My IP & network check
What does the internet actually see when you connect? This page reads the Cloudflare edge facts attached to your request — country, city, continent, timezone, the datacenter that served you, your network's ASN — adds the connection details (HTTP protocol, TLS version and cipher, measured TCP round-trip), and runs an IP intelligence panel: VPN, proxy, Tor, hosting/datacenter and spam reputation. Nothing is stored; type any IP in the box to check it instead of yourself.
Your own connection loads automatically below. Lookups: 30 per hour per visitor — plain IP literals only, hostnames are not resolved.
Reading the Cloudflare edge fields
- Country / city / region — where Cloudflare geolocates your IP. City-level geolocation is best-effort: mobile networks and large ISPs often resolve to a regional hub.
- Continent / timezone — derived from the same geo data; the timezone is what Cloudflare would hand an application for localizing times.
- Datacenter (colo) — the Cloudflare POP code that served you (SIN = Singapore, CGK = Jakarta, FRA = Frankfurt). Routing picks it, so it can be a hop away from your actual city; CDN latency is mostly TCP round-trip to this box.
- ASN / organization — the network that owns your IP (an AS number plus operator name). This is the fastest tell for “am I on my ISP, a mobile network, or a VPN exit / cloud server”.
- HTTP protocol, TLS version & cipher, TCP RTT — the negotiated transport: useful when debugging proxies, older clients or “why is this site slow for me”.
How the intelligence panel works
- Hosting / datacenter — the IP belongs to a cloud or colocation provider, not a consumer ISP. Most commercial VPN exits and proxies show up here or under proxy.
- Proxy / VPN — public lists of known anonymizer exits. Detection is probabilistic: a clean result means no public signal, not proof you are not behind a residential proxy (those borrow real consumer IPs and are by design hard to flag).
- Tor — checked against the Tor Project's own exit-node DNS list, so this one is authoritative, not heuristic.
- Reputation — spam and abuse reports tied to the IP (StopForumSpam frequency and SpamCop listings). A few reports are normal for shared mail servers; a history of them usually predicts blocked sign-ups and bounced mail.
Testing email flows from this network? Pair it with the SMTP tester (is port 587 reachable and authenticated?) or check a suspicious message with the header analyzer.