VPN, proxy and Tor detection, bot and AI-agent verdicts, and a location you can prove.
What do you want to detect?
Select all that apply
Free tier, no card required.
One detection engine. Three products.
The hard part is spotting connections that hide where they really come from: VPNs, residential proxies, datacenters, and Tor. We built the engine that does it, then shipped three ways to use it.
01Collectors
VPN, Tor, proxy and range feeds harvested on a schedule
02IP State
Observations collapsed into one scored verdict per IP
03Verdict
Served to every product in milliseconds
IP Detection
The detection API that tells you whether a connection is masking its true origin.
What it returns
- vpn
- proxy
- tor
- asn
- geo
Provenance
Compliance-grade location attestation with a tamper-proof audit log.
What it returns
- attestation_id
- policy
- chain_ok
Agentscan
Tells humans, known bots, AI agents, and malicious automation apart in one request.
What it returns
- human
- known_bot
- ai_agent
- malicious_automation
IPScanner is an API that tells you what is behind a request.
One REST call returns the masking verdict, the network behind the address, and a 0 to 100 risk score you can act on.
Mozilla/5.0 (compatible; ClaudeBot/1.0; [email protected])
- 01OriginDatacenter range, not a home ISP
- 02MaskingVPN tunnel detected on the address
- 03FingerprintJA4 does not match the agent it claims to be
Terms and questions
Terms
- VPN Detection
- Spots IP addresses that route through an encrypted VPN tunnel to hide a user's real location.
- Proxy Detection
- Flags HTTP, SOCKS, public, residential, and data-center proxies that relay traffic through a middleman.
- Tor Detection
- Recognizes Tor exit nodes, the last relay before anonymized Tor traffic returns to the open internet.
- IP Geolocation
- Maps an IP to a country, region, and city, with ISP and timezone data, usually within 25 to 100 km.
- ASN Data
- Returns the Autonomous System Number and the organization that owns and routes a block of addresses.
- WHOIS Lookup
- Pulls registration and ownership records for domains and IP ranges.
- AI agent
- Software that browses on a person’s behalf. It arrives with a real browser fingerprint, so the user agent alone will not identify it.
Questions
- By checking the address against the networks VPNs actually run on. Commercial VPN providers rent ranges from hosting companies, so the address resolves to a data centre rather than a residential ISP. IPScanner combines that ownership signal with routing behaviour and known-provider ranges, then returns a confidence score instead of a yes or no.
- Yes, but not from the user agent. An agent can send any string it likes. Agentscan fuses the IP origin with headless-browser tells, the JA4 TLS fingerprint and a reverse-DNS verified allowlist, and returns one of four verdicts: human, known_bot, ai_agent or malicious_automation.
- Country level is reliable. City level is usually within 25 to 100 km and gets worse on mobile networks, where one gateway can serve a whole region. Treat city as a signal, not a fact, which is why every response carries a confidence score.
- An IP address is personal data under the GDPR, so you need a lawful basis. Fraud prevention and network security are recognised legitimate interests under Recital 49. IPScanner processes lookups on your behalf as a processor, and the Privacy Policy sets out what is retained.
- Each product bills on its own meter. IP Detection starts free with 1,000 requests a month, Agentscan is free up to 5,000 checks a month, and paid plans run from $29. Prices are charged in your local currency where we support it.
Start Scanning IPs in Minutes
Create a free account, grab your API key, and run your first VPN or proxy check today. No credit card needed.
- 1,000 free lookups a month
- Instant API key
- No credit card
Already have an account? Sign in