Proxy SpotterAustralian measurement data

IS YOUR IP WORKING A SECOND JOB?

Has your IP appeared
in proxy measurements?

Look up an address. See the observations. Understand what the evidence can tell you.

345,088 unique IP addresses observedIn the published measurement dataset.

01

Check an address

Search our published proxy measurements for an IPv4 or IPv6 address.

02

See when it appeared

View recorded observation times and available TCP handshake fields.

03

Understand the evidence

Connection associations and incomplete captures are clearly labelled.

Get an IP email alert

Frequently asked questions

What is a residential proxy?

A residential proxy lets someone else's internet requests travel through a household internet connection. Websites receiving those requests see the household's public IP address rather than the original user's address.
Some people knowingly share their connection through bandwidth-sharing services. In other cases, sharing may happen without clear permission. A Proxy Spotter result cannot tell which applies.

What is an IP address?

A public IP address is the address a website sees when your network contacts it. It works like a return address for internet traffic. It points to a connection at a given moment, not to a person. Devices on the same home network usually share one public address, and your internet provider can change that address over time. IP address can be in 2 formats IPv4 (192.168.0.1) or IPv6 (2001:db8::0:0::1)

How do I find the right IP address to check?

While you are on the network you want to check, look up your public IP with a public IP lookup site such as speed.cloudflare.com or whatismyip.com, or read the internet address shown in your routerÕ connection details. Use that public address, not a local device address such as 192.168.1.10. If a VPN is on, the address you see may be the VPN serviceÕ, not your home connectionÕ.

Does a match mean I have been hacked?

No. A match means that this IP address appeared in our proxy measurements at the recorded time.
It does not prove that your device was hacked, that your information was stolen, or that the activity happened without permission. It is a reason to investigate, rather than a diagnosis.

Could the result relate to someone else?

Yes. Internet providers may reassign an address from one customer to another. Some providers also let multiple customers share a public IP address through a system called Carrier-Grade NAT, or CGNAT.
Compare the observation dates with when you used that address. Your provider may be able to help clarify whether it was assigned to you or shared at the time.

How does Proxy Spotter collect these observations?

We make controlled requests through proxy services to a server we operate. That server records the public IP address from which each connection arrives, together with measurement details.
The lookup page shows observations from those tests. It cannot inspect the devices inside your home or identify which app made the connection.

Is my connection being used as a proxy right now?

The result cannot establish that. The dates show when we observed the address during our measurements.
Even a recent observation does not prove that proxy activity is continuing at the moment you check.

What should I do if my address appears?

First, check the observation dates and whether anyone in your household knowingly uses a bandwidth-sharing service.
Review installed apps, browser extensions and connected devices for unfamiliar software or settings that allow traffic sharing. Keep your devices and router updated.
If you find sharing you did not agree to, disable it or remove the relevant software. If you cannot identify the cause, contact your internet provider or a trusted technical support person. A match alone is not a reason to discard a device.

Will changing my IP address solve the problem?

Changing the address does not stop an app or device from sharing your connection. If sharing continues, the new address could also appear in later measurements.
Investigating the source of the activity is more useful than relying on an address change alone.

Can you identify which device or app is involved?

The public lookup cannot reliably identify a specific device or app. Several devices may use the same connection, and several households may share the same public IP address.
The technical information shown can support research, but it is not a confirmed device identity.

What are the TCP details shown in a result?

TCP is one of the ways devices establish internet connections. The displayed fields describe parts of that connection setup, such as packet sizes and connection options.
They are useful to researchers, but they do not reveal a person's identity. A "candidate association" means we have a possible link between a captured connection and an observation; it is not a verified device match.

Does the total IP count represent households or devices?

No. It counts distinct IP addresses in our published dataset.
One household can use different addresses over time, while several households or devices can share one address. The total should not be read as a count of people, homes or compromised devices.

What should I include when contacting you?

Include the IP address, the observation dates you are asking about, and any relevant information about your connection or bandwidth-sharing software.
Do not send passwords, router login details or other sensitive information.

Is there API access to retrieve ASN or IP subnet details?

Yes, both are available.

ASN example: curl -s 'https://proxyspotter.com/api/asn?asn=ASxxxx' | jq

IP subnet example: curl -s 'https://proxyspotter.com/api/subnet?cidr=103.x.x.x/24' | jq