IP Whois Database


Overview

Our IP WHOIS Database delivers clean, consistently parsed ownership data for any IPv4/IPv6 range, so you can verify who controls an address block, identify the right contacts, and act with confidence. Use it to harden security, speed up network troubleshooting, validate IP ownership during onboarding or investigations, and enrich tooling with reliable WHOIS insights across the global internet.

Raw WHOIS text is preserved for auditability. Available in CSV, JSON and MMDB formats. Below, you'll find full documentation of the archive contents, schema definitions, file specifications, and integration notes to help you get up and running quickly.


Available Database Formats

CSV
CSVCSV
  • File Size: 1.22 GB
  • Entries: 11.2M
  • Fields: 55
  • Last Updated: Yesterday
MMDB
MMDBMMDB
  • File Size: 22.00 MB
  • Entries: 11.2M
  • Fields: 55
  • Last Updated: Yesterday

CSV Database Documentation


1. Overview

The CSV version is a set of Gzip-compressed CSV files containing IP ranges and detailed IP WHOIS information. These files are designed for bulk imports and integration into relational databases.


2. Archive Content

After downloading and extracting the IP Whois CSV database archive, you'll find the following files (with their types noted):

db-ip-whois.csv.gz
db-ip-whois.csv.gzdb-ip-whois.csv.gz

IP range links to WHOIS details: name, country, domain, RIR, and raw WHOIS record.

  • File Size: 1.13 GB
  • Entries: 11.2M
  • Fields: 14
db-org-details.csv.gz
db-org-details.csv.gzdb-org-details.csv.gz

Links an organization ID to its handle, name, type, and contact details.

  • File Size: 93.02 MB
  • Entries: 2.7M
  • Fields: 11
db-handles-details.csv.gz
db-handles-details.csv.gzdb-handles-details.csv.gz

Links the network handle ID to its name, country, address, and contact details.

  • File Size: 3.81 MB
  • Entries: 104.6K
  • Fields: 10
README.md
README.mdREADME.md

Documentation for dataset contents, schema, usage, and support.

  • File Size: 7.97 KB
db-ip-whois.md5
db-ip-whois.md5db-ip-whois.md5
  • File Size: 213 Bytes

Schema

This section describes the schema of each file included in the IP Whois Database archive. For every file, you'll find its purpose, field definitions, and examples to help with integration.


1. db-ip-whois.csv.gz

This file contains detailed WHOIS information for IP address ranges. It maps each IP block to the name, country, domain, and RIR, as well as various contact handle IDs and the full raw_whois record.

FieldTypeDescriptionCan be empty?Example
start_ipstringThe starting IP address of the range in IPv4 or IPv6 format.No192.168.0.1
end_ipstringThe ending IP address of the range in IPv4 or IPv6 format.No192.168.0.255
namestringThe name associated with the IP range in the WHOIS record.YesExample Network
countrystringThe country code associated with the IP range in the WHOIS record.YesUS
domainstringThe domain name associated with the IP range in the WHOIS record.Yesexample.com
rirstringThe Regional Internet Registry (RIR) that manages the IP range.YesARIN
org_idnumberThe unique identifier for the organization associated with the IP range.Yes1
admin_handles_idnumberThe unique identifier for the administrative contact handle associated with the IP range.Yes1
tech_handles_idnumberThe unique identifier for the technical contact handle associated with the IP range.Yes1
abuse_handles_idnumberThe unique identifier for the abuse contact handle associated with the IP range.Yes1
irt_handles_idnumberThe unique identifier for the Incident Response Team (IRT) contact handle associated, with the IP range.Yes1
raw_whoisstringThe raw WHOIS record data associated with the IP range.YesRaw WHOIS data string...
date_createdstringThe date when the WHOIS record for the IP range was created.Yes2020-01-01T12:00:00Z
date_updatedstringThe date when the WHOIS record for the IP range was last updated.Yes2023-01-15T12:00:00Z

I. Example Records

Example
start_ip,end_ip,name,country,domain,rir,org_id,admin_handles_id,tech_handles_id,abuse_handles_id,irt_handles_id,raw_whois,date_created,date_updated
1.18.136.0,1.19.255.255,KISANET,KR,nic.or.kr,apnic,null,1,1,,2,"% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '1.18.136.0 - 1.19.255.255'

% Abuse contact for '1.18.136.0 - 1.19.255.255' is 'irt@nic.or.kr'

inetnum:        1.18.136.0 - 1.19.255.255
netname:        KISANET
descr:          Korea Internet Security Agency
country:        KR
admin-c:        IM574-AP
tech-c:         IM574-AP
status:         ALLOCATED PORTABLE
mnt-by:         MNT-KRNIC-AP
mnt-irt:        IRT-KRNIC-KR
last-modified:  2019-05-15T00:10:43Z
source:         APNIC

irt:            IRT-KRNIC-KR
address:        9, Jinheung-gil, Naju-si, Jeollanam-do
e-mail:         irt@nic.or.kr
abuse-mailbox:  irt@nic.or.kr
admin-c:        IM574-AP
tech-c:         IM574-AP
auth:           # Filtered
remarks:        irt@nic.or.kr was validated on 2020-04-09
mnt-by:         MNT-KRNIC-AP
last-modified:  2025-09-04T01:00:01Z
source:         APNIC

person:         IP Manager
address:        Jeollanam-do Naju-si Jinheung-gil
country:        KR
phone:          +82-2-405-5118
e-mail:         hostmaster@nic.or.kr
nic-hdl:        IM574-AP
mnt-by:         MNT-KRNIC-AP
last-modified:  2024-02-29T01:18:34Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-JP1)",null,2019-05-15T00:10:43
1.21.8.32,1.21.8.39,G-KT0019N22,JP,nic.ad.jp,apnic,null,,,,3,"% Information related to '1.21.0.0 - 1.21.95.255'

% Abuse contact for '1.21.0.0 - 1.21.95.255' is 'hostmaster@nic.ad.jp'

inetnum:        1.21.0.0 - 1.21.95.255
netname:        Vectant
descr:          ARTERIA Networks Corporation
descr:          Sumitomo Fudosan Shinbashi Bldg.Shinbashi,6-9-8, minato-ku, Tokyo,105-0004 Japan
admin-c:        JNIC1-AP
tech-c:         JNIC1-AP
remarks:        Email address for spam or abuse complaints : abuse@vectant.ne.jp
country:        JP
status:         ALLOCATED PORTABLE
mnt-by:         MAINT-JPNIC
mnt-lower:      MAINT-JPNIC
mnt-irt:        IRT-JPNIC-JP
last-modified:  2022-09-07T02:32:16Z
source:         APNIC

irt:            IRT-JPNIC-JP
address:        Uchikanda OS Bldg 4F, 2-12-6 Uchi-Kanda
address:        Chiyoda-ku, Tokyo 101-0047, japan
e-mail:         hostmaster@nic.ad.jp
abuse-mailbox:  hostmaster@nic.ad.jp
phone:          +81-3-5297-2311
fax-no:         +81-3-5297-2312
admin-c:        JNIC1-AP
tech-c:         JNIC1-AP
auth:           # Filtered
remarks:        hostmaster@nic.ad.jp was validated on 2024-11-27
mnt-by:         MAINT-JPNIC
last-modified:  2025-09-04T01:00:00Z
source:         APNIC

role:           Japan Network Information Center
address:        Uchikanda OS Bldg 4F, 2-12-6 Uchi-Kanda
address:        Chiyoda-ku, Tokyo 101-0047, Japan
country:        JP
phone:          +81-3-5297-2311
fax-no:         +81-3-5297-2312
e-mail:         hostmaster@nic.ad.jp
admin-c:        JI13-AP
tech-c:         JE53-AP
nic-hdl:        JNIC1-AP
mnt-by:         MAINT-JPNIC
last-modified:  2022-01-05T03:04:02Z
source:         APNIC

% Information related to '1.21.8.32 - 1.21.8.39'

inetnum:        1.21.8.32 - 1.21.8.39
netname:        G-KT0019N22
descr:          ARTERIA Networks Corp.
country:        JP
admin-c:        JP00022296
tech-c:         JP00022296
last-modified:  2024-01-05T05:07:47Z
remarks:        This information has been partially mirrored by APNIC from
remarks:        JPNIC. To obtain more specific information, please use the
remarks:        JPNIC WHOIS Gateway at
remarks:        http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks:        whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks:        defaults to Japanese output, use the /e switch for English
remarks:        output)
source:         JPNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-JP1)

",null,2024-01-05T05:07:47
2.116.184.240,2.116.184.247,AZALEAPROMOTIONSRL,IT,business.telecomitalia.it,ripencc,null,4,5,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '2.116.184.240 - 2.116.184.247'

% Abuse contact for '2.116.184.240 - 2.116.184.247' is 'abuse@business.telecomitalia.it'

inetnum:        2.116.184.240 - 2.116.184.247
netname:        AZALEAPROMOTIONSRL
descr:          AZALEA PROMOTION S.R.L.
country:        IT
admin-c:        BS5273-RIPE
tech-c:         BS5274-RIPE
status:         ASSIGNED PA
mnt-by:         INTERB-MNT
created:        2011-03-23T18:07:24Z
last-modified:  2020-04-09T14:19:48Z
source:         RIPE # Filtered

person:         BEATRICE SALZANI
address:        AZALEA PROMOTION S R L
address:        VIA FLLI ROSSELLI 1
address:        33170 PORDENONE
address:        Italy
phone:          +39483429418
fax-no:         +39431520520
nic-hdl:        BS5273-RIPE
mnt-by:         INTERB-MNT
created:        2011-03-23T18:07:24Z
last-modified:  2011-03-23T18:07:24Z
source:         RIPE

person:         BEATRICE SALZANI
address:        AZALEA PROMOTION S R L
address:        VIA FLLI ROSSELLI 1
address:        33170 PORDENONE
address:        Italy
phone:          +39483429418
fax-no:         +39431520520
nic-hdl:        BS5274-RIPE
mnt-by:         INTERB-MNT
created:        2011-03-23T18:07:24Z
last-modified:  2011-03-23T18:07:24Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122 (ABERDEEN)

",2011-03-23T18:07:24,2020-04-09T14:19:48
2.119.37.56,2.119.37.59,PRESIDENZADELCONSIGLIODEIMINISTRI,IT,business.telecomitalia.it,ripencc,null,6,6,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '2.119.37.56 - 2.119.37.59'

% Abuse contact for '2.119.37.56 - 2.119.37.59' is 'abuse@business.telecomitalia.it'

inetnum:        2.119.37.56 - 2.119.37.59
netname:        PRESIDENZADELCONSIGLIODEIMINISTRI
descr:          PRESIDENZA DEL CONSIGLIO DEI MINISTRI
country:        IT
admin-c:        SLP147-RIPE
tech-c:         SLP147-RIPE
status:         ASSIGNED PA
mnt-by:         INTERB-MNT
created:        2022-09-22T15:37:56Z
last-modified:  2022-09-22T15:37:56Z
source:         RIPE # Filtered

person:         STEFANO LA POSTA
address:        PRESIDENZA DEL CONSIGLIO DEI MINISTRI
address:
address:        00100 ROMA
address:        Italy
nic-hdl:        SLP147-RIPE
phone:          +39650251
fax-no:         +39650526289
mnt-by:         INTERB-MNT
created:        2022-09-22T15:37:56Z
last-modified:  2022-09-22T15:37:56Z
source:         RIPE

% Information related to '2.118.0.0/15AS3269'

route:          2.118.0.0/15
descr:          INTERBUSINESS
origin:         AS3269
remarks:        ************************************************
remarks:        * Pay attention *
remarks:        * Any communication sent to email different *
remarks:        * from the following will be ignored! *
remarks:        * Any abuse reports, please send them to *
remarks:        * abuse@business.telecomitalia.it *
remarks:        ************************************************
mnt-by:         INTERB-MNT
created:        2010-08-05T08:21:53Z
last-modified:  2017-07-17T12:18:58Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.122 (SHETLAND)

",2022-09-22T15:37:56,2022-09-22T15:37:56
5.7.219.192,5.7.219.199,CLICKS-DIGITAL-NET,DE,telefonica.com,ripencc,null,7,8,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.7.219.192 - 5.7.219.199'

% Abuse contact for '5.7.219.192 - 5.7.219.199' is 'abuse.de@telefonica.com'

inetnum:        5.7.219.192 - 5.7.219.199
netname:        CLICKS-DIGITAL-NET
descr:          This Space is statically assigned
descr:          Clicks Digital GmbH
descr:          An der Mauer 1
descr:          01067 Dresden
country:        DE
admin-c:        EB14721-RIPE
tech-c:         TGH17-RIPE
status:         ASSIGNED PA
mnt-by:         MDA-Z
created:        2024-03-13T09:09:32Z
last-modified:  2024-03-13T09:09:32Z
source:         RIPE

role:           Telefonica Germany Hostmaster
address:        Telefonica Germany GmbH & Co. OHG
address:        Georg-Brauchle-Ring 50
address:        80992 Muenchen
address:        DE
phone:          +498924420
fax-no:         +49892442198224
abuse-mailbox:  abuse.de@telefonica.com
admin-c:        DK9212-RIPE
admin-c:        RCM25-RIPE
tech-c:         MWH6-RIPE
nic-hdl:        TGH17-RIPE
mnt-by:         MDA-Z
created:        2014-09-19T08:16:10Z
last-modified:  2022-03-31T09:19:15Z
source:         RIPE # Filtered

person:         Enrico Bohn
address:        Clicks Digital GmbH
address:        An der Mauer 1
address:        01067 Dresden
address:        DE
phone:          +4935165312010
nic-hdl:        EB14721-RIPE
mnt-by:         MDA-Z
created:        2024-03-13T09:08:06Z
last-modified:  2024-03-13T09:08:06Z
source:         RIPE # Filtered

% Information related to '5.4.0.0/14AS6805'

route:          5.4.0.0/14
descr:          Telefonica Germany GmbH & Co. OHG
remarks:        netname: DE-MEDIAWAYS
origin:         AS6805
mnt-by:         MDA-Z
created:        2018-08-08T09:03:25Z
last-modified:  2018-08-08T09:13:47Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122 (DEXTER)

",2024-03-13T09:09:32,2024-03-13T09:09:32
5.99.22.108,5.99.22.111,NUOVAFARMACIADELPONTESNCDELLEDRSSEPASSALIAMARISTELLAENERIEMMAPIA,IT,business.telecomitalia.it,ripencc,null,9,9,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.99.22.108 - 5.99.22.111'

% Abuse contact for '5.99.22.108 - 5.99.22.111' is 'abuse@business.telecomitalia.it'

inetnum:        5.99.22.108 - 5.99.22.111
netname:        NUOVAFARMACIADELPONTESNCDELLEDRSSEPASSALIAMARISTELLAENERIEMMAPIA
descr:          NUOVA FARMACIA DEL PONTE SNC DELLE DR.SSE PASSALIA MARISTELLA E NERI EMMA PIA
country:        IT
admin-c:        EMPN1-RIPE
tech-c:         EMPN1-RIPE
status:         ASSIGNED PA
mnt-by:         INTERB-MNT
created:        2022-06-30T08:17:24Z
last-modified:  2022-06-30T08:17:24Z
source:         RIPE # Filtered

person:         EMMA MARIA PIA NERI
address:        NUOVA FARMACIA DEL PONTE SNC DELLE DR.SSE PASSALIA MARISTELLA E NERI EMMA PIA
address:        VIA TOMMASO EDISON 19
address:        23877 PADERNO D'ADDA
address:        Italy
nic-hdl:        EMPN1-RIPE
phone:          +3939510460
fax-no:         +3939510460
mnt-by:         INTERB-MNT
created:        2022-06-30T08:17:14Z
last-modified:  2022-06-30T08:17:14Z
source:         RIPE

% Information related to '5.98.0.0/15AS3269'

route:          5.98.0.0/15
descr:          INTERBUSINESS
origin:         AS3269
remarks:        ************************************************
remarks:        * Pay attention *
remarks:        * Any communication sent to email different *
remarks:        * from the following will be ignored! *
remarks:        * Any abuse reports, please send them to *
remarks:        * abuse@business.telecomitalia.it *
remarks:        ************************************************
mnt-by:         INTERB-MNT
created:        2012-06-20T09:25:24Z
last-modified:  2017-07-17T12:19:36Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.122 (SHETLAND)

",2022-06-30T08:17:24,2022-06-30T08:17:24
5.153.93.62,5.153.93.62,pulsant,GB,pulsant.com,ripencc,null,10,11,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.153.93.62 - 5.153.93.62'

% Abuse contact for '5.153.93.62 - 5.153.93.62' is 'abuse@pulsant.com'

inetnum:        5.153.93.62 - 5.153.93.62
netname:        pulsant
descr:          Internal infrastructure
country:        GB
admin-c:        LUMH-RIPE
tech-c:         LUMN-RIPE
status:         ASSIGNED PA
remarks:        INFRA-AW
mnt-by:         EDNET-RIPE-MNT
created:        2013-10-02T15:36:09Z
last-modified:  2013-10-02T15:36:09Z
source:         RIPE

role:           Pulsant Hostmaster
address:        Pulsant Limited
address:        Priors Way
address:        Maidenhead
address:        SL6 2HP
address:        UNITED KINGDOM
remarks:        trouble: For customer support please email support@pulsant.com
remarks:        trouble: or call +44 (0)345 1199 999
remarks:        trouble: For abuse reports please send to abuse@pulsant.com
remarks:        trouble: For peering requests please send to peering@pulsant.com
mnt-by:         MNT-PULSANT
admin-c:        SWR7-RIPE
tech-c:         SWR7-RIPE
nic-hdl:        LUMH-RIPE
created:        2004-08-16T14:25:22Z
last-modified:  2022-09-13T15:36:35Z
source:         RIPE # Filtered
abuse-mailbox:  abuse@pulsant.com

role:           Pulsant NOC
address:        Pulsant Limited
address:        Priors Way
address:        Maidenhead
address:        SL6 2HP
address:        UNITED KINGDOM
remarks:        trouble: For customer support please email support@pulsant.com
remarks:        trouble: or call +44 (0)345 1199 999
remarks:        trouble: For abuse reports please send to abuse@pulsant.com
remarks:        trouble: For peering requests please send to peering@pulsant.com
mnt-by:         EDNET-RIPE-MNT
admin-c:        ANDY6-RIPE
admin-c:        STEV2-RIPE
admin-c:        SWR7-RIPE
tech-c:         ANDY6-RIPE
tech-c:         STEV2-RIPE
tech-c:         SWR7-RIPE
nic-hdl:        LUMN-RIPE
created:        2004-08-16T14:57:51Z
last-modified:  2024-08-29T16:15:39Z
source:         RIPE # Filtered
abuse-mailbox:  abuse@pulsant.com

% Information related to '5.153.64.0/19AS12703'

route:          5.153.64.0/19
descr:          Pulsant (Scotland) Ltd
origin:         AS12703
mnt-by:         EDNET-RIPE-MNT
mnt-by:         MNT-PULSANT
created:        2012-07-19T14:53:39Z
last-modified:  2013-03-18T16:54:44Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122 (DEXTER)

",2013-10-02T15:36:09,2013-10-02T15:36:09
5.179.87.240,5.179.87.255,AARHUSTECH-NET-1,DK,globalconnect.dk,ripencc,null,12,12,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.179.87.240 - 5.179.87.255'

% Abuse contact for '5.179.87.240 - 5.179.87.255' is 'abuse@globalconnect.dk'

inetnum:        5.179.87.240 - 5.179.87.255
netname:        AARHUSTECH-NET-1
descr:          AARHUS TECH
country:        DK
admin-c:        LL5875-RIPE
tech-c:         LL5875-RIPE
status:         ASSIGNED PA
mnt-by:         nia-mnt
created:        2012-12-17T09:37:35Z
last-modified:  2012-12-17T09:37:35Z
source:         RIPE

person:         Lars Lisberg
address:        AARHUS TECH Halmstadgade 6 DK-8200 Aarhus N Denmark
phone:          +45 89 37 35 33
nic-hdl:        LL5875-RIPE
mnt-by:         nia-mnt
created:        2012-12-17T09:36:10Z
last-modified:  2012-12-17T09:36:10Z
source:         RIPE # Filtered

% Information related to '5.179.80.0/20AS31027'

route:          5.179.80.0/20
descr:          Nianet A/S
origin:         AS31027
mnt-by:         nia-mnt
created:        2012-08-08T13:45:51Z
last-modified:  2012-08-08T13:45:51Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122 (ABERDEEN)

",2012-12-17T09:37:35,2012-12-17T09:37:35
5.199.108.0,5.199.108.255,NET-5-199-108-0-24,GB,abuseradar.com,ripencc,1,13,13,13,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.199.108.0 - 5.199.108.255'

% Abuse contact for '5.199.108.0 - 5.199.108.255' is 'report@abuseradar.com'

inetnum:        5.199.108.0 - 5.199.108.255
netname:        NET-5-199-108-0-24
country:        GB
geofeed:        https://geofeed.chillishot.net/geofeed.txt
org:            ORG-PC1513-RIPE
admin-c:        PC21114-RIPE
tech-c:         PC21114-RIPE
abuse-c:        PC21114-RIPE
status:         ASSIGNED PA
remarks:        End User Organization
mnt-by:         netutils-mnt
mnt-by:         CHILLISHOT-MNT
created:        2026-02-02T10:56:35Z
last-modified:  2026-02-02T10:56:51Z
source:         RIPE

organisation:   ORG-PC1513-RIPE
org-name:       Private Customer
org-type:       OTHER
remarks:        End User Organization
address:        Private Residence
country:        GB
abuse-c:        PC21114-RIPE
mnt-ref:        netutils-mnt
mnt-by:         netutils-mnt
created:        2026-02-02T09:03:25Z
last-modified:  2026-02-02T09:03:25Z
source:         RIPE # Filtered

role:           Private Customer
address:        Private Residence
nic-hdl:        PC21114-RIPE
remarks:        End User Organization
abuse-mailbox:  report@abuseradar.com
mnt-by:         netutils-mnt
created:        2026-02-02T09:03:25Z
last-modified:  2026-02-02T09:03:25Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.122 (BUSA)

",2026-02-02T10:56:35,2026-02-02T10:56:51
8.243.196.134,8.243.196.135,8-243-196-134-31,EC,null,arin,2,,"14,15",16,,"
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       8.243.196.134 - 8.243.196.135
CIDR:           8.243.196.134/31
NetName:        8-243-196-134-31
NetHandle:      NET-8-243-196-134-1
Parent:         NET-8-243-192-0-20 (NET-8-243-192-0-1)
NetType:        Reassigned
OriginAS:       
Customer:       RADIO CARAVANA S.A. (C11492121)
RegDate:        2026-01-28
Updated:        2026-01-28
Ref:            https://rdap.arin.net/registry/ip/8.243.196.134


CustName:       RADIO CARAVANA S.A.
Address:        SEDE PRINCIPAL Latitud -2.14815 Longitud -79.908913
City:           GUAYAQUIL
StateProv:      GUAYAS
PostalCode:     090101
Country:        EC
RegDate:        2026-01-28
Updated:        2026-01-28
Ref:            https://rdap.arin.net/registry/entity/C11492121

OrgAbuseHandle: ABUSE9424-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +3143121683 
OrgAbuseEmail:  abuse@ciriontechnologies.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE9424-ARIN

OrgTechHandle: ARCIN6-ARIN
OrgTechName:   Arciniegas, Viviana 
OrgTechPhone:  +6119148  
OrgTechEmail:  viviana.arciniegasmartinez@ciriontechnologies.com
OrgTechRef:    https://rdap.arin.net/registry/entity/ARCIN6-ARIN

OrgTechHandle: DUQUE23-ARIN
OrgTechName:   Duque, Claudia 
OrgTechPhone:  +573143121683 
OrgTechEmail:  claudia.duque@ciriontechnologies.com
OrgTechRef:    https://rdap.arin.net/registry/entity/DUQUE23-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
",2026-01-28T00:00:00,2026-01-28T00:00:00

2. db-handles-details.csv.gz

This file contains detailed information on various network handles. It links a unique ID to a specific handle, name, country, address, and contact details such as email, phone, and fax.

FieldTypeDescriptionCan be empty?Example
idnumberThe unique identifier for the WHOIS handle.No1
handlestringThe WHOIS handle.NoEXAMPLE-HANDLE
namestringThe name associated with the WHOIS handle.NoJohn Doe
countrystringThe country associated with the WHOIS handle.YesUS
emailstringThe email address associated with the WHOIS handle.Yescontact@example.org
phonestringThe phone number associated with the WHOIS handle.Yes+1-800-555-0123
faxstringThe fax number associated with the WHOIS handle.Yes+1-800-555-0456
addressstringThe physical address associated with the WHOIS handle.Yes123 Example St, Example City, EX 12345, Country
date_updatedstringThe date when the WHOIS handle information was last updated.Yes2023-01-15T12:00:00Z
sourcestringThe source of the WHOIS handle information.YesARIN

I. Example Records

Example
id,handle,name,country,email,phone,fax,address,date_updated,source
8,tgh17-ripe,Telefonica Germany Hostmaster,,abuse.de@telefonica.com,+498924420,+49892442198224,"Telefonica Germany GmbH & Co. OHG, Georg-Brauchle-Ring 50, 80992 Muenchen, DE",2022-03-31T09:19:15,RIPE
14,arcin6-arin,"Arciniegas, Viviana",,viviana.arciniegasmartinez@ciriontechnologies.com,+6119148,,,,https://rdap.arin.net/registry/entity/ARCIN6-ARIN
6,slp147-ripe,STEFANO LA POSTA,,,+39650251,+39650526289,"PRESIDENZA DEL CONSIGLIO DEI MINISTRI, 00100 ROMA, Italy",2022-09-22T15:37:56,RIPE
10,lumh-ripe,Pulsant Hostmaster,,abuse@pulsant.com,,,"Pulsant Limited, Priors Way, Maidenhead, SL6 2HP, UNITED KINGDOM",2022-09-13T15:36:35,RIPE
5,bs5274-ripe,BEATRICE SALZANI,,,+39483429418,+39431520520,"AZALEA PROMOTION S R L, VIA FLLI ROSSELLI 1, 33170 PORDENONE, Italy",2011-03-23T18:07:24,RIPE
1,im574-ap,IP Manager,KR,hostmaster@nic.or.kr,+82-2-405-5118,,"Jeollanam-do Naju-si Jinheung-gil, South Korea",2024-02-29T01:18:34,APNIC
3,IRT-ENTITY,IRT-JPNIC-JP,,hostmaster@nic.ad.jp,+81-3-5297-2311,+81-3-5297-2312,"Uchikanda OS Bldg 4F, 2-12-6 Uchi-Kanda, Chiyoda-ku, Tokyo 101-0047, japan",2025-09-04T01:00,APNIC
2,IRT-ENTITY,IRT-KRNIC-KR,,irt@nic.or.kr,,,"9, Jinheung-gil, Naju-si, Jeollanam-do",2025-09-04T01:00:01,APNIC
4,bs5273-ripe,BEATRICE SALZANI,,,+39483429418,+39431520520,"AZALEA PROMOTION S R L, VIA FLLI ROSSELLI 1, 33170 PORDENONE, Italy",2011-03-23T18:07:24,RIPE
15,duque23-arin,"Duque, Claudia",,claudia.duque@ciriontechnologies.com,+573143121683,,,,https://rdap.arin.net/registry/entity/DUQUE23-ARIN
12,ll5875-ripe,Lars Lisberg,,,+45 89 37 35 33,,AARHUS TECH Halmstadgade 6 DK-8200 Aarhus N Denmark,2012-12-17T09:36:10,RIPE
13,pc21114-ripe,Private Customer,,report@abuseradar.com,,,Private Residence,2026-02-02T09:03:25,RIPE
9,empn1-ripe,EMMA MARIA PIA NERI,,,+3939510460,+3939510460,"NUOVA FARMACIA DEL PONTE SNC DELLE DR.SSE PASSALIA MARISTELLA E NERI EMMA PIA, VIA TOMMASO EDISON 19, 23877 PADERNO D'ADDA, Italy",2022-06-30T08:17:14,RIPE
16,abuse9424-arin,Abuse,,abuse@ciriontechnologies.com,+3143121683,,,,https://rdap.arin.net/registry/entity/ABUSE9424-ARIN
7,eb14721-ripe,Enrico Bohn,,,+4935165312010,,"Clicks Digital GmbH, An der Mauer 1, 01067 Dresden, DE",2024-03-13T09:08:06,RIPE
11,lumn-ripe,Pulsant NOC,,abuse@pulsant.com,,,"Pulsant Limited, Priors Way, Maidenhead, SL6 2HP, UNITED KINGDOM",2024-08-29T16:15:39,RIPE

3. db-org-details.csv.gz

This file provides detailed organization information. It links a unique ID to an organization's handle, name, type, address, country, and various contact details including email, phone, and fax.

FieldTypeDescriptionCan be empty?Example
idnumberThe unique identifier for the WHOIS organization.No1
handlestringThe handle of the WHOIS organization.YesEXAMPLE-ORG
namestringThe name of the WHOIS organization.NoExample Organization
typestringThe type of the WHOIS organization.Yesorganization
addressstringThe address of the WHOIS organization.Yes123 Example St, Example City, EX 12345, Country
countrystringThe country of the WHOIS organization.YesUS
emailstringThe email address of the WHOIS organization.Yescontact@example.org
phonestringThe phone number of the WHOIS organization.Yes+1-800-555-0123
faxstringThe fax number of the WHOIS organization.Yes+1-800-555-0456
date_updatedstringThe date when the WHOIS organization information was last updated.Yes2023-01-15T12:00:00Z
sourcestringThe source of the WHOIS organization information.YesARIN

I. Example Records

Example
id,handle,name,type,address,country,email,phone,fax,date_updated,source
1,org-pc1513-ripe,Private Customer,other,"Private Residence, United Kingdom",GB,,,,2026-02-02T09:03:25,ripencc
2,radio caravana s.a.,RADIO CARAVANA S.A.,,"SEDE PRINCIPAL Latitud -2.14815 Longitud -79.908913, GUAYAQUIL, GUAYAS, 090101, Ecuador",EC,,,,,arin

4. File Relationship Diagram

The diagram below illustrates the relationships between the various files included in the CSV database package. It shows how the main CSV file connects to reference tables for person and organization handle files, ensuring consistent and accurate data across for all the records.

Image

File Format & Encoding

All IP Whois CSV datasets are provided in UTF-8 encoding, comma-separated, and compressed with Gzip (.csv.gz). Each file includes a header row listing the field names for clarity and consistency.

Field values are unquoted by default, with quotes applied only in the following cases:

  • Line breaks within text fields.
  • Commas inside a value (e.g., addresses).
  • Lists of values (e.g., languages).
  • Spaces that may be auto-quoted by export tools.

MMDB Database Documentation


1. Overview

MMDB version of the database consists of two files: one MMDB file containing all the data (organization and contact handle details), a README file, and a checksum file, and one checksum file, all compressed together in a ZIP file for easy delivery.


2. Archive Content

After downloading and extracting the IP Whois MMDB database archive, you'll find the following files (with their types noted):

db-ip-whois.mmdb
db-ip-whois.mmdbdb-ip-whois.mmdb

Full WHOIS details for IP addresses: name, country, domain, RIR, contact IDs, and raw WHOIS record.

  • File Size: 22.00 MB
  • Entries: 11.2M
README.md
README.mdREADME.md

Documentation for dataset contents, schema, usage, and support.

  • File Size: 7.97 KB
db-ip-whois.md5
db-ip-whois.md5db-ip-whois.md5
  • File Size: 95 Bytes

Response Schema

This section describes the structure of the data returned from the IP Whois MMDB file. Each field is detailed with its type, meaning, and example values to help you interpret responses and integrate them into your applications.


1. db-ip-whois.mmdb

This file contains detailed WHOIS mappings for both IPv4 and IPv6 address ranges. Below is an example of the structure you'll find in the response.


2. Field Reference

The following reference lists all fields available in the MMDB response. Each entry includes the field path, its description, data type, and example value to help you understand how to parse and integrate the data.

Showing 7 of 53
Select a field to view details

I. Example Records

Example
{
  "whois": {
    "abuse_handles": [],
    "admin_handles": [
      {
        "address": "Jeollanam-do Naju-si Jinheung-gil, South Korea",
        "country": "KR",
        "date_updated": "2024-02-29T01:18:34",
        "email": "hostmaster@nic.or.kr",
        "fax": "",
        "handle": "im574-ap",
        "name": "IP Manager",
        "phone": "+82-2-405-5118",
        "source": "APNIC"
      }
    ],
    "country": "KR",
    "date_created": "null",
    "date_updated": "2019-05-15T00:10:43",
    "domain": "nic.or.kr",
    "irt_handles": [
      {
        "address": "9, Jinheung-gil, Naju-si, Jeollanam-do",
        "country": "",
        "date_updated": "2025-09-04T01:00:01",
        "email": "irt@nic.or.kr",
        "fax": "",
        "handle": "IRT-ENTITY",
        "name": "IRT-KRNIC-KR",
        "phone": "",
        "source": "APNIC"
      }
    ],
    "name": "KISANET",
    "organization": {},
    "raw_whois": "% [whois.apnic.net]\n% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html\n\n% Information related to '1.18.136.0 - 1.19.255.255'\n\n% Abuse contact for '1.18.136.0 - 1.19.255.255' is 'irt@nic.or.kr'\n\ninetnum:        1.18.136.0 - 1.19.255.255\nnetname:        KISANET\ndescr:          Korea Internet Security Agency\ncountry:        KR\nadmin-c:        IM574-AP\ntech-c:         IM574-AP\nstatus:         ALLOCATED PORTABLE\nmnt-by:         MNT-KRNIC-AP\nmnt-irt:        IRT-KRNIC-KR\nlast-modified:  2019-05-15T00:10:43Z\nsource:         APNIC\n\nirt:            IRT-KRNIC-KR\naddress:        9, Jinheung-gil, Naju-si, Jeollanam-do\ne-mail:         irt@nic.or.kr\nabuse-mailbox:  irt@nic.or.kr\nadmin-c:        IM574-AP\ntech-c:         IM574-AP\nauth:           # Filtered\nremarks:        irt@nic.or.kr was validated on 2020-04-09\nmnt-by:         MNT-KRNIC-AP\nlast-modified:  2025-09-04T01:00:01Z\nsource:         APNIC\n\nperson:         IP Manager\naddress:        Jeollanam-do Naju-si Jinheung-gil\ncountry:        KR\nphone:          +82-2-405-5118\ne-mail:         hostmaster@nic.or.kr\nnic-hdl:        IM574-AP\nmnt-by:         MNT-KRNIC-AP\nlast-modified:  2024-02-29T01:18:34Z\nsource:         APNIC\n\n% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-JP1)",
    "rir": "apnic",
    "tech_handles": [
      {
        "address": "Jeollanam-do Naju-si Jinheung-gil, South Korea",
        "country": "KR",
        "date_updated": "2024-02-29T01:18:34",
        "email": "hostmaster@nic.or.kr",
        "fax": "",
        "handle": "im574-ap",
        "name": "IP Manager",
        "phone": "+82-2-405-5118",
        "source": "APNIC"
      }
    ]
  }
}

Database Integrity & Authenticity Verification

There are two methods of verifying the integrity and authenticity of our Database:


1. Using the Signature File (Recommended)

IPGeolocation.io signs every database release to ensure its authenticity and integrity. This allows customers to verify that a downloaded IP Whois database file originates directly from IPGeolocation.io and has not been altered, corrupted, or tampered with during transfer or storage.

Each database update includes a corresponding signature file, generated using our private signing key. Customers can validate the database using the provided public verification key. To verify a database file, you need:

  1. Database file (the downloaded archive)
  2. Signature file (the matching signature for that archive)
  3. Public key (public-key.pem)

These files are available via official IPGeolocation.io download endpoints and are also shared in database update notifications.


2. Using the Checksum File (Legacy)

Each database archive includes a checksum.txt file containing the SHA-256 checksums for the files packaged in the archive. You can use this file to validate that the extracted contents are complete and unchanged.


Data Format & Constraints

  • All fields defined in the schema are always present in the IP Whois MMDB response.
  • Fields may contain empty strings (""), but never null, so null checks are not required.
  • Place names such as countries, states, districts, and cities are available in multiple translations.
  • All text values are encoded in UTF-8.
  • Field names and response structure remain stable across updates for backward compatibility.

Database Updates & Delivery

When you subscribe to our IP Whois database, we'll send you static download links. These links never change, so you can use them both for your initial download and for all future updates. You will receive:

  1. Database Archive URL : downloads the latest release of your subscribed database (CSV, MMDB or requested formats).
  2. Signature File URL : downloads the matching signature file for the latest release (used for authenticity verification).
  3. Public Key URL : downloads the public verification key (used with the signature file).
  4. Status Endpoint URL : returns the database's most recent update timestamp.

Our databases are refreshed daily and weekly, ensuring you always have access to the most current data. Each time your subscribed dataset is updated, you'll also receive an email notification so you don't miss a release.

For automated workflows, you can check our status endpoint to see the last update timestamp. When the date changes, simply re-fetch the archive using your static download URL to pull the latest version into your system.

Subscribe to Our Newsletter

Get the latest in geolocation tech, straight to your inbox.