Proxy detection

Check an address against listed proxy IPs and known proxy or privacy relay networks.

Add host-level proxy evidence to triage.

Store risk.is_proxy alongside the request address and your own observations. The flag reports an IP or network match. It does not test a port or prove that a request used a proxy.

1.0.171.213Full IP report

Example lookup1.0.171.213risk.is_proxytrue

ProxyListed

AS23969 · TOT Public Company Limited

A listed host may offer a proxy service without being used as a proxy by every visitor. This does not identify every private or residential proxy.

API fields

Field definitionExample from 1.0.171.213

risk.is_proxyType: boolean: Address matches a listed proxy IP, a reviewed proxy-provider network or a privacy relay exit range.; Example valuetrue

Look up one address

Request

curl --fail --silent --show-error --max-time 5 \
  "https://api.ipquery.io/1.0.171.213?format=json"

Actual response fields

JSON

{
  "ip": "1.0.171.213",
  "risk": {
    "is_mobile": false,
    "is_vpn": false,
    "is_tor": false,
    "is_proxy": true,
    "is_datacenter": false,
    "risk_score": 50
  }
}

The excerpt shows the relevant fields from this single-IP response. Inspect the full IP report

For the connecting client’s own address, use https://api.ipquery.io/?format=json. Bulk lookups are disabled.

API reference

Matching and provenance

Public proxy IP lists plus reviewed proxy-provider and privacy relay ranges.

Explore public proxy entries Full methodology