185.220.101.1Who is behind this IP, and should you worry?
Warning: This is a Tor exit node.
Signals
- Warning: Tor exit node
- OK: Not on our 2 blocklists
- OK: Reverse DNS verified
- Note: Known VPN range (community list)
- Couldn't check: Our honeypots: not connected yet
Scores from other services (we don't copy them)
We cover abuse blocklists, network type and registry data. We don't scan for malware: for antivirus verdicts, check VirusTotal.
Traffic from this address comes from people using the Tor network to hide where they connect from. It is not the address of the person behind it.
What to do: Block it if you don't expect Tor users. Many people use Tor for privacy, so a block also turns away legitimate visitors.
Key facts
| IP address | 185.220.101.1 IPv4 · defanged 185[.]220[.]101[.]1 |
|---|---|
| Reverse DNS | OK: berlin01.tor-exit.artikel10.org · verified: points back to this address |
| Network type | Warning: Tor exit node What this means |
| Reputation | OK: No match on our 2 blocklists |
| Owner / ISP | Artikel10 e.V. |
| ASN | AS60729 · Stiftung Erneuerbare Freiheit |
| Location | Germany (DE) where the network is registered (an estimate) |
| Abuse contact |
Reputation
Warning
| Tor Project bulk exit list Tor | Warning: Matched · List of Nov 14, 2026 What this means |
|---|---|
| X4BNet lists_vpn (VPN ranges) VPN ranges | Note: Matched · List of Nov 13, 2026 |
| iplover sensors | Couldn't check: Not checked |
| Other lists | No match in the other 32 lists · see every list and its date |
Every list we checked
2 matched · 32 no match · 1 not checked
Blocklists
| abuse.ch Feodo Tracker (botnet C2) | No match · List of Nov 14, 2026 |
|---|---|
| Spamhaus DROP (includes the former EDROP) | No match · List of Nov 13, 2026 |
Tor
| Tor Project bulk exit list | Matched · List of Nov 14, 2026 |
|---|
VPN ranges
| X4BNet lists_vpn (VPN ranges) | Matched · List of Nov 13, 2026 |
|---|
Privacy relays
| iCloud Private Relay egress ranges | No match · List of Nov 13, 2026 |
|---|
Scanners
| Censys scanning ranges | No match · List of Nov 10, 2026 |
|---|---|
| Driftnet (internet-measurement.com) | No match · List of Nov 10, 2026 |
| Rapid7 Project Sonar | No match · List of Nov 10, 2026 |
| Shodan (reverse DNS under shodan.io) | No match |
| Shadowserver (reverse DNS under shadowserver.org) | No match |
Cloud providers
| AWS IP address ranges | No match · List of Nov 12, 2026 |
|---|---|
| Google Cloud IP ranges (cloud.json) | No match · List of Nov 13, 2026 |
| Oracle Cloud public IP ranges | No match · List of Oct 28, 2026 |
| Cloudflare IP ranges | No match · List of Nov 13, 2026 |
| Fastly public IP list | No match · List of Nov 13, 2026 |
| DigitalOcean geofeed | No match · List of Nov 13, 2026 |
| Akamai Cloud (Linode) geofeed | No match · List of Nov 13, 2026 |
Crawlers
| Google common crawlers (Googlebot) | No match · List of Nov 13, 2026 |
|---|---|
| Google special-case crawlers (e.g. AdsBot) | No match · List of Nov 13, 2026 |
| Google user-triggered fetchers | No match · List of Nov 13, 2026 |
| Bingbot | No match · List of Jan 3, 2024 |
| Applebot | No match · List of Sep 15, 2026 |
| DuckDuckBot | No match · List of Sep 1, 2026 |
| OpenAI GPTBot | No match · List of Sep 22, 2026 |
| OpenAI OAI-SearchBot | No match · List of Jan 2, 2026 |
| OpenAI ChatGPT-User | No match · List of Nov 6, 2026 |
| PerplexityBot | No match · List of Oct 28, 2026 |
| Perplexity-User | No match · List of Oct 28, 2026 |
| Common Crawl CCBot | No match · List of Aug 11, 2026 |
| Anthropic crawlers (ClaudeBot, Claude-User, Claude-SearchBot) | No match · List of Oct 20, 2026 |
| Amazonbot | No match · List of Sep 8, 2026 |
| Amazon Amzn-SearchBot | No match · List of Sep 8, 2026 |
| Amazon Amzn-User | No match · List of Nov 4, 2025 |
| AhrefsBot and AhrefsSiteAudit | No match · List of Nov 13, 2026 |
Our sensors
| iplover sensors | Not checked |
|---|
Network type
| Network type | Tor exit node |
|---|---|
| Tor exit node | Tor Project bulk exit list |
| Known VPN range (community list) | Source: X4BNet lists_vpn (CC BY-SA 4.0) |
What we checked
| Tor exit node | Note: Listed · Tor Project bulk exit list List of Nov 14, 2026 |
|---|---|
| Privacy relay | Not listed · iCloud Private Relay egress ranges List of Nov 13, 2026 |
| VPN | Note: Listed · X4BNet lists_vpn (VPN ranges) · network owner's name (estimate) List of Nov 13, 2026 |
| Public or open proxy | Couldn't check: Not identified · no free official source (needs a licensed provider, not connected) |
| Web proxy | Couldn't check: Not identified · no free official source (needs a licensed provider, not connected) |
| Residential proxy | Couldn't check: Not identified · no free official source (needs a licensed provider, not connected) |
| Hosting, cloud or data center | Not listed · 7 cloud provider lists · network owner's name (estimate) List of Nov 13, 2026 |
| Mobile carrier | Couldn't check: Not identified · network owner's name (estimate) · no free official source (needs a licensed provider, not connected) |
| Business or enterprise network | Couldn't check: Not identified · network owner's name (estimate) · no free official source (needs a licensed provider, not connected) |
| Residential ISP | Couldn't check: Not identified · network owner's name (estimate) · no free official source (needs a licensed provider, not connected) |
Registry (RDAP)
| Owner | Artikel10 e.V. |
|---|---|
| Network name | ARTIKEL10 |
| Handle | 185.220.101.0 - 185.220.101.31 |
| Network range | 185.220.101.0/27 |
| Range | 185.220.101.0 - 185.220.101.31 |
| Registry | RIPE NCC |
| Registered | 2021-08-19 |
| Last changed | 2025-06-18 |
| Abuse contact |
Reverse DNS
| Reverse DNS | berlin01.tor-exit.artikel10.org |
|---|---|
| Forward-confirmed | Yes: the name points back to this address |
How we check: we look up the address's reverse DNS name, then look up that name and see whether it points back to the same address.
Location
| Registered in | Germany (DE) where the network is registered (an estimate) |
|---|---|
| City | Not available: we don't use a geolocation database for other people's addresses. |
Domains on this IP
Many websites can share one address (CDNs, shared hosting), so blocking an address can block sites you didn't mean to. We don't keep a list of the domains on an address.
Check it elsewhere
These services have their own data and terms. We only link to them: the address is sent to them only if you click.
JSON and command line
curl -s "https://iplover.com/api/check/185.220.101.1?lang=en"What this means and where the data comes from
What the findings mean
Warning: Network type
This address is in the Tor Project's list of exit relays. Traffic from it comes from people using Tor, not from the relay's operator.
Warning: Tor Project bulk exit list Tor
Tor exit nodes carry traffic for many people at once, who hide where they connect from. Blocking them stops everyone using Tor, including people who use it for privacy.
Reverse DNS
The name points back to this same address, so whoever runs the network really set it up. Large services such as Google and Bing use this to prove their crawlers are genuine.
Location
This is the country where the block is registered. It can differ from where the address is actually used.
Abuse contact
To report spam, scanning or attacks from this address, write to this contact with the exact times (and time zone) and your log lines. It belongs to the network owner, not to iplover.
X4BNet lists_vpn (VPN ranges) VPN ranges
This range is in a community list of VPN servers. A VPN hides where someone connects from; on its own that is not a sign of abuse.
Network range
CIDR is the size of the block: /24 means 256 addresses. The smaller the number after the slash, the bigger the block.
Where the data comes from
- Lists last updated Nov 14, 2026; 34 sources checked. see every list and its date · About our sources
- Registry data: RDAP (RIPE NCC), fetched 2026-11-14 01:16 UTC.
- Reverse DNS: Cloudflare DNS over HTTPS, checked 2026-11-14 01:16 UTC.
Notes and limitations
No source is complete. “No sign of abuse” means none of the sources listed at iplover.com/sources matched; it is not a guarantee.
The network type describes the network, not the person. A VPN, proxy, Tor, hosting or mobile address is not a sign of abuse, and no IP address shows who someone is or exactly where they are.
We cover abuse blocklists, network type and registry data. We don't scan for malware: for antivirus verdicts, check VirusTotal.