Skip to content
IPOK

Reddit IP Check: Browser Dual-Stack Exits, Risk Evidence & Inference Boundaries

When encountering Reddit network blocks, rate limits, or account restrictions, community guides often suggest checking whether your exit IP is flagged as a datacenter or leaking over IPv6/WebRTC. IPOK scopes its observation strictly to your browser's connection to ipok.io endpoints—combining independent IPv4/IPv6 probes, bounded hosting vs. residential inference, multi-source risk evidence, and on-click WebRTC/DNS checks.

Reddit's internal anti-spam, rate-limiting, and account reputation rules are not public; account status and appeals follow Reddit's official help and appeal process (https://www.reddit.com/appeals), and IPOK cannot confirm why an action was blocked. The dual-stack, network classification, public risk, and WebRTC/DNS checks on this page are for local network self-checking only—they do not imply that Reddit uses those probe metrics as enforcement criteria and never guarantee posting or account outcomes.

Your public IP
Try a sample IP
Try sample:

Step 1: Probe ip4.ipok.io & ip6.ipok.io Independently and Check RFC 7359 Conditions

If your local network supports dual stack while your proxy rule only tunnels one address family, dual-stack requests may split across different exits. IPOK's main card and dual-stack card independently query ip4.ipok.io and ip6.ipok.io to echo each stack's exit IP (without creating an application-level v4/v6 pairing record).

When both IPv4 and IPv6 exits respond, dual-stack reachability by itself is not a leak, and different addresses or ISP labels across the two stacks do not by themselves prove a tunnel bypass. IPOK references RFC 7359 dual-stack tunnel traffic-protection considerations so you can verify against your client routing rules and connection logs whether the other stack left your intended tunnel and exited directly via your local ISP. If the other stack times out or does not respond, that does not prove IPv6 is disabled or absent, nor does it prove safety or absence of a leak.

Step 2: Review Hosting vs. Residential Inference, Native Country & Direct Evidence Confidence

IPOK combines public ASN/BGP declarations and upstream metadata (such as ipapi.is company.type, asn.type, and is_datacenter) for bounded hosting (35-point contextual floor) vs. residential/ISP inference, and compares GeoIP country (geo.countryCode) with registration country (rdap.country ?? intel.asn.country) for native vs. broadcast clues (see https://ipok.io/en/t/datacenter-or-residential and https://ipok.io/en/t/native-ip). This is heuristic inference, not 100% absolute identification.

Across up to 10 registered risk sources, IPOK shows AbuseIPDB report counts and confidence when returned, while Scamalytics is attempted on explicit IP lookups when the shared cache misses and quota permits (or under narrow residential top-up rules). EvidenceSummary.confidence (and directSources) indicates only whether direct risk flags (Tor 90, blocklists 70, proxy/VPN 65, abuser 55) came from a single source or multiple sources (collection independence unverified).

Step 3: On-Click WebRTC, Self-Hosted DNS Exit Check & Split-Tunnel Boundaries

Click below to run the WebRTC probe (contacting Google / Cloudflare public STUN and parsing ICE candidates locally in your browser without uploading them to IPOK) and the DNS check via our self-hosted authoritative domain leak.ipok.io to observe the recursive resolver exit IP reaching our server (5 minutes of readable lifetime; expired records become unreadable, are cleared on subsequent session activity, and may remain in memory while idle; falling back to bash.ws only if initial token issuance fails, not a DNS pollution test).

Keep client routing boundaries in mind: this page only observes your browser's connection to ipok.io. Proxy clients may route reddit.com differently from ipok.io, and a web page cannot inspect local proxy client or TUN process configurations; see https://ipok.io/en/privacy.

To inspect IPOK's score bands, contextual hosting floor, and per-source flags, open the IP Purity Check.

FAQ

Why am I still rate-limited or restricted on Reddit when IPOK shows a low-risk residential IP?

Reddit's internal risk and anti-spam rules are not public—restrictions may depend on account age, karma, subreddit-specific filters, browser state, or proxy split-tunnel rules that route reddit.com differently from ipok.io. The dual-stack, WebRTC, DNS, and risk checks on this page are for local network self-checking only and do not imply that Reddit uses those probe metrics as enforcement criteria; check https://www.reddit.com/appeals and official prompts.

What if ip4.ipok.io and ip6.ipok.io show different exits, or the other stack does not respond?

Different addresses or ISP labels across the two stacks do not by themselves prove a tunnel bypass (a dual-stack tunnel or separate protected exits may also present different addresses). It may indicate single-stack coverage or different outbound policies, which you should verify against your client routing rules and connection logs—a bypass under RFC 7359 only applies once you confirm the other stack left your intended tunnel and exited directly via your local ISP. If the other stack times out or does not respond, that does not prove IPv6 is disabled or absent, nor does it prove safety.

What does single vs. multi in EvidenceSummary.confidence mean?

It indicates only whether direct risk flags (Tor 90, blocklists 70, proxy/VPN 65, abuser 55) were reported by a single provider or multiple providers (collection independence unverified). It does not measure hosting/residential classification and is not a Reddit score.

Related checks