Function ipLookup

apps/api/src/controllers/tools.controller.ts:687–743

(
  request: FastifyRequest<{ Querystring: { ip?: string } }>,
  reply: FastifyReply,
)

}

export async function ipLookup(
  request: FastifyRequest<{ Querystring: { ip?: string } }>,
  reply: FastifyReply,
) {
  const ipParam = request.query.ip;

  const { ip: clientIp } = getClientIpFromHeaders(request.headers);
  if (
    clientIp &&
    !checkRateLimit(`ip:${clientIp}`, IP_LOOKUP_WINDOW, IP_LOOKUP_MAX)
  ) {
    return reply
      .status(429)
      .send({ error: 'Rate limit exceeded. Please try again later.' });
  }

  const ipToLookup = ipParam ? ipParam.trim() : clientIp || '';

  if (!ipToLookup) {
    return reply
      .status(400)
      .send({ error: 'No IP address provided or detected' });
  }

  const ipv4Regex = /^(\d{1,3}\.){3}\d{1,3}$/;
  const ipv6Regex = /^([0-9a-fA-F]{0,4}:){2,7}[0-9a-fA-F]{0,4}$/;
  if (!ipv4Regex.test(ipToLookup) && !ipv6Regex.test(ipToLookup)) {
    return reply.status(400).send({ error: 'Invalid IP address format' });
  }

  try {
    const geo = await getGeoLocation(ipToLookup);
    const isLocalhost = ipToLookup === '127.0.0.1' || ipToLookup === '::1';
    const isPrivate = isPrivateIP(ipToLookup);

    return reply.send({
      ip: ipToLookup,
      location: {
        country: geo.country,
        city: geo.city,
        region: geo.region,
        latitude: geo.latitude,
        longitude: geo.longitude,
      },
      isLocalhost,
      isPrivate,
    });
  } catch (error) {
    request.log.error({ err: error }, 'IP lookup error');
    return reply.status(500).send({
      error:
        error instanceof Error
          ? error.message
          : 'Failed to lookup IP address',
    });
  }
}