Sample datasets of all the IP address database products.
- Database Overview
- Features of the Repository
- Summary of the Databases
- Relevant Articles
- About IPinfo
The database products IPinfo.io has to offer are -
| Database Product | Sample Database Repo | Description |
|---|---|---|
| IP Geolocation Database | IP Geolocation Sample | IP geolocation information |
| IP to Company Database | IP to Company Sample | Company associated with IP address |
| ASN Database | ASN Database Sample | IP range and ASN information |
| IP to Mobile Carrier Database | IP to Mobile Sample | Mobile carrier and country information |
| Privacy Detection Database | Privacy Detection Sample | VPN, proxy, Tor, relay detection |
| Hosted Domain Database | Hosted Domains Sample | Reverse IP lookup |
| Abuse Contact Database | Abuse Contact Sample | Abuse contact information |
| WHOIS Database | WHOIS Sample | Contextualized and structured WHOIS database |
IPinfo also provides the following IP databases for free. The database provide full accuracy, daily updates and complete IP data solution. The databases are licensed under (CC BY-SA 4.0) and require an attribution statement, which can found on your account dashboard.
| Database Product | Sample Database Repo | Description |
|---|---|---|
| IP to Country | IP to Country Sample | IP to Country Information |
| IP to ASN | IP to ASN Sample | IP to ASN information |
| IP to Country ASN | IP to Country ASN Sample | Joined database of IP to Country and IP to ASN |
We offer a few detailed database that comes with additional columns that gives insights to the accuracy and our data methodology. These enterprise grade databases are only available upon request.
| Database Product | Sample Database Repo | Description |
|---|---|---|
| IP to Geolocation Extended Database | IP to Geolocation Extended Sample | IP to Geolocation database with accuracy radius |
| IP to Privacy Detection Extended Database | IP to Privacy Detection Extended Sample | IP to Privacy Detection database detection method information |
All of these products are available as CSV, JSON and MMDB type.
Please visit each folder to learn more about the databases. Each directory README contains -
- Sample Dataset (100 rows) in
.csv,.jsonand.mmdbformat - API response (in
.json) - Breakdown of the dataset with description of the fields
- Breakdown of the API response
- Helpful guides, resources and articles
Please visit the individual database directories to learn more. The database schemas were generated in May, 2024.
Get the country and continent information from IP addresses.
You can find the schema, database sample, API response sample, and other information in the IP to Country folder. The database includes the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
217.220.0.0 | Starting IP address of an IP address range |
end_ip |
217.223.255.255 | Ending IP address of an IP address range |
country |
IT | ISO 3166 country code of the IP addresses |
country_name |
Italy | Name of the country |
continent |
EU | Continent code of the country |
continent_name |
Europe | Name of the continent |
Get ASN information (limited) from an IP address range.
You can find the schema, database sample, API response sample, and other information in the IP to ASN folder. The database includes the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
62.235.50.0 | Starting IP address of an IP address range |
end_ip |
62.235.50.255 | Ending IP address of an IP address range |
asn |
AS29005 | Autonomous System Number |
name |
Proximus NV | Name of the AS (Autonomous System) organization |
domain |
proximus.com | Official domain or website of the AS organization |
Joined database of IP to Country and IP to ASN database.
You can find the schema, database sample, API response sample, and other information in the IP to Country ASN folder. The database includes the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
194.87.139.0 | Starting IP address of an IP address range |
end_ip |
194.87.139.255 | Ending IP address of an IP address range |
country |
NL | ISO 3166 country code of the IP addresses |
country_name |
Netherlands | Name of the country |
continent |
EU | Continent code of the country |
continent_name |
Europe | Name of the continent |
asn |
AS1239 | Autonomous System Number |
as_name |
Sprint | Name of the AS (Autonomous System) organization |
as_domain |
sprint.net | Official domain or website of the AS organization |
Get geolocation information from IP addresses.
You can find the schema, database sample, API response sample, and other information in the IP Geolocation folder. The database includes the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
1.253.242.0 | Starting IP address of an IP address range |
end_ip |
1.253.242.255 | Ending IP address of an IP address range |
join_key |
1.253.0.0 | Special variable to facilitate database join operation |
city |
Yangsan | City of the IP addresses |
region |
Gyeongsangnam-do | Region of the IP addresses |
country |
KR | ISO 3166 country code of the IP addresses |
latitude |
35.34199 | Latitude value of the location |
longitude |
129.03358 | Longitude value of the location |
postal_code |
50593 | Postal code or zip code of the IP addresses |
timezone |
Asia/Seoul | Local time zone |
Get organization data and identify the company behind the IP address and network traffic.
You can find the schema, database sample, API response sample, and other information in the IP to Company folder. This database is can be used to identify large scale organization or companies behind IP address ranges. The database includes the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
107.136.106.168 | Starting IP address of an IP address range |
end_ip |
107.136.106.175 | Ending IP address of an IP address range |
join_key |
107.136.0.0 | Special variable to facilitate database join operation |
name |
ZSPEC FLOW-180709174314 | Name of the organization |
domain |
zspec.com | Domain of the organization |
type |
business | Type of business. e.g. Business, ISP, Hosting or Education |
asn |
AS7018 | ASN of the IP range |
as_name |
AT&T Services, Inc. | Name of the ASN |
as_domain |
att.com | Domain name of the ASN |
as_type |
isp | ASN Type: ISP, Hosting, Business or Education |
country |
US | ISO 3166 country code |
Get ASN data from ASN or IP Address information.
You can find the schema, database sample, API response sample, and other information in the ASN folder. The Database contains the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
125.113.0.0 | Starting IP address of the ASN IP address block |
end_ip |
125.113.255.255 | Ending IP address of the ASN IP address block |
join_key |
125.113.0.0 | Special variable to facilitate database join operation |
asn |
AS4134 | Autonomous System Number (ASN) |
domain |
chinatelecom.com.cn | Domain name of the AS |
name |
CHINANET-BACKBONE | Name of the ASN |
type |
isp | ASN Type: ISP, Hosting, Education or Business |
country |
CN | ISO 3166 country code |
Lookup Mobile Carrier data such as - MCC and MNC from IP addresses.
You can find the schema, database sample, API response sample, and other information in the IP to Mobile Carrier folder. The database contains the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
5.208.203.0 | Starting IP address of an IP address range |
end_ip |
5.208.203.255 | Ending IP address of an IP address range |
join_key |
5.208.0.0 | Special variable to facilitate database join operation |
name |
Mobile Communication Company of Iran PLC | Name of the mobile carrier |
country |
IR | ISO 3166 country code |
mcc |
432 | Mobile Country Code (MCC) of the carrier |
mnc |
11 | Mobile Network Code (MNC) of the carrier |
Demystify anonymous IP addresses. Identify privacy masking services such as VPN, Tor, proxies, relays and hosting from IP addresses.
You can find the schema, database sample, API response sample, and other information in the Privacy Detection folder. The database includes the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
115.9.76.79 | Starting IP address of an IP address range |
end_ip |
115.9.76.79 | Ending IP address of an IP address range |
join_key |
115.9.0.0 | Special variable to facilitate databas join operation |
hosting |
Indicates a hosting/cloud service/data center IP address | |
proxy |
Indicates a open web proxy IP address | |
tor |
Indicates a TOR (The Onion Router) exit node IP address | |
vpn |
True | Indicates Virtual Private Network (VPN) service exit node IP address |
relay |
Indicates location preserving anonymous relay service | |
service |
Name of the anonymous IP service provider |
Hosted Domains database enables you to do reverse IP lookups.
Through our Hosted Domains service, you can see the list of domains hosted on a single IP address.
You can find the schema, database sample, API response sample, and other information in the Hosted Domains folder. The database includes the following fields:
| Field Name | Example | Description |
|---|---|---|
ip |
135.125.236.225 | IP address for reverse IP lookup |
total |
3 | Number of domains registered to the IP Address |
domains |
farmanaut.com,pharmanaut.be,farmanaut.be | Name of the domain(s) under the IP address |
Get the abuse contact information of every ISP on the internet.
You can find the schema, database sample, API response sample, and other information in the Abuse Contact folder. The database includes the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
119.93.20.248 | Starting IP address of an IP address block |
end_ip |
119.93.20.255 | Ending IP address of an IP address block |
join_key |
119.93.0.0 | Special variable to facilitate database join operation |
name |
Nilo Agir | Name of the abuse contact |
email |
[email protected] | Organizational email of the abuse contact |
address |
Philippine Long Distance Telephone Company, 6/... | Organizational address of the abuse contact |
country |
PH | ISO 3166 country code |
phone |
632-584-1045 | Organizational phone number of the abuse contact |
IP to Geolocation database with confidence metric or accuracy radius for each entry
You can find the schema, database sample, API response sample, and other information in the IP Geolocation Extended folder. The database includes the following fields:
| Field Name | Example | Description |
|---|---|---|
start_ip |
171.71.0.0 | Starting IP address of an IP address range |
end_ip |
171.71.127.255 | Ending IP address of an IP address range |
join_key |
171.71.0.0 | Special variable to facilitate database join operation |
city |
San Jose | City of the location |
region |
California | Region of the location |
country |
US | ISO 3166 country code of the location |
latitude |
37.4087 | Latitude value of the location |
longitude |
-121.9406 | Longitude value of the location |
postal_code |
95134 | Postal code of the location |
timezone |
America/Los_Angeles | Local time zone |
geoname_id |
5392171 | Geonames_id from geonames.org |
radius |
5 | Accuracy radius in terms of kilometers |
Get detection method for each private IP address
You can find the schema, database sample, API response sample, and other information in the Privacy Detection Extended folder. The database includes the following fields:
| Fields | Example | Description |
|---|---|---|
start_ip |
62.182.99.0 | First IP address of the range |
end_ip |
62.182.99.255 | Last IP address of the range |
join_key |
62.182.0.0 | Specialized variable to facilitate join operation |
hosting |
False | Indicates hosting service IP address (data center, cloud service, bots, scrapers, etc.) |
proxy |
False | IP address being used in a proxy service |
tor |
False | Tor exit node IP address |
vpn |
True | IP address associated with a VPN service |
relay |
False | Indicates location preserving anonymous relay service (these include Apple Private Relay, Google One etc.) |
vpn_name |
NordVPN | Name of the IP privacy service provider |
anycast |
False | True: if IP is indentified as being any anycast IP, that could map to multiple physical servers in different locations |
census |
True | True: if we've indentified VPN software running on this IP as part of our internet wide scan (successful openvpn or ipsec handshake) |
device_activity |
True | True: if we've seen VPN-like behavior (multiple devices, multiple locations etc) |
whois |
False | True: if we've seen vpn provider attributes in the IP whois data (eg. provider name) |
vpn_config |
True | True: if we've identified this IP in a VPN config file |
census_port |
500 | Port number we've identified VPN software running on |
IPinfo WHOIS database is a contextual, robust and consistent database of various types of WHOIS data.
You can find the schema, database sample, API response sample, and other information in the WHOIS folder. The WHOIS database and their respective fields are listed below:
| Field Name | Example | Description |
|---|---|---|
range |
50.28.18.195 | IP Address range/netblock |
id |
NETBLK-GRADOCEROPUB.50.28.18.195/32 | Raw netblock identifier from WHOIS |
name |
Grado Cero Publicidad S.A. de C.V. | Name of netblock |
descr |
GRADOCEROPUB-50.28.18.195 | Description |
host |
rwhois.liquidweb.com:4321 | Host information |
country |
MX | ISO 3166 country code |
email |
[email protected] | Contact email information |
abuse |
[email protected] | Abuse email information |
domain |
gradocero.com | Domain associated with the netblock |
country.1 |
MX | Secondary country information |
city |
Naucalpan de Juarez | City information |
street |
Calle Andes #46 | Street information |
postal |
53125 | Postal Code information |
updated |
2021-01-26 00:00:00 | Update date in the WHOIS registry |
imported |
2021-01-27 04:44:47.206483 | Imported date in the WHOIS registry |
| Field Name | Example | Description |
|---|---|---|
range |
45.142.160.224-45.142.161.255 | IP Address range/netblock |
id |
PL-DOMYNET-NETWORK | Raw netblock identifier from WHOIS |
name |
DomyNet Sp. z o.o. | Name of netblock |
country |
PL | ISO 3166 country code |
status |
ASSIGNED PA | Range assignment type (RIPE’s documentation) |
tech |
PK9274-RIPE | ID for technical contact of WHOIS record |
maintainer |
MNT-PL-DOMYNET-1 | ID for contact authorized to update WHOIS record for netblock |
admin |
PK9274-RIPE | ID for administrative contact of netblock |
source |
ripe | RIR associated with record (RIPE, ARIN, etc.) |
whois_domain |
domynet.pl | Domain name (from WHOIS entry) |
updated |
2020-01-09 | Last updated date (taken from WHOIS entry) |
org |
ORG-DSZO39-RIPE | ID or name of organization responsible for netblock |
rdns_domain |
domynet.pl | Domain associated with IP range (only available if a majority of IPs within range share a common reverse DNS domain) |
domain |
domynet.pl | Domain associated with netblock (based on our data sets) |
geoloc |
52.2260524 20.9941955 | Latitude/longitude coordinates indicating where users of network are located |
org_address |
ul. Lindleya 16/301 02-013 Warszawa POLAND | Address of the associated organization |
asn |
AS208348 | Autonomous system number for organization that routes traffic for IP (based on BGP routing data) |
as_name |
DomyNet Sp. z o.o. | Name of AS (based on our data sets and data processing) |
as_domain |
domynet.pl | Domain of AS (based on our data sets and data processing) |
as_type |
isp | ISP, business, or hosting (based on around 20 different features and our custom training set) |
Other kinds of WHOIS Database IPinfo offers:
| WHOIS ASN | WHOIS MNT | WHOIS NET | WHOIS ORG | WHOIS POC |
|---|---|---|---|---|
| id | id | range | id | id |
| name | name | id | name | name |
| country | admin_id | name | address | mobilephone |
| org_id | tech_id | country | street | officephone |
| created | org_id | domain | city | fax |
| updated | created | org_id | state | addres |
| source | updated | status | postalcode | country |
| raw | source | tech_id | country | |
| raw | mnt_id | admin_id | abuse_email | |
| admin_id | tech_id | created | ||
| created | abuse_id | updated | ||
| updated | mnt_id | source | ||
| source | raw | |||
| raw | domain | |||
| created | ||||
| updated | ||||
| source | ||||
| raw |
We highly recommend exploring the IPinfo community for posts and detailed instructions on using our database. Feel free to participate in the community if you have any questions.
- Database downloads articles in the community
- Lookup IP geolocation and ASN with ClickHouse and IPinfo’s free database
- https://community.ipinfo.io/t/using-ipinfo-s-data-downloads-in-postgresql/1000
- Querying IPinfo IP databases inside BigQuery
- Using IPinfo’s MMDB data downloads with Golang
- How to choose the best file format for your IPinfo database?
- How to get IP data and IP location in C# with IPinfo
- Our downloadable IP WHOIS data sets are live!
- Data downloads vs API, or both?
- Ingesting IPinfo geolocation data with PostgreSQL 13
- Introducing a Simpler Way to get IP Address Data in Snowflake
- IP data enrichment with IPinfo: 4 ways to add insights to your traffic/server logs
- Meet IPinfo’s Free IP Data Downloads
The list of FAQs (Frequently Asked Questions) can be found here or in the IPinfo Community.
If you found an issue or would like to submit an improvement to this project, please submit an issue using the issues tab above. If you would like to submit a PR with a fix, reference the issue you created!
Currently, we are limiting the sample datasets to only 100 rows. If you would like to request a larger sample or would like to get a quote on the database products, feel free to reach to us.
Follow us on Twitter and LinkedIn to learn more about IP Address data and it’s fascinating potential.
There are official IPinfo client libraries available for many languages including PHP, Python, Go, Java, Ruby, and many popular frameworks such as Django, Rails and Laravel. There are also many third party libraries and integrations available for our API.
We also have an excellent CLI tool (1700 Stars on Github) and mapping tool.
See https://ipinfo.io/developers/libraries for more details.
Founded in 2013, IPinfo prides itself on being the most reliable, accurate, and in-depth source of IP address data available anywhere. We process terabytes of data to produce our custom IP geolocation, company, carrier, VPN detection, hosted domains, and IP type data sets. Our API handles over 40 billion requests a month for 100,000 businesses and developers.
