A little less unknown.

Unmask identifies known VPN networks, Tor relays, and Apple Private Relay addresses. You get the provider or relay type, without an account or API key.

The public directory

How it works

A daily sync downloads community-maintained GitHub lists and official relay APIs into SQLite. IPv4, IPv6, and network ranges are matched locally. Your lookup is not sent to those sources. Failed downloads keep the last successful snapshot, with source health and timestamps shown below.

Some VPN feeds describe server ingress rather than every possible exit address. A match identifies listed infrastructure, not the person using it. No match does not guarantee an IP is not a VPN or Tor relay.

Tor nodes can be exits, entry-capable guards, both, or another public relay. “Entry” means guard-capable, not proof of use in a particular circuit. Private Tor bridges are not covered. Apple Private Relay is classified separately because it is a privacy proxy, not a full-device VPN.

The API

Use /api/lookup?ip=2.56.190.2 for results and /stats for directory statistics and source health. See the API documentation for response fields.

Data sources

Retrieval time is not the age of the underlying evidence. Upstream publication times are shown when available. Record counts include overlaps between feeds.

Provider names and logos belong to their respective owners. No affiliation or endorsement. Public lists retain their own licenses and terms.