What an IP WHOIS record shows
IP registration records describe how public address ranges are allocated. A record can include the network name, registry handle, first and last address, CIDR block, country code, and important dates. It may also list contacts responsible for routing, administration, or abuse reports.
VeilVerify uses RDAP, the structured replacement for legacy WHOIS text. RDAP sends the query to the registry responsible for the address and returns machine-readable fields. The amount of detail varies between ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC, and downstream network holders.
The registered holder is not always the user
The organization responsible for an address block may be an internet provider, cloud platform, mobile carrier, university, government network, or company. That registration does not normally name the household, employee, visitor, or customer using one address inside the range.
Providers can reassign addresses, place many customers behind shared gateways, or delegate part of a larger range. Use the record to understand network responsibility and allocation, not to identify an individual.
Using abuse contact information
An abuse contact is intended for reports such as spam, scanning, attacks, or other misuse associated with a network. Include useful evidence such as timestamps with a time zone, the observed source address, destination, protocol, and relevant log excerpts. Remove passwords, private keys, and unrelated personal data before sending a report.
A listed contact may serve an entire provider rather than one customer. The provider decides how to investigate and whether account records can be disclosed under its policies and applicable law. A registration result alone does not prove that the registered organization caused the activity.