: fraud score 100 of 100, Critical
185.220.101.34
TORSERVERS-NET · Germany
100/100
Fraud score
- VPN: yes
- Proxy: yes
- Tor: yes
- Datacenter: yes
Real IPs, real flags.
Open one to see its full report.
185.220.101.34
Tor exit
A TORSERVERS-NET exit node with a stack of threat tags: C2, botnet, SSH brute force, spam. Common in scrapers and credential stuffing.
192.42.116.16
Tor exit
A different operator with the same risk profile. Shows how Tor addresses cluster across providers.
104.28.45.122
Cloudflare network
On Cloudflare's network but flagged as VPN and proxy. The connection type tells you it is not a home connection.
23.94.56.118
Datacenter
Hosting space flagged as a commercial VPN. Real shoppers rarely buy from a server farm, a typical fraud pattern.
146.70.147.135
Commercial VPN
Address space that VPN services rent. Challenge it rather than block it: real customers use VPNs too.
8.8.8.8
Google DNS
Looks harmless, but it is a datacenter address. A real visitor should not be coming from here.
Want to do this in code?
The public endpoint needs no key. A free key adds batch lookups and a usage dashboard.