WHOIS IP lookup
Query the regional internet registries (ARIN, RIPE, APNIC, LACNIC, AFRINIC) over RDAP and see who an address is allocated to, the range it belongs to, and where to send abuse reports.
Back to toolsWhat WHOIS tells you — and what it does not
A WHOIS or RDAP record shows the organisation an address block was allocated to, not the person using it right now. Hosting providers, ISPs and cloud platforms hold huge ranges and reassign them constantly, so the record is the right place to find an abuse contact but a poor way to identify an individual.
For a behavioural verdict — proxy, VPN, TOR exit, datacenter or residential — run the same address through the detection engine or the Guarda API.