IP Threat Score Lookup: VPN, Proxy, Tor & Datacenter Detection

Scanning IP intelligence…

Cross-referencing threat databases

Analysed IP Address

—

● —

—

/ 100

Threat Score

0 — Clean2060100 — Critical

✅

Loading…

Security Signals

Network Intelligence

ASN / Org

—

Usage Type

—

City / Country

—

PTR Hostname

—

Evidence

⚠️

Unable to reach the API.

Check the IP format and try again.

🎯

What is a Threat Score?

A 0–100 risk score that helps you decide whether to allow, review, or block an IP.

🧩

What data is returned?

Location, ASN, hostname, usage type, VPN/proxy/Tor detection, bot signals, and risk evidence.

🔐

Use in production

Call /api/pro/details?ip=X to get the security object, including risk score, VPN/proxy/Tor flags, datacenter status, and evidence.

Integrate IP Threat Intelligence Into Your App

One endpoint. Full JSON payload. Get the same security object used by this live checker — including risk score, VPN/proxy flags, Tor status, datacenter detection, and evidence.

Read risk_score and risk_level

Detect VPN & proxy traffic

Get location, ASN & hostname

Check Tor exit node status

Flag datacenter & hosting IPs

Use evidence for decisions

Scale up to 50,000 req/day

Bulk endpoint for up to 50 IPs

# One request — full intelligence payload curl -H "X-API-Key: YOUR_KEY" \ https://myip.casa/api/pro/details?ip=8.8.8.8 { "risk_score": 0, "risk_level": "Low", "is_vpn": false, "is_tor": false, "quota_remaining": 49999 }

Get Your API Key →

7-day free trial · No credit card required

🛡️

Why use this IP checker?

Detect VPNs, proxies, Tor exit nodes, datacenter IPs, and suspicious traffic before it reaches your application.

🛡️

Free VPN, Proxy and IP Reputation Check

Check whether an IP address is associated with VPN usage, proxy traffic, Tor exit nodes, datacenter hosting, suspicious network patterns, or elevated risk signals.

The live checker is useful for manual investigation. For applications, SaaS platforms, signup protection, fraud prevention, or bot filtering, use the MyIP.casa IP Intelligence API.

❓ Frequently Asked Questions

The score combines VPN/proxy ASN membership, Tor exit node listing, datacenter fingerprinting, PTR hostname patterns, and known abuse history. 0–20 = Low, 21–59 = Medium, 60–100 = High.

Yes — type any valid IPv4 or IPv6 address in the search bar. Leave blank to analyse your own current IP. This free tool is limited to 5 lookups/min; the Pro API removes that limit entirely.

A common setup is: 0–20 allow, 21–59 review or add friction, and 60–100 block for sensitive actions. You can tune thresholds depending on your false-positive tolerance.

Results are cached by IP for 24h for performance. We do not link IPs to personal profiles. See our Privacy Policy for details.

This tool checks whether an IP address is associated with VPN usage, proxy traffic, Tor exit nodes, datacenter hosting, suspicious network patterns, or elevated risk signals.

Yes. The live checker is useful for manual investigation. For applications, SaaS platforms, signup protection, fraud prevention, bot filtering, or backend security workflows, use the MyIP.casa IP Intelligence API.