IP Lookup — Geolocate Any Address & Detect VPN/Tor
Instant intelligence on any IPv4 or IPv6 address. Country, city, ISP, ASN — plus VPN, proxy, Tor exit node, and datacenter detection. All in a single query.
What an IP Lookup Reveals
Country & Region
Country code, region/state, and city with high accuracy for most ISP allocations
ISP & ASN
Internet Service Provider name and Autonomous System Number for network identification
VPN Detection
Cross-referenced against known VPN provider IP ranges and datacenter blocks
Tor Exit Nodes
Real-time check against the official Tor Project exit node list
Proxy & Hosting
Identifies residential proxies, open proxies, and cloud hosting providers
Timezone
Local timezone derived from geolocation — useful for correlating activity timestamps
VPN, Proxy & Tor Detection
One of the most valuable capabilities of Vestigo's IP module is anonymization detection. When an IP address belongs to a VPN exit node, datacenter, or Tor exit relay, the geolocation points to the server's location — not the user's real location.
Vestigo flags these IPs automatically by cross-referencing multiple threat intelligence feeds, the official Tor exit node list, and known datacenter ASN ranges. This is essential for fraud detection, account security analysis, and incident investigation.
IPv4 vs. IPv6 Support
Vestigo fully supports both IPv4 (e.g., 93.184.216.34) and IPv6 (e.g., 2606:2800:220:1:248:1893:25c8:1946) addresses. With IPv6 adoption growing globally, having accurate IPv6 geolocation and threat intelligence data is increasingly important for security investigations.
Use Cases
Fraud investigation: Verify if a signup or transaction IP is a known VPN or proxy used to bypass geo-restrictions. Incident response: Rapidly classify attacker IP addresses during a security incident. OSINT investigations: Correlate IP addresses found in server logs or leaked data with geographic locations and network owners. Content compliance: Identify users accessing content from restricted regions.