Run a live fraud check on your current connection — VPNs, proxies, Tor exit nodes, datacenter hosting, and residential proxy networks. Or look up any IP address, one at a time or twenty at once.
Paste any public IPv4 or IPv6 address for a network-reputation verdict — datacenter hosting, Tor exits, and anonymity signals. Switch to bulk to check up to 20 at once.
——
Up to 20 public IPs per batch, 3 batches per hour. No email required and no newsletter signup. Check only addresses you are authorised to process; see our Privacy Policy.
IP
Verdict
Risk
Signals
Network
How It Works
Understand the signals and their limits
01
Real-time detection
A live scan can combine browser and network evidence when those checks succeed. An arbitrary-IP lookup checks available cloud-server ranges and Tor exit lists, not the browser or every VPN/proxy. A missing signal is not proof that a visit is safe.
02
Technical data is still personal data
IP addresses and device identifiers can be personal data. Lookups process the address you submit; live scans also use browser signals and security technologies. Read our Privacy Policy and Cookie Policy for purposes, recipients and retention. Bulk checks do not enrol you in marketing.
03
Powered by Maskbreak API
This tool runs on the same detection engine available for your application. Integrate the same intelligence into your signup flow, checkout, or login with a single API call.
FAQ
Common questions
What does this tool check?
A scan of your live connection evaluates VPN and proxy intelligence, datacenter ranges, and Tor exit-node lists, alongside browser and device signals. An arbitrary-IP lookup (the Check Any IP box) draws on network-reputation data — datacenter ranges and Tor exits — without the device layer.
Is it free?
Yes, completely free. No account needed, no credit card required. For bulk or programmatic access to the same data, sign up for an API key at /signup — the free tier includes 1,000 requests per hour.
How accurate is it?
We do not publish a validated accuracy percentage. IP-only checks use available cloud-server and Tor feeds; they can miss new or unlisted addresses and do not establish a person's identity or intent. VPN/proxy and browser evidence requires a live visit. Use results as one risk input, allow review of adverse decisions, and validate your policy against your own traffic.
Can I use this for my application?
Yes. Sign up for a free API key at /signup (1,000 requests/hour free). The token-based POST /v1/evaluate returns the full signal set — risk score, network flags, and device intelligence. The arbitrary-IP GET /v1/lookup/{ip} returns network-reputation flags (datacenter, Tor) for an IP you don't control.
Can I look up a specific IP address?
Yes — use the Check Any IP box for a public IPv4 or IPv6 address, or the bulk tab for up to 20 at once, without an email. Single checks allow up to 12 per minute and 80 per day; bulk checks allow 3 batches per hour. Limits are per client IP. For programmatic volume use GET /v1/lookup/{ip} with your API key. Blank VPN/proxy cells in CSV mean not checked, not a clean result.
Add this to your platform
Free tier: 1,000 requests/hour. No card, no expiry. Live in minutes.