IP Whois

Overview

One row per network record in the public data of AFRINIC, APNIC, ARIN, LACNIC and the RIPE NCC, the national registries under APNIC, and operators' RWHOIS servers, at every level of nesting, IPv4 and IPv6. source says where a record comes from, and parent names the smallest other record that contains it.

Admin and technical contacts are the record's own, else its organization's. The abuse contact is the record's own, else its incident response team's, else its organization's. Bulk registry data leaves out what privacy rules withhold, most often a personal contact's email, so those fields are empty there.

asn is the AS announcing the record's first address, with its name, domain and type from the ASN database. rdns_domain is the domain most reverse DNS names inside the record share, for records of up to 64 /24s.

The MMDB answers each address with the most specific record holding it, in fewer columns.

Formats

CSVMMDB

cURLJavaScriptGoPythonJavaC#

curl -L -o ip_whois_v1.csv.gz -X GET "https://internetdata.io/api/v2/database/download?id=ip_whois_v1&format=csvgz&apikey=$APIKEY"

Schema

Name	Type	Description
start_ip	ipaddress	Start IP of the registered range.
end_ip	ipaddress	End IP of the registered range.
id	string	The record's network name (netname) in the registry.
name	string	Name of the organization holding the range, else its description.
country	string	ISO 3166 country code the record states.
status	string	The registry's assignment status, e.g. ALLOCATED PA, ASSIGNED PA, reassignment.
tech	string	Handles of the technical contacts, pipe-separated.
maintainer	string	Handles of the maintainers allowed to change the record, pipe-separated.
admin	string	Handles of the administrative contacts, pipe-separated.
source	string	Where the record comes from: the registry (arin, ripe, apnic, lacnic, afrinic, jpnic, krnic, twnic, idnic) or rwhois.
whois_domain	string	The registrable domain of the record's contact emails.
updated	date	When the registry last changed the record.
org	string	The registry's handle for the holding organization.
rdns_domain	string	The registrable domain most reverse-DNS names inside the range belong to.
domain	string	The holder's domain: whois_domain, else rdns_domain.
geoloc	string	Latitude and longitude the record states.
org_address	string	Postal address of the holding organization.
asn	integer	The ASN announcing the start of the range in global BGP.
as_name	string	Name of that ASN's operator.
as_domain	string	Domain of that ASN's operator.
as_type	string	Kind of network that ASN runs. Values are listed below. isp An Internet service provider: access, mobile or transit networks that connect other people. hosting A hosting, cloud, CDN or content network whose addresses serve machines rather than people. education A university, school or research and education network. government A government body, agency or armed service. business Any other organization running its own network, and the default when no signal says otherwise.
created	date	When the registry created the record; empty where it predates the registry recording it.
descr	string	The record's description lines, joined with " / ".
parent	string	The smallest other record whose range encloses this one, as start-end.
handle	string	The registry's own handle for the record: ARIN's NetHandle, LACNIC's handle, an RWHOIS network's ID. Empty for RIPE, APNIC, AFRINIC and the national registries, which key a record by its range.
as_route	string	The prefix announced in global BGP that holds the range's start address.
remarks	string	The record's remarks, joined with " / ", without the notices registries add to every record.
abuse_email	string	Email of the record's abuse contact.
abuse_name	string	Name of the record's abuse contact.
abuse_phone	string	Phone number of the record's abuse contact.
abuse_kind	string	What the abuse contact is: person, role (a role account) or irt (an incident response team).
abuse_country	string	ISO 3166 country code of the abuse contact, where the registry states one (ARIN, APNIC, IDNIC).
abuse_city	string	City of the abuse contact, where the registry states one (ARIN).
admin_name	string	Name of the administrative contact.
admin_email	string	Email of the administrative contact.
admin_phone	string	Phone number of the administrative contact.
admin_kind	string	What the administrative contact is: person or role (a role account).
admin_country	string	ISO 3166 country code of the administrative contact, where the registry states one (ARIN, APNIC, IDNIC).
admin_city	string	City of the administrative contact, where the registry states one (ARIN).
tech_name	string	Name of the technical contact.
tech_email	string	Email of the technical contact.
tech_phone	string	Phone number of the technical contact.
tech_kind	string	What the technical contact is: person or role (a role account).
tech_country	string	ISO 3166 country code of the technical contact, where the registry states one (ARIN, APNIC, IDNIC).
tech_city	string	City of the technical contact, where the registry states one (ARIN).
org_name	string	Name of the holding organization.
org_country	string	ISO 3166 country code of the holding organization.
org_city	string	City of the holding organization, where the registry states one (ARIN).
maintainer_email	string	Emails of the record's maintainers, pipe-separated, where the registry publishes them (APNIC, IDNIC).
domain_maintainer	string	Handles of the maintainers of the range's reverse DNS delegations (mnt-domains), pipe-separated.
abuse_validated	boolean	1 when ARIN reports that the abuse contact answered its yearly validation, else empty. The other registries publish no such state.
abuse_unvalidated_since	date	The date since which the abuse contact has not answered ARIN's yearly validation; empty when it has, or where the registry does not say.

Samples

start_ip	end_ip	id	name	country	status	tech	maintainer	admin	source	whois_domain	updated	org	rdns_domain	domain	geoloc	org_address	asn	as_name	as_domain	as_type	created	descr	parent	handle	as_route	remarks	abuse_email	abuse_name	abuse_phone	abuse_kind	abuse_country	abuse_city	admin_name	admin_email	admin_phone	admin_kind	admin_country	admin_city	tech_name	tech_email	tech_phone	tech_kind	tech_country	tech_city	org_name	org_country	org_city	maintainer_email	domain_maintainer	abuse_validated	abuse_unvalidated_since
0.0.0.0	1.178.111.255	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	IPv4 address block not managed by the RIPE NCC	EU	ALLOCATED UNSPECIFIED	N/A	RIPE-NCC-HM-MNT	N/A	ripe	N/A	2021-12-06	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	2021-12-06	IPv4 address block not managed by the RIPE NCC	N/A	N/A	N/A	For registration information, / you can consult the following sources: / IANA / http://www.iana.org/assignments/ipv4-address-space / http://www.iana.org/assignments/iana-ipv4-special-registry / http://www.iana.org/assignments/ipv4-recovered-address-space / AFRINIC (Africa) / http://www.afrinic.net/ whois.afrinic.net / APNIC (Asia Pacific) / http://www.apnic.net/ whois.apnic.net / ARIN (Northern America) / http://www.arin.net/ whois.arin.net / LACNIC (Latin America and the Carribean) / http://www.lacnic.net/ whois.lacnic.net	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
12.0.76.136	12.0.76.143	ATT-WIRE15-76-136	ATT WIRELESS SERVICESBRAVO A	N/A	reassignment	N/A	N/A	N/A	arin	att.com	2019-12-02	AWS-274	N/A	att.com	N/A	800 FEDERAL ST, ANDOVER, MA, 01810	7018	AT&T Enterprises, LLC	att.com	isp	2019-12-02	N/A	12.0.0.0-12.255.255.255	NET-12-0-76-136-1	12.0.0.0/9	N/A	dl-eastrrc@att.com	RRC EAST	+1-800-638-2822	person	US	ATLANTA	RRC EAST	dl-eastrrc@att.com	+1-800-638-2822	person	US	ATLANTA	RRC EAST	dl-eastrrc@att.com	+1-800-638-2822	person	US	ATLANTA	ATT WIRELESS SERVICESBRAVO A	US	ANDOVER	N/A	N/A	true	N/A
12.106.194.96	12.106.194.103	POWER-DI71-194-96	POWER DIGITAL MARKETING	N/A	reassignment	N/A	N/A	N/A	arin	N/A	2025-10-16	C11391617	N/A	N/A	N/A	9605 SCRANTON RD, SD, CA, 92121	7018	AT&T Enterprises, LLC	att.com	isp	2025-10-16	N/A	12.0.0.0-12.255.255.255	NET-12-106-194-96-1	12.0.0.0/9	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	POWER DIGITAL MARKETING	US	SD	N/A	N/A	N/A	N/A
12.208.127.16	12.208.127.23	FOUR-B-C83-127-16	FOUR B CORPORATION	N/A	reassignment	N/A	N/A	N/A	arin	N/A	2023-03-25	C09328356	N/A	N/A	N/A	207 NE ENGLEWOOD RD, KANSAS CITY, MO, 64118	7018	AT&T Enterprises, LLC	att.com	isp	2023-03-25	N/A	12.208.0.0-12.208.255.255	NET-12-208-127-16-1	12.128.0.0/9	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	FOUR B CORPORATION	US	KANSAS CITY	N/A	N/A	N/A	N/A
23.251.81.0	23.251.81.255	WISOLT5-EPBFI-COM	EPB Fiber Optics	N/A	reassignment	N/A	N/A	N/A	arin	N/A	2014-03-18	C04900821	epbfi.com	epbfi.com	N/A	P.O. Box 182255, Chattanooga, TN, 37422-7255	26827	EPB Fiber Optics	epb.net	isp	2014-03-18	N/A	23.251.64.0-23.251.95.255	NET-23-251-81-0-1	23.251.64.0/19	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	EPB Fiber Optics	US	Chattanooga	N/A	N/A	N/A	N/A