Bulk IP Lookup
Paste a list of IPv4 or IPv6 addresses to check each one for VPN, Tor and relay use, with its country and network. Copy the results into a spreadsheet or download them as CSV.
What each column says
The table shows what the API answers on Unlimited, its free plan: the three anonymity flags, the country and the network. An address links to its full report, which adds proxies, hosting and the evidence behind each flag.
Private and reserved addresses, such as 10.0.0.1, are answered from the address alone and spend no lookup. Repeats of an address, in any spelling, are checked once.
Checking a longer list
Every address checked here counts toward the same hourly allowance as every other lookup on this site. The API has no such limit: it answers the same fields with no key and no daily or monthly cap, one address a call, so a list of any length is a loop.
while read -r ip; do
curl -s "https://api.vpndetection.io/$ip"; echo
done < ips.txtips.txt, one JSON answer per line out.On a paid plan, POST /batch takes up to 1,000 addresses in one call and answers every field. Batch lookup in the docs · Pricing
Common questions
How many addresses can I check at once?
A list takes up to 100, one per line, or separated by commas, spaces, quotes or brackets, so a CSV column or a JSON array pastes as it is. Each address counts toward the same hourly allowance as every other lookup on this site, so a long list stops when the hour's lookups are used up, and Check the rest picks it up later.
Why am I asked to confirm I'm a person?
After the first few lookups in an hour, and from the very first if your own address is in one of our anonymity datasets or belongs to a hosting provider. The list pauses on that address and goes on once the check is solved. The example addresses cost nothing.
Is there a bulk lookup in the API?
On a paid plan, POST /batch looks up to 1,000 addresses in one call, with every field. On Unlimited, the free plan, the API answers one address a call with no key and no daily or monthly cap, so a list of any length is a loop over it.
Why does the table show only VPN, Tor, relay, country and network?
Those are the fields Unlimited answers, with a key or without one. The full report for each address, a click away, adds proxies, hosting and the evidence behind each flag, and every paid plan answers all of it from the API.
Is what I paste kept?
The list stays in your browser and isn't put in the page's address, so a link to this page never spends anyone's lookups. Each address is sent to us to look it up, and counted toward your hourly allowance like any other lookup on this site.
Unlimited lookups, no sign-up.
Paste it into a terminal. Any address answers its VPN, Tor and relay flags, where it is and which network announces it, with no daily or monthly cap.
{"ip": "146.70.116.130","is_vpn": true,"is_relay": false,"is_tor": false,"location": {"country": "AT", ...},"asn": { "asn": 9009, ... }}