Domains and networks

What’s my IP address

Your public IP address as the internet sees it, the network it belongs to, whether it’s residential or a data center, whether it’s a known proxy, VPN or Tor exit node, whether WebRTC leaks a different one, and how fast this connection is.

By using these tools you accept the Terms and the Privacy page.

Speed test

Latency, download and upload between you and the nearest Cloudflare data center. Takes about 20 seconds and uses up to about 100 MB of data.

Want a longer test? The full speed test (OpenSpeedTest) runs six streams each way for 12 seconds; on a gigabit line that’s about 3 GB of data.

How the What’s my IP tool works

This page shows the public IP address your browser connects from, its network and roughly where it is, whether that address is a known proxy, VPN or Tor exit node, tests whether WebRTC reveals a different address, and can measure your connection speed. Use it to check a VPN, or to find the address to give a support team or add to an allowlist.

What the page shows

  • Address and network: the IPv4 or IPv6 address your browser connected with, and its network’s AS number and name. If Cloudflare passes a stand-in IPv4 address for an IPv6 visitor, you see your real IPv6 address.
  • Location: approximate city, region, country, postal code, coordinates and time zone. A Tor exit relay has none.
  • Connection type: residential (a home or mobile provider), data center, ISP or carrier, business, university or government, from the data-center list and the network’s PeeringDB registration.
  • Proxy, VPN and Tor check: whether the address is a Tor exit relay, an iCloud Private Relay address, a Cloudflare WARP address, on a VPN-provider or data-center list, or reached the site with proxy headers.
  • Reverse DNS: your PTR name, and whether up to three such names resolve back to your address. No PTR is normal for home and mobile connections.
  • Connection: the Cloudflare data center that answered (an airport code), HTTP and TLS versions, cipher and TCP round trip.
  • Browser and device: values any site can read without asking, such as your browser and screen.

Residential or data center

The connection type answers whether the address belongs to a home or mobile internet provider or to a data center. The address itself is checked first: if it’s on X4B’s data-center list or on Cloudflare’s network, it’s a data center whatever the network calls itself. Otherwise the page uses the type your network registered in PeeringDB, looked up by its AS number only and kept for a week.

  • Residential: an access network (Cable/DSL/ISP in PeeringDB), such as a cable, fibre, DSL or mobile provider. A network that also runs hosting still counts as residential unless the address is on the data-center list.
  • Data center: a hosting, cloud, CDN or network-services network, where VPNs, proxies, servers and bots usually sit.
  • ISP or carrier: a large carrier registered as a network service provider, which serves both homes and businesses.
  • Business, university or government: a network run by an organisation for its own people.
  • Unknown: the address isn’t on the data-center list and the network has no type in PeeringDB, which is common for small providers.

The proxy, VPN and Tor check

Your address is compared on the server with lists the site downloads itself, so it never goes to another IP service. When several signals match, the strongest one is the verdict and every list’s own result is shown in the table, with the time each list was last downloaded.

  • Tor exit relay: the Tor Project’s bulk exit list and the measured exit addresses of running exit relays, refreshed every hour. For IPv6, the published address of exit relays that allow IPv6 exits. Cloudflare’s own Tor flag is shown too.
  • iCloud Private Relay: Apple’s published egress ranges. Apple’s relay hides your address and shows sites one in roughly your region.
  • Proxy headers: Via, Forwarded, X-Forwarded-For and similar headers your request arrived with, beyond the ones Cloudflare adds. A company or school proxy adds them, and address headers can hand the address behind the proxy to every site.
  • Cloudflare WARP: an address on Cloudflare’s own network (AS13335), which is usually WARP, the 1.1.1.1 app or another Cloudflare service.
  • VPN provider or data center: X4B’s lists_vpn (MIT licence), refreshed daily. A data-center address isn’t a home or mobile connection, so traffic from it is usually a VPN, a proxy, a cloud server or a bot.
  • Not listed: no list matched. Residential proxies, smaller VPN services and your own servers aren’t on public lists, so that isn’t proof; the WebRTC and time-zone checks can still give a VPN away.

How to read the WebRTC result

The test is cautious: only a public address of the same IP version that doesn’t match your connection counts as a leak. For IPv6, an address in your own /64 counts as a match.

  • No WebRTC leak: the same public address as your connection, with local addresses hidden behind random .local names.
  • Reveals a different public address: on a VPN or proxy, that is most likely your real address getting around it.
  • Exposes your local network address: not your public IP, but it helps sites fingerprint you.
  • Another address in your own IPv6 network: it shares your /64, usually another IPv6 address of the same device.
  • An address this page can’t compare: an address of the other IP version. On a VPN, if it isn’t the VPN’s, it’s leaking.
  • Couldn’t complete the test, or couldn’t see a public address: something may be blocking WebRTC or the STUN server, such as an extension, a browser setting, or a firewall or VPN that blocks UDP. That’s inconclusive, not a pass.

A time zone mismatch

If your browser’s UTC offset differs from the one at your address’s location, the page warns you. That’s expected with a VPN, and it’s one way sites spot one.

Reading the speed test

Latency is the median of the idle round trips, and jitter the average change between consecutive ones. Latency under load is measured during the download: a big rise over idle latency points to bufferbloat, where a busy link also delays small requests.

To learn more about your network, look up its AS number in the ASN lookup. If this address sends mail, run the reverse DNS check on it.

Updated · Maintained by Liviu Tanase

Questions

Where do the location and network details come from?

From Cloudflare, which serves this site: it looks up the address your request came from and passes the network (ASN), country, region, city and time zone along with the request. No other IP service receives your address; for the connection type, only your network’s number (ASN) is looked up in PeeringDB. The country is usually right; the city is often off by tens of kilometres, and with a VPN or proxy you see the exit server’s location instead of yours.

How do you tell whether my IP is a proxy, VPN or Tor exit node?

The server compares your address with public lists it downloads itself: Tor exit relays from the Tor Project (refreshed hourly), Apple’s iCloud Private Relay egress ranges, and X4B’s lists of VPN-provider and data-center networks (refreshed daily). It also checks whether your address is on Cloudflare’s own network, as Cloudflare WARP addresses are, whether Cloudflare flags it as Tor, and whether your request carried proxy headers such as Via or X-Forwarded-For. Your address is never sent to the list publishers. A clean result doesn’t prove there’s no proxy: residential proxies, smaller VPN services and private servers aren’t on public lists.

Is my IP residential or a data-center IP?

The page answers in the Connection type line. An address on X4B’s data-center list or on Cloudflare’s own network is a data center. Otherwise the answer comes from how your network is registered in PeeringDB: an access network (Cable/DSL/ISP) is residential, which includes mobile carriers; a content, hosting or network-services network is a data center; others show as an ISP or carrier, a business, a university or a government network. Only your network’s number is sent to PeeringDB, never your address. A network that isn’t in PeeringDB shows as Unknown.

Why does it show my IPv6 address and not my IPv4 one?

It shows the address your browser used for this connection. When your network and the site both support IPv6, browsers usually prefer it, so a dual-stack connection shows its IPv6 address here. The WebRTC test can reveal the other one; it then reports an address this page can’t compare.

Is my IP address on a blacklist?

This page doesn’t look your address up on blocklists. Run the blacklist check on it to see whether Spamhaus and other DNS blocklists list it, and the reverse DNS check to see whether its PTR name resolves back to it, which mail servers expect from a sending address.

What does the WebRTC leak test do?

It asks your browser to prepare a WebRTC connection, which makes it contact a STUN server (Cloudflare’s, at stun.cloudflare.com) and list every address it could be reached on. If a public address shows up that differs from the one this page sees, WebRTC is going around your VPN or proxy and revealing your real address.

The leak test shows a different address. How do I fix it?

Turn on your VPN app’s leak protection or full-tunnel mode first. In Firefox you can set media.peerconnection.enabled to false in about:config. In Chrome and Edge, Google’s WebRTC Network Limiter extension or uBlock Origin’s “Prevent WebRTC from leaking local IP addresses” setting stops it. In Brave, set Settings, Privacy and security, WebRTC IP handling policy to “Disable non-proxied UDP”. Turning WebRTC off also stops video calls in the browser.

How does the speed test work?

It measures latency and jitter with 15 small requests, then downloads over three parallel streams and uploads over two, for up to eight seconds each, skipping the first second while the connection speeds up. Data comes from and goes to the nearest Cloudflare data center, so it measures your connection to the edge, not to any one website. It uses up to about 100 MB of data.

Is anything stored or logged?

The tool doesn’t store or cache your address, and uploaded speed-test data is read and thrown away. Like every request to the site, your visit, with your IP address, appears in Cloudflare’s request logs (see the privacy page). To show your reverse DNS name, your browser asks Cloudflare’s public DNS resolver (Google’s if Cloudflare’s doesn’t answer) for your address’s PTR record. The browser and system details are read by this page inside your browser and never sent anywhere.