Is 23.129.64.100 a VPN?

23.129.64.100 is not a confirmed VPN, but it is a hosting / datacenter IP — almost certainly not a real residential consumer device. Common origins are scrapers, automated browsers, or self-hosted VPNs running on a VPS.

Who owns 23.129.64.100?

23.129.64.100 is announced by AS396507 (Emerald Onion), located in United States. The holder of the announced BGP prefix 23.129.64.0/24 is EMERALD-ONION - Emerald Onion. You can look up other IPs on the same network via the IPLogs ASN directory.

Should I block 23.129.64.100?

Yes for write traffic, no for read. Datacenter IPs are almost never real human users — block POSTs, throttle reads, but avoid hard 403s if you serve global traffic.

Is 23.129.64.100 safe?

Cautious. This IP isn't on any threat-intel feed today, but it isn't a regular consumer connection either. Don't grant it residential-tier trust.

Why is my IP flagged as suspicious?

If you visited iplogs.com from your own connection and were flagged suspicious, the cause is one of: a VPN client on your device or network, a corporate proxy, a CGNAT pool that overlaps with VPN exits, an ISP-level DNS resolver routing through Cloudflare/Apple infrastructure, or your IP being on a published commercial-VPN relay list. The "Why this IP is flagged" section above lists every source that matched — that's the dispute trail.

How do I check 23.129.64.100 via API?

Hit our public API: `POST https://iplogs.com/v1/check` with body `{"ip":"23.129.64.100"}`. You get back a JSON verdict, score 0–1, every matched signal, ASN/geo info, and the full provenance list. Free, no signup, no API key. See /docs for client examples in curl, Python, Node.js and Go.

23.129.64.100 — datacenter / hosting IP, not residential.

IPv4 lookup

23.129.64.100

United StatesSeattle (Yesler Terrace)AS396507Emerald Onion

Suspicious

Weak hosting-network indicators — 2 signals matched across 2 intelligence sources. low confidence in this reading.

Threat Score

Network identity

ASN

AS396507

Organization

Emerald Onion

Network type

Unknown

Location

United States

Seattle (Yesler Terrace)

Coordinates

47.599, -122.320

Country code

BGP / prefix

Announced prefix

23.129.64.0/24

Holder

EMERALD-ONION - Emerald Onion

This IP in /24256 addrs

Report abuse

Abuse contact

abuse@emeraldonion.org

Send abuse report

Detection signals · 7-layer pipeline

0.45

Weighted score · vpn-likely line 0.50

Summary

2 of 7 layers contributed evidence

2 signals matched · 0 strong sources · verdict score 0.45

IP intelligence+0.45

ASN classification+0.00

§ 01

+0.45moderate

IP intelligence

Matches against the Tor exit list, public proxy feeds, curated VPN-provider ranges, and datacenter ASN registries.

Known VPN ASNmoderate+0.45

ASN AS396507 belongs to VPN provider: TunnelBear

+0.45

moderate

§ 02

+0.00info

ASN classification

Team Cymru allocation data + PeeringDB self-declared network type.

PeeringDB: backbone / transitinfo

PeeringDB classifies ASN AS396507 as "NSP" — backbone / transit carrier

+0.00

info

Σ Total weighted score

0.45 / 1.00

Why this IP is flagged — sources that matched

Every list, feed, or live probe that confirmed the verdict above. Cross-source agreement is what makes this verdict trustworthy — most competitors hide their sources entirely.

TunnelBearrefresh: —
Curated intelligence source.

Should I block this IP?

Practical guidance by use case — fraud, ad-ops, streaming, and general websites.

Datacenter / hosting IP — not a real residential user

This IP belongs to a hosting provider (AWS, GCP, Vultr, OVH, DigitalOcean, etc.). It's not a confirmed VPN, but it's also not a real consumer device. Common origins: scrapers, server-side fetches, automated browsers, self-hosted VPNs (Algo / WireGuard / OpenVPN on a VPS).

About IP address 23.129.64.100

23.129.64.100 is an IPv4 address routed via AS396507 (Emerald Onion) and geo-located to United States. The verdict above combines six free, no-auth intelligence sources: local db-ip ASN data, the Tor Project exit list, public proxy feeds (TheSpeedX / Proxifly / FireHOL), Team Cymru + PeeringDB for ASN classification, RIPE NCC for BGP topology and abuse contacts, and Shodan InternetDB for ~30-day port observation.

Verdicts are recomputed on every page load and cached for up to one hour upstream. No data about your browser or identity is persisted.