Free IP Address Checker
Look up any IP address for geolocation, VPN detection, proxy detection, and threat intelligence — instantly. No signup required.
Your IP: 216.73.216.26
216.73.216.26
Risk Score: 55/100
BlockVPN
- No VPN
Proxy
- No proxy
Tor
- Not Tor
ISP
- Clean ISP
Threat
- Flagged IP
Datacenter
- Datacenter IP
Issues Found:
- Known malicious IP
- Datacenter/hosting IP
Location
Network
Want to check IPs at scale?
Get 1,000 free API lookups per month. IP geolocation, VPN detection, threat intelligence, and risk scoring — all in one API call.
No credit card required. Cancel anytime.
How It Works
Enter an IP address
Type or paste any IPv4 or IPv6 address. Your own IP is pre-filled automatically.
We run the checks
Fidro checks geolocation, ISP, VPN and proxy detection, Tor exit nodes, and threat intelligence databases.
Get your full report
See location details, network information, threat checks, and a risk score with a clear recommendation.
What We Check
Every IP address is checked against multiple intelligence sources to give you a complete risk picture.
IP Geolocation
Country, city, region, postal code, timezone, and coordinates. Know where the IP is physically located.
VPN Detection
Detects connections from commercial VPN providers like NordVPN, ExpressVPN, Surfshark, and hundreds more.
Proxy Detection
Identifies HTTP proxies, SOCKS proxies, and web-based proxy services used to mask real IP addresses.
Tor Exit Node Detection
Checks against the live list of Tor relay and exit node IPs. Updated daily from the Tor Project directory.
ISP & Network Info
ISP name, organization, ASN, and connection type. Identifies data center and hosting IPs vs. residential connections.
Threat Intelligence
Cross-references against known malicious IPs, spam sources, and abuse databases. Updated daily from multiple threat feeds.
How to Read Your IP Lookup Results
When you check an IP address, Fidro returns two types of information: location and network data and a threat assessment.
Location data
The location panel shows the IP's approximate physical location. Country and city are usually accurate to within 20-50 miles of the actual location. The coordinates shown are not the exact address — they typically point to the ISP's nearest routing center. Timezone is useful for detecting mismatches between a user's claimed location and their actual connection point.
Network data
The network panel reveals who owns and operates the IP address. ISP shows the Internet Service Provider — residential ISPs (Comcast, BT, Telstra) are normal, while hosting companies (AWS, DigitalOcean, OVH) may indicate automated traffic. ASN (Autonomous System Number) is a unique identifier for the network that routes the IP's traffic — useful for identifying specific data centers and cloud providers.
Risk score
The risk score ranges from 0 to 100. A score of 0-20 means low risk — the IP looks like a normal residential or business connection. 21-50 is moderate risk, usually triggered by VPN or proxy detection. Above 50 is high risk, indicating Tor usage, known malicious IPs, or multiple threat signals combined. The recommendation (Accept, Review, or Block) gives you a quick action to take based on the score.
What Is My IP Address?
Your IP address is displayed at the top of this page as soon as it loads. It's the public IP address that your Internet Service Provider (ISP) has assigned to your router or modem. Every device in your household that connects through that router shares the same public IP address.
If you're connected to a VPN, the IP address shown will belong to the VPN server, not your actual connection. This is by design — VPNs work by routing your traffic through their servers, replacing your real IP with theirs. You can verify this by disconnecting your VPN and refreshing the page.
Most residential internet connections use dynamic IP addresses, meaning your IP can change periodically (usually when your router restarts or your ISP refreshes leases). Businesses often pay for static IP addresses that never change, which is useful for hosting servers or maintaining consistent access controls.
How Does an IP Address Lookup Work?
An IP address lookup works by querying multiple databases that map IP ranges to physical locations and network owners. When the internet was designed, blocks of IP addresses were allocated to regional registries (ARIN for North America, RIPE for Europe, APNIC for Asia-Pacific, etc.), which then assigned them to ISPs and organizations. These allocation records are public.
Geolocation databases combine these allocation records with routing data, user-reported corrections, and commercial data feeds to estimate where an IP is located. The accuracy varies: country-level accuracy is typically above 99%, city-level accuracy is around 70-80%, and anything more specific than that is unreliable.
For fraud prevention and security, IP lookups go beyond basic geolocation. Services like Fidro cross-reference the IP against threat intelligence databases, VPN provider IP ranges, known proxy servers, and Tor exit node lists. This combination of location data and threat signals is what produces the risk score you see in your results.
VPN and Proxy Detection: How It Works
Detecting VPNs and proxies is one of the most important capabilities of modern IP intelligence. When someone connects through a VPN, their traffic appears to come from the VPN server's IP address instead of their own. This is legitimate for privacy, but it's also how fraudsters hide their real location.
Fidro detects VPNs and proxies through several methods:
- IP range matching — Commercial VPN providers like NordVPN, ExpressVPN, and Surfshark operate large blocks of IP addresses. These ranges are catalogued and updated regularly.
- ASN analysis — VPN servers typically run on data center infrastructure. An IP belonging to a hosting provider (e.g., AWS, DigitalOcean) rather than a residential ISP is a strong proxy indicator.
- Tor exit node lists — The Tor Project publishes a public list of all relay and exit node IPs, updated multiple times per day. Any traffic from these IPs is definitively Tor traffic.
- Connection type metadata — ISP records often include whether a connection is residential, business, or hosting/data center, providing another signal for proxy detection.
This is particularly relevant for e-commerce fraud detection and free-tier abuse prevention, where masked IPs are a common indicator of malicious intent.
IPv4 vs. IPv6: What's the Difference?
There are two versions of IP addresses in use today. IPv4 uses 32-bit addresses formatted as four groups of numbers separated by dots (e.g., 192.168.1.1). It supports about 4.3 billion unique addresses — which seemed like plenty in the 1980s but has since run out.
IPv6 uses 128-bit addresses formatted as eight groups of hexadecimal digits separated by colons (e.g., 2001:0db8:85a3::8a2e:0370:7334). It supports 340 undecillion addresses — more than enough for every device on earth to have its own.
Both formats work with this IP checker. IPv6 adoption is growing but still represents roughly 40% of internet traffic globally. Most websites and services support both protocols simultaneously through a mechanism called dual-stack, where devices maintain both an IPv4 and IPv6 address.
What is Fidro?
Fidro is a fraud prevention and IP intelligence API. It helps businesses detect VPNs, proxies, Tor nodes, disposable emails, and other signals of fraudulent activity — all in a single API call. Fidro combines IP geolocation, threat intelligence, email validation, and risk scoring into one platform, so you don't need to stitch together multiple vendors.
This free IP checker uses the same technology that powers the Fidro API. For production use, you can sign up for a free API key and get 200 lookups per month at no cost. See how Fidro stacks up against IPQualityScore, MaxMind, and other providers.
Frequently Asked Questions
What is my IP address?
Your IP address is shown automatically when you visit this page. It's the public IP address your Internet Service Provider has assigned to your connection. If you're using a VPN, the IP shown will be the VPN server's address rather than your actual IP.
What is an IP address?
An IP address (Internet Protocol address) is a unique numerical label assigned to every device connected to the internet. It serves two purposes: identifying the device on a network and providing its approximate location. IPv4 addresses look like 192.168.1.1, while IPv6 addresses are longer, like 2001:0db8:85a3::8a2e:0370:7334.
What can you tell from an IP address?
An IP address reveals the approximate geographic location (country, city, region), the Internet Service Provider (ISP), whether the connection is residential or commercial, and whether the IP is associated with a VPN, proxy, or Tor network. IP intelligence services like Fidro can also check if an address appears on threat lists, identify the hosting provider, and determine the ASN.
Can someone find my exact location from my IP?
No. An IP address only reveals your approximate location — typically accurate to the city level. It cannot pinpoint your street address or exact GPS coordinates. The location shown is usually the nearest data center or point of presence for your ISP. Using a VPN will show the VPN server's location instead of yours.
How does VPN and proxy detection work?
VPN and proxy detection works by cross-referencing IP addresses against databases of known VPN providers, proxy services, and data center IP ranges. Additional signals include checking the ISP name, ASN ownership, connection type metadata, and behavioral patterns. Tor exit nodes are identified through the publicly maintained list of Tor relay IPs updated daily.
What is the difference between IPv4 and IPv6?
IPv4 addresses use 32 bits and look like 192.168.1.1, allowing about 4.3 billion unique addresses. IPv6 addresses use 128 bits and look like 2001:0db8:85a3::8a2e:0370:7334, supporting a virtually unlimited number of addresses. IPv6 was created because the world is running out of IPv4 addresses. Both formats work with this tool.
Why should businesses check IP addresses?
Businesses check IP addresses to prevent fraud, enforce geographic restrictions, detect account abuse, and identify suspicious activity. For example, an e-commerce site can flag orders from known VPN or proxy IPs, a SaaS product can detect free-tier abuse from data center IPs, and a financial service can verify that a user's claimed location matches their IP geolocation.
Is this IP checker free?
Yes, this tool is completely free with no signup required. For higher-volume needs, Fidro offers a free API plan with 200 lookups per month — no credit card required. Paid plans start at $29/month for 5,000 lookups with full threat intelligence.
Need IP intelligence at scale?
Add IP intelligence to your app with one API call. Get geolocation, VPN detection, proxy detection, threat checks, and risk scoring in a single request.
curl -X POST https://api.fidro.io/v1/ip-lookup \
-H "Authorization: Bearer YOUR_API_KEY" \
-d '{"ip": "203.0.113.42"}'Also try our email checker, VPN detector, domain checker, and bulk email validator.