Free network tool

Proxy & VPN Check

Review local network intelligence and first-party observations for signs of proxy, VPN, Tor or hosting-provider use.

Private by design Lookups run on our server. Repeated public results may be cached to improve speed and reduce unnecessary network requests.
1

Enter your lookup

The result is evidence-based and includes a confidence level. It is not a claim about a person’s identity.

2

Privacy & network result

Your result

Ready

Results will appear here

Run the lookup above to see a visual summary, plain-English explanations, copy and sharing options. Raw JSON remains available under Technical data.

What it checks

Understand the result before acting on it

These are the main signals used by this tool. Availability can vary by address, domain, registry and data source.

01

Known VPN network ranges and exact locally stored observations

02

Current Tor exit-node signals and reverse-hostname clues

03

Hosting, cloud, ASN and provider identity indicators

01

Beginner steps

  1. Enter the public IP you want to check, or keep your own IP already filled in.
  2. Read the individual Proxy, VPN, Tor and Hosting indicators instead of relying on one label.
  3. Check the evidence, confidence and dataset date before sharing the permanent result.
02

Understand the limits

Detection is probabilistic. A result can show strong evidence, weak evidence or no known evidence, but an IP-only check cannot prove who is using the connection.

Next steps

Continue your investigation

Inspect the IP network

See the country, ASN, provider and prefix behind the address.

 Review registration

Check the official RDAP allocation and organizations.

 Check reputation

Review locally stored abuse and blacklist observations.
?

Plain-English help

Proxy check FAQ for beginners

Why can a VPN be missed?

VPN providers rotate addresses and can use ordinary residential, mobile or cloud networks. No IP-only detector can identify every VPN with certainty.

Does a hosting IP always mean VPN?

No. Websites, game servers, business systems, remote desktops and VPN gateways all use hosting networks. Hosting is supporting evidence, not proof.

How is Tor detected?

Known Tor exit addresses are refreshed from the Tor Project and matched against the exact public IP.

What does inconclusive mean?

It means there is not enough reliable evidence to say yes or no. It should not be read as a clean guarantee.

Can a residential proxy look normal?

Yes. A residential proxy can use an address assigned to a home or mobile network, so it may resemble an ordinary connection.

Why do different VPN-check websites disagree?

Services use different datasets, refresh schedules and scoring rules. A new or reassigned address may appear in one dataset before another.

Learn more

Guide Wi-Fi-Only Website Failures: A Two-Network Test Plan Before You Reset Anything

When one website opens on mobile data but fails on Wi-Fi, you have a useful comparison—not a verdict. This guide shows how to keep the device and hostname constant, compare the two network exits, separate DNS from IPv4 and IPv6 behavior, avoid misleading trace results, and create a small privacy-aware report that support teams can act on.

Read article Guide Your Phone Can Be “In” Two Places Online: Reconcile IP and Device Location

A website’s IP location and a phone or app’s device location can point to different places because they use different evidence. Use this two-location comparison method to test Wi-Fi, mobile data, VPN and managed-work connections, understand the result, and decide whether action is needed.

Read article Guide Why Does My Public IP Address Keep Changing?

Understand dynamic IP leases, router reconnects, mobile networks, CGNAT, IPv6 privacy addresses and when a static IP is useful.

Read article