1,000 checks a month, free
Know who is really connecting.
One HTTP call tells you whether an address is a VPN, a proxy, a Tor exit node or a hosting provider, along with the network, the operator, the cloud and the country behind it.
No card required. The free tier is a plan, not a trial, and it does not run out on you.
{
"ip": "45.83.91.14",
"score": 1,
"risk": "high",
"proxy": false,
"vpn": true,
"tor": false,
"hosting": false,
"residential_proxy": false,
"detections": [
"Vpn"
],
"network": {
"asn": "AS9009",
"provider": "M247 Europe SRL",
"hostname": "unn-45-83-91-14.datapacket.com",
"cloud": null
},
"location": {
"country": "Netherlands",
"country_code": "NL",
"continent": "Europe",
"continent_code": "EU"
},
"cached": false,
"request_id": "0HNCVK4KPHOE"
}11.1M
IPv4 and IPv6 networks mapped to an operator and a country
1,000+
networks curated by hand as VPN, proxy or hosting
16
distinct detection signals behind every verdict
7 days
before a clean address is tested again from scratch
What people use it for
Different products, one question: is this connection what it claims to be?
Game servers and alt accounts
Ban evasion, alt farming and bot swarms all arrive through VPNs and cheap datacentre addresses. One check at login tells you whether a connection is what it claims to be, and the score gives you room to warn or throttle instead of banning outright.
Signup and free-trial abuse
One person with a proxy list looks like a hundred new customers. Checking the network at registration costs a single call and closes the cheapest way to farm your free tier.
Payment and chargeback risk
A card that does not match the country the connection came from is worth checking. Feed the score into the rules you already have as one more signal, rather than treating it as a verdict on its own.
Geo-restricted content
When a licence says a country, it means the country the viewer is actually in. Tor exits, commercial VPNs, hosting and residential proxies are each reported separately, so you can pick which ones matter to you.
How an address gets its score
Four layers, consulted in that order. None of them is trustworthy alone. A high score means several of them agree.
-
01
Networks already known
Over a thousand autonomous systems flagged by hand as VPN operators, tunnel hosts or datacentre space. When the network is the answer, the lookup stops here.
-
02
Addresses we go and test
Open HTTP proxies on thirteen ports, real SOCKS handshakes, OpenVPN, IPsec, PPTP, SSTP and SoftEther each made to complete their own handshake rather than merely hold a port open, and the server banners a home connection never has.
-
03
Reputation, cross-checked
Tor exit addresses, abuse history, and the published server lists of NordVPN, Proton, Surfshark and the rest. Each one is probed here before it is believed.
-
04
Never cached forever
A flagged address is re-verified after fourteen days, a clean one after seven. Addresses change hands, so a hit from last quarter is history rather than evidence.
Built like an API you can depend on
Every detection signal and every field, on every plan including the free one. Paying adds the shared response cache, and stops errors and unknown addresses counting against your quota.
One call, one flat object
A single authenticated GET. No envelope, no pagination, and no SDK to install.
A score and a straight answer
A 0-to-1 score when you want a threshold, five plain booleans when you want a rule.
No half-empty answers
A 200 always carries a score, a network and a country. An address we hold nothing on is a 404, not a result full of nulls for you to check. The reverse-DNS name and the cloud behind the range are the only fields that can be null, and only ever because the address genuinely has neither.
No overage, ever
Run out of quota and calls are refused, never billed as overage. On a paid plan, errors and unknown addresses do not count against it either.
Keys pinned to your servers
One live key per account, with an optional IP allowlist that survives a regeneration.
Answered from memory
Verdicts come out of memory with no database write on the path. Probing runs in the background, never inside your call.
Pricing that fits on one line
A fixed monthly quota and a per-minute burst limit. Nothing to model, nothing metered per request, and no surprise invoices.
| Limits and features |
Free 0 EUR / month Start free |
Starter 5 EUR / month Choose this plan |
Pro 20 EUR / month Choose this plan |
Business 99 EUR / month Choose this plan |
|---|---|---|---|---|
| Checks per month | 1,000 | 50,000 | 500,000 | 5,000,000 |
| Checks per minute | 60 | 300 | 1,200 | 6,000 |
| All 12 detection signals | Included | Included | Included | Included |
| Every response field | Included | Included | Included | Included |
| IP allowlist per key | Included | Included | Included | Included |
| Errors and unknown addresses never billed A failed lookup and an address we hold nothing on both cost us the call to the detection service. On a paid plan we absorb that: neither touches your quota, and unknown addresses stay free up to a quarter of your plan before they start counting. On the free plan they count like any other call. | Not included | Included | Included | Included |
| Built-in response cache Ask about the same address twice and the second answer comes back out of memory instead of making the round trip to the detection service. The cache is shared across everyone, so a busy address is often warm before you ask. Cached answers still count against your quota: what you save is latency, not requests. | Not included | Included | Included | Included |
The free plan needs no card. Move between plans whenever you like. Prices exclude VAT, which is calculated at checkout.
Questions worth answering before you sign up
How fast is a call?
Nothing on the request path touches a database: keys are resolved from memory and usage is written in batches afterwards, so the round trip to us is very nearly all of the time you spend. On a paid plan a repeated address can come back from the shared cache without the onward call to the detection service at all. Probing happens in the background, never inside your call.
What counts against my quota?
On a paid plan, a request counts if and only if you received a result. Errors are free, including bad keys, timeouts and our own outages, and addresses we do not know yet are free up to a quarter of your plan. On the free plan only refusals are free: errors and unknown addresses count like any other call.
What happens for an address you have never seen?
You get a 404 and it goes straight into the scan queue, usually resolving within minutes. Treat that as "no opinion" rather than "clean", and decide for your own case whether to let the request through. The call is free on a paid plan and counts against your quota on the free one.
What is different on the free plan?
Two things. There is no shared response cache, so every lookup pays the full round trip to the detection service. And errors and unknown addresses count against your quota instead of being free. Everything else is identical: all sixteen signals, every response field, and IP allowlisting per key.
What happens when I run out?
Requests are refused with a clear error until the period resets. Nothing is billed beyond your plan, ever. If you would rather have headroom than a hard stop, move up a plan.
Does it handle IPv6?
Yes. IPv6 prefixes sit in the network database alongside IPv4, and you pass an IPv6 literal to exactly the same endpoint.
Can I change plan mid-month?
Yes. A change moves the limit, not the counter: upgrading gives you headroom immediately, and downgrading below what you have already used blocks further requests until the period ends.
Can I cancel?
At any time, from the billing portal. You keep the paid plan until the end of the period you have already paid for, then drop back to free. Your key keeps working.
Are prices inclusive of VAT?
Prices are shown excluding VAT. Tax is calculated at checkout based on your location, and you can enter a business VAT number there.
The exact rules, including how the free allowance for unknown addresses works, are documented in Quotas and rate limits
Start with a key, not a sales call.
Sign up, copy your key, make the first call. There is nothing to schedule and nobody to talk to.
1,000 checks a month on the free plan. No card, and no trial clock running.