OSINT Intel
IP Address

Look up any IP address

Check any IPv4 or IPv6 address for its true location, anonymisation layers and exposed infrastructure — sourced from geolocation, Shodan and community blocklists.

Try

  • Geolocation, ISP & organisation
  • VPN, proxy & Tor detection
  • Open ports & known vulnerabilities (CVEs)
  • Abuse & blocklist reputation

What the report tells you

An IP report resolves where an address sits and who operates it: country and city, the internet service provider, the organisation and the autonomous system. It then looks past that surface, testing whether the address belongs to a datacentre rather than a home connection, whether it is a known VPN, proxy or Tor exit, which ports answer, and whether it appears on abuse blocklists.

Location is a claim, not a fact

Geolocation tells you where an address is registered, which is not always where the person sits. That is why the report separates the two questions. An address that geolocates to Amsterdam but belongs to a hosting provider and matches a VPN range tells you the visible location is a choice someone made, and the report says so rather than reporting a city and stopping.

When to run one

When a login, order or signup arrives from an unexpected place, when you are deciding whether traffic is automated, or when you need to know whether an address hosting a site is shared infrastructure or dedicated to one operator.