Free Proxy, VPN & Malicious IP Detection Tool

Quickly check any IP address to determine the likelihood of it being a proxy, VPN, or malicious IP using advanced machine learning and probability theory techniques.

How It Works

Enter IP Address

Simply enter the IP address you want to check. Our system will analyze it against billions of records in real-time.

Advanced Analysis

Our system uses machine learning and probability theory to infer IP behavior across multiple datasets.

Get Instant Results

Receive a probabilistic score (0-1) indicating how likely the IP is a proxy, VPN, or malicious.

How to interpret results: A value between 0 and 1 indicates the likelihood of an IP being a proxy/VPN/malicious. A value of 1 means the IP is explicitly banned (web host, VPN, or TOR node).

Important Assumptions

The following assumptions must be met for accuracy and correctness:

It is assumed that the IP you're looking up is making requests to your services on an application level.
If your online services involve multiple servers or external services, it is assumed that you do not look up these IPs or whitelist them on your system.

IP Lookup Tool

The web interface below allows you to quickly lookup IPs without writing any code. It uses flags=f and oflags=r for full bad IP detection including compromised systems and residential proxy detection.

Note: A full lookup might take up to 5 seconds because results are generated in real-time. An adaptive Cloudflare Turnstile has been implemented to prevent abuse. For automated lookups, please use our free API.

Quick Lookup

Custom IP Lookup

Want more features? Explore the full set of options and features in our API Documentation

Interpretation of Results

If a value of 0.50 is returned, it's as good as flipping a fair coin, which implies it's not very accurate. From personal experience:

Values > 0.95 should be reviewed carefully
Values > 0.99 are most likely proxies/VPNs
Anything < 0.90 is considered "low risk"

Recommendation: I only recommend automated action on high values (> 0.99 or even > 0.995). It's always best to manually review IPs that return high values. For example, mark an order as "under manual review" rather than automatically provisioning products.

Be sure to experiment with the results of this system before you use it live on your projects. If you believe the result is wrong, don't hesitate to contact me. If it's an error on my end, I'll correct it. If you email me, expect a reply within 12 hours.

Disclaimer

GetIPIntel provides this service on an "as is" and "as available" basis without any express or implied warranties. Use of this service is entirely at your sole risk and discretion. In no event shall GetIPIntel, its owners, operators, or affiliates be liable for any damages or claims of any kind.

Terms of Service

By using this service, you agree to:

Not sell this service or information generated from this service, directly or indirectly, without explicit consent.
Not use/reuse information generated from this service, directly or indirectly, without giving credit to the source (this website).
Not exceed the query limits if you're a free user.
Not look up random IPs / incremental IP lookups. The database changes very often so information becomes stale very fast.
The Terms of Service may change at any given time, without prior notice.

Contact

You can find me on Twitter, GitHub, or email.

If I do not respond to your email within 24 hours, something's wrong - check your spam folder. Please send an email to my gmail address, or contact me via Twitter.

Ultimately, I want the system to be as accurate as possible, so please let me know if there are any inaccuracies. I'd like to fix any issues. Let me know if you have custom requirements such as more queries per minute, skip cache, etc.