IP check
Evidence check for VPN, proxy, Tor, relay and hosting signals on a public IP. Score is an evidence score, not a probability. Detection via IPLogs; geolocation via DB-IP.
Nothing runs until you click Check.
About this check
Detection: IPLogs. Geolocation: DB-IP (CC BY 4.0). The target address is sent to IPLogs when you click Check; CyberStack does not keep a lookup history. The score is an evidence score, not a probability. A cached answer can be up to 30 minutes old.
Nothing runs until you click Check. The address is POSTed to CyberStack, then our server asks IPLogs. Private, loopback and link-local addresses are rejected. Results may be cached for up to 30 minutes. Limits: 6/min and 30/hour per visitor; site-wide 40/min and 800 full checks/day (fast mode after that).
- Privacy relays such as iCloud Private Relay and Cloudflare WARP can score like a VPN but usually are not VPN users.
- A missing provider name is not a clean result — absence of a name does not mean the address is residential.
- Crawler flags come from published ranges, not from the visitor's User-Agent.