Check any IP. Free.
VPN, proxy, tor exit, datacenter, abuse history, ASN, geo. One call, sub-millisecond, no signup needed.
Result
185.220.101.34
Brandenburg, DE · Stiftung Erneuerbare Freiheit · Data Center
Showing 185.220.101.34 is a real Tor exit node, just for the demo. Type any IP above to check yours.
Real IPs, real flags.
185.220.101.34
Tor exit · critical
5 threat tags, hosted on a Calyx-style anonymity network. Common in scrapers and credential-stuffing.
192.42.116.16
Tor exit · critical
Different operator, same risk profile. Useful for showing your team how Tor IPs cluster across providers.
104.28.45.122
Cloudflare · low
Cloudflare relay. Looks like a CDN edge. Low score, but the connection_type tells you it's not a real human's IP.
23.94.56.118
Datacenter · medium
ColoCrossing hosting. Real customers don't shop from a server farm; this is a typical fraud-flag pattern.
146.70.147.135
Commercial VPN · medium
M247. Used by NordVPN, ProtonVPN. Challenge, don't block. Real customers use VPNs too.
8.8.8.8
Google DNS · critical
Looks innocent, scores 100. Google Cloud connection_type + abuser flag. Your end-user shouldn't be coming from here.
Want to do this in code?
Get a free API key. 10,000 IP checks per day, batch lookups, usage dashboard.