First decide what you mean by “exposed”: finding the public IP address websites see is different from checking whether services at that address are reachable, and both are different from testing whether a VPN is revealing your usual address. A public IP being visible to a website is normal internet operation—not, by itself, evidence that an account was breached or a device was compromised.
What an IP exposure check can—and cannot—tell you
Your public IP address is the internet-facing address associated with a connection. Websites and online services can see the address used to reach them. But that does not automatically mean someone can access your devices. Finding the address, checking indexed services, and testing a VPN are separate checks.
As an Amazon Associate I earn from qualifying purchases.
A router’s WAN address is not always a publicly reachable IP. Some internet providers, including some mobile broadband providers, use network address translation (NAT). In that case, the router’s external address may not be directly reachable from the public internet. Traficom explains this distinction and offers instructions for checking an address in its IP address and visible information guide.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Find the public IP address websites see
-
Check the WAN or internet status page in your router’s settings, or use a reputable IP measurement page such as the one described by Traficom.
#1 Best Overall
FortiGate-40F Firewall Appliance - 5 Gigabit Ethernet RJ45 Ports, Ideal for Small Businesses (Appliance Only, No Subscription) (FG-40F)- Compact and Efficient Design: The FortiGate 40F is designed for small to mid-sized businesses and enterprise branch offices, featuring a compact, fanless desktop form factor that ensures quiet operation and minimizes space usage.
- Robust Connectivity Options: Equipped with 5 GE RJ45 ports, including 1 WAN port and 4 internal ports, this model provides essential connectivity and flexibility for various network configurations in a small-scale environment.
- High-Performance Security: Offers up to 1 Gbps IPS throughput and 600 Mbps threat protection throughput, using Fortinet’s purpose-built security processor technology to deliver industry-leading performance and protection for SSL encrypted traffic.
- Advanced Threat Protection: Integrated with Fortinet’s AI-powered FortiGuard Labs, the FortiGate 40F offers comprehensive cybersecurity, identifying and mitigating both known and unknown threats to maintain robust security across your network.
- Simplified Management and Deployment: Features a user-friendly management console that provides comprehensive network automation and visibility, coupled with Zero Touch Integration with Fortinet’s Security Fabric for easy deployment.
-
Note the displayed IPv4 and, if present, IPv6 addresses. They are separate address types, so record both rather than assuming an IPv4 result covers IPv6.
-
If your router’s WAN address differs from the address shown by an internet measurement page, or the router shows an address that is not publicly routable, your provider may be using NAT. Do not assume that every router WAN address is reachable from outside your home network.
Check whether internet-facing services are indexed
If you want to know what services may be visible from your network, search the address in internet scanning and indexing services such as Censys and Shodan. Traficom provides example host-search paths for IPv4 and IPv6 in its guide.
Recommended Free Tools
-
These services show information they have indexed; their results can differ.
-
An empty result is not proof that no service is reachable. It only means the search did not return indexed information for that query.
Rank #2
Omada ER707-M2, Multi-Gigabit VPN Route- 【Flexible Port Configuration】1 2.5Gigabit WAN Port + 1 2.5Gigabit WAN/LAN Ports + 4 Gigabit WAN/LAN Port + 1 Gigabit SFP WAN/LAN Port + 1 USB 2.0 Port (Supports USB storage and LTE backup with LTE dongle) provide high-bandwidth aggregation connectivity.
- 【High-Performace Network Capacity】Maximum number of concurrent sessions – 500,000. Maximum number of clients – 1000+.
- 【Cloud Access】Remote Cloud access and Omada app brings centralized cloud management of the whole network from different sites—all controlled from a single interface anywhere, anytime.
- 【Highly Secure VPN】Supports up to 100× LAN-to-LAN IPsec, 66× OpenVPN, 60× L2TP, and 60× PPTP VPN connections.
- 【5 Years Warranty】Backed by our 5-years warranty and free technical support from 6am to 6pm PST Monday to Fridays
-
If a result lists a service, determine whether you intentionally made it public and whether it is configured securely. Traficom cautions that publicly visible home-network services should be handled carefully.
A listing is not evidence that someone has accessed the network. It identifies a possible point of visibility that you can investigate.
Check whether a VPN is hiding your usual public IP
A VPN check needs a baseline. Compare the address shown with the VPN disconnected to the address shown after connecting; a single reading while the VPN is on cannot tell you whether it differs from your usual connection.
-
Disconnect the VPN and open an IP checker. Record the public IPv4 and IPv6 addresses it shows, if both are available.
-
Connect the VPN, then reload the checker or open it again. Record the addresses shown with the VPN active.
-
Compare the results. If the same public address you recorded with the VPN off appears while it is on, investigate the VPN’s routing and browser support. A result describes only the device, browser, network, VPN server, and settings you tested.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsSpecial offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy. -
If needed, repeat the check with a different browser, VPN server, device, or network to see whether the result changes.
ExpressVPN publishes a similar baseline-comparison procedure for its WebRTC test. Treat that as provider guidance, not independent certification of a VPN’s protection.
Test WebRTC separately
WebRTC lets browsers support direct connections, including peer-to-peer calls. During connection setup, it can use ICE address discovery, so a web application may learn addresses beyond the single one seen in an ordinary HTTP request. The IETF’s RFC 8828, “WebRTC IP Address Handling Requirements” (May 2021), explains that behavior: “The addresses that are collected usually consist of an endpoint’s private physical or virtual addresses and its public Internet addresses.”
In some configurations, WebRTC can reveal an ISP’s public address even while a VPN is connected—for example, with split tunneling or a proxy that allows direct internet access for STUN checks. A browser test may also show a local or private address. That is not the same as showing your ISP’s public IP, though local addresses can still contribute to fingerprinting or correlation in some contexts.
Rank #4
- HARDWARE PLUS SECURITY SERVICES: FortiGate-60F Firewall Appliance bundled with 1 year of FortiCare Premium and FortiGuard Unified Threat Protection.
- UNIFIED THREAT PROTECTION (UTP): Secures against advanced online threats with comprehensive web filtering and anti-botnet technologies.
- OPTIMIZED FOR MEDIUM-SIZED BUSINESSES: Tailored for businesses needing robust security without the infrastructure of larger enterprises.
- RELIABLE CUSTOMER SUPPORT: FortiCare Premium ensures high-quality support and service continuity.
- EFFECTIVE PROTECTION: Employs advanced filtering technologies to safeguard against sophisticated threats.
Run a WebRTC test with the VPN off and note the results, then connect the VPN and repeat. If the VPN-off public address appears in the VPN-on results, treat it as a potential leak and check the VPN’s browser support and routing settings. Do not assume that disabling WebRTC is the right universal fix: it supports useful browser features, and the RFC describes more nuanced privacy considerations.
Check IPv6 and DNS as separate paths
IPv6
IPv6 can take a different route from IPv4. Compare the IPv6 address shown while the VPN is active with the expected VPN exit address, or check whether the VPN supports IPv6. A test that only made an IPv4 request does not establish what happens to IPv6 traffic.
DNS
DNS leak testing asks which resolver handled a fresh domain lookup. An ordinary IP checker does not reveal that: seeing the VPN’s address on a webpage cannot establish which DNS resolver answered your requests. Use a test that observes the resolver for a new lookup. VPN & Privacy explains this distinction and its methodology on its DNS leak test page; that description is the publisher’s methodology, not an authoritative standard.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.If you suspect your connection is being used as a proxy
A visible IP or indexed service does not show that your connection is being used by someone else. If you have signs of unknown traffic or suspect a device is routing traffic without your knowledge, investigate the devices and apps on your home network separately. The FBI’s Internet Crime Complaint Center warns that compromised IoT devices, malware, bundled software development kits, and some free VPN terms can put residential connections into proxy networks. Its recommendations include installing apps from trusted sources, keeping software updated, and monitoring network traffic and connected devices. See the FBI IC3 public service announcement.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match-
Review connected devices and installed apps, especially unfamiliar streaming or IoT devices.
Best Value
FortiGate-40F Firewall Appliance plus 1 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) (FG-40F-BDL-950-12)- INTEGRATED FIREWALL APPLIANCE AND SECURITY SERVICES: Comes with FortiGate-40F Firewall Appliance, 1 year of FortiCare Premium, and FortiGuard Unified Threat Protection.
- UTP SECURITY FEATURES: Offers protection from advanced threats with DNS filtering, URL filtering, video filtering, and controls against botnets.
- IDEAL FOR SMALLER SETTINGS: Best suited for small to mid-sized businesses needing reliable security without the complexity of larger systems.
- CONTINUOUS SUPPORT AND MAINTENANCE: FortiCare Premium ensures that technical help is readily available to manage and troubleshoot issues.
- COMPACT AND EFFECTIVE: Provides a powerful, yet compact security solution that effectively protects against a wide range of cyber threats.
-
Update operating systems, applications, and device firmware.
-
Avoid unofficial app sources and untrusted streaming devices.
-
Monitor home-network traffic and remove devices or apps you cannot identify or trust.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Keep the result tied to the right test
When you record a result, note what the test observed: ordinary public IP, WebRTC/ICE candidates, IPv6, DNS resolver, or indexed host services. Also note whether the VPN was on, and which device, browser, and network you used. This makes it easier to distinguish a public ISP address from a local/private address and to avoid treating one kind of check as proof about another.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
