Is 204.85.191.30 a VPN? No — University of North Carolina at Chapel Hill.
No VPN/proxy indicators — 1 signal matched across 1 intelligence source. Overall risk: low.
BGP routing topology
RIPE NCC routing-information service. Single-homed ASes and unannounced prefixes.
ASN AS36850 is single-homed (1 upstream, 1 total neighbours) — lone-wolf BGP footprint common to proxy-operator ASes
Should I block this IP?
Practical guidance by use case — fraud, ad-ops, streaming, and general websites.
No VPN, proxy, datacenter, or Tor signals matched. The IP looks like a real consumer or business broadband line. Treat as a normal user.
- Fraud / risk teams
- Apply your standard risk model. No IP-based step-up needed.
- Ad ops / programmatic
- Bid normally. This IP is in your billable, real-human pool.
- Streaming / geo-licensing
- Allow. Geo-licensing rules still apply, but VPN evasion is not a concern here.
- General sites & forums
- Standard access. Use other signals (device fingerprint, behavior, account age) for risk scoring.
About IP address 204.85.191.30
204.85.191.30 is an IPv4 address routed via AS36850 (University of North Carolina at Chapel Hill) and geo-located to United States. The verdict above combines six free, no-auth intelligence sources: local db-ip ASN data, the Tor Project exit list, public proxy feeds (TheSpeedX / Proxifly / FireHOL), Team Cymru + PeeringDB for ASN classification, RIPE NCC for BGP topology and abuse contacts, and Shodan InternetDB for ~30-day port observation.
Verdicts are recomputed on every page load and cached for up to one hour upstream. No data about your browser or identity is persisted.