Check any IP. Free.
VPN, proxy, tor exit, datacenter, abuse history, ASN, geo. One call, sub-millisecond, no signup needed.
Result
185.220.101.34
Brandenburg, Germany · TORSERVERS-NET · Data Center
Showing 185.220.101.34 is a real Tor exit node, just for the demo. Type any IP above to check yours.
Real IPs, real flags.
185.220.101.34
Tor exit · critical
TORSERVERS-NET exit node with a stack of threat tags: C2, botnet, SSH brute-force, spam. Common in scrapers and credential-stuffing.
192.42.116.16
Tor exit · critical
Different operator, same risk profile. Useful for showing your team how Tor IPs cluster across providers.
104.28.45.122
Cloudflare · medium
On Cloudflare's network but flagged VPN + proxy. The connection_type tells you it's not a real human's IP.
23.94.56.118
Datacenter · medium
HostPapa hosting, flagged as a commercial VPN. Real customers don't shop from a server farm; a typical fraud-flag pattern.
146.70.147.135
Commercial VPN · medium
M247. Used by NordVPN, ProtonVPN. Challenge, don't block. Real customers use VPNs too.
8.8.8.8
Google DNS · none
Datacenter space, and clean: 5/100. Worth checking precisely because it proves a hosting flag alone is not a verdict. Your end user still should not be arriving from a DNS resolver.
Want to do this in code?
Get a free API key. Unlimited IP checks, batch lookups, usage dashboard.