IP Address Reputation Lookup
Geolocation, ISP, ASN, proxy/VPN/Tor detection
Enter any IPv4 or IPv6 address to see its geographic location, internet service provider, autonomous system number, and whether it's associated with a proxy, VPN, Tor exit node, or cloud hosting provider.
IP Information
What Is IP Reputation?
An IP address's "reputation" reflects its history and classification. IP addresses used by legitimate home users carry a very different reputation than those belonging to data centres, VPN providers, Tor exit nodes, or known spam networks. When a scammer or hacker operates behind a VPN or proxy, their real IP is hidden — but the proxy IP itself may be flagged in threat intelligence databases.
When to Use an IP Lookup
Use this tool when: you receive a suspicious email and want to check the sending server's IP; a website contact form is being abused and you want to investigate the submitter's IP; you need to verify whether a server is hosted in an unexpected country; or you're investigating a security incident and need to understand an IP's network context.
What Does "Proxy / VPN / Tor" Mean?
A proxy server relays traffic on behalf of another user, hiding their real IP. VPNs (Virtual Private Networks) tunnel a user's traffic through a server in another location. Tor routes traffic through multiple encrypted relays. While all three have legitimate uses, they are also commonly used to anonymise malicious activity. An IP flagged for any of these is not automatically malicious, but warrants additional scrutiny.