IPGeolocation

You blocked the IP, and the same network was back an hour later on a new one.

That is the limit of working address by address. IPs are disposable, but the operator behind them is not, and most of what you actually want to do lives at the network level. To get there you have to go up to the autonomous system that routes the traffic, and looking that up live means querying the regional registries one autonomous system at a time, which is slow.

The ASN Whois Database gives you those records already parsed and standardized, kept in your own environment. It covers more than 130,000 autonomous systems with 55 fields each, and for every one you get the organization that owns it and its country, the abuse and contact details, its registration history, and the networks it peers with. Because it sits in-house, there are no external calls on every lookup.

With that, you can block or score a whole operator instead of chasing one address at a time, map peering and infrastructure relationships, vet a vendor's network before signing, and send abuse reports straight to the right contact.

How are you researching the networks behind your traffic today?

Explore it here: https://ipgeolocation.io/asn-whois-database.html