IP Whois Database
Overview
Our IP WHOIS Database delivers clean, consistently parsed ownership data for any IPv4/IPv6 range, so you can verify who controls an address block, identify the right contacts, and act with confidence. Use it to harden security, speed up network troubleshooting, validate IP ownership during onboarding or investigations, and enrich tooling with reliable WHOIS insights across the global internet.
Raw WHOIS text is preserved for auditability. Available in CSV, JSON and MMDB formats. Below, you'll find full documentation of the archive contents, schema definitions, file specifications, and integration notes to help you get up and running quickly.
Available Database Formats
CSV Database Documentation
1. Overview
The CSV version is a set of Gzip-compressed CSV files containing IP ranges and detailed IP WHOIS information. These files are designed for bulk imports and integration into relational databases.
2. Archive Content
After downloading and extracting the IP Whois CSV database archive, you'll find the following files (with their types noted):
IP range links to WHOIS details: name, country, domain, RIR, and raw WHOIS record.
- File Size: 1.13 GB
- Entries: 11.2M
- Fields: 14
Links an organization ID to its handle, name, type, and contact details.
- File Size: 93.02 MB
- Entries: 2.7M
- Fields: 11
Links the network handle ID to its name, country, address, and contact details.
- File Size: 3.81 MB
- Entries: 104.6K
- Fields: 10
Documentation for dataset contents, schema, usage, and support.
- File Size: 7.97 KB
- File Size: 213 Bytes
Schema
This section describes the schema of each file included in the IP Whois Database archive. For every file, you'll find its purpose, field definitions, and examples to help with integration.
1. db-ip-whois.csv.gz
This file contains detailed WHOIS information for IP address ranges. It maps each IP block to the name, country, domain, and RIR, as well as various contact handle IDs and the full raw_whois record.
| Field | Type | Description | Can be empty? | Example |
|---|---|---|---|---|
| start_ip | string | The starting IP address of the range in IPv4 or IPv6 format. | No | 192.168.0.1 |
| end_ip | string | The ending IP address of the range in IPv4 or IPv6 format. | No | 192.168.0.255 |
| name | string | The name associated with the IP range in the WHOIS record. | Yes | Example Network |
| country | string | The country code associated with the IP range in the WHOIS record. | Yes | US |
| domain | string | The domain name associated with the IP range in the WHOIS record. | Yes | example.com |
| rir | string | The Regional Internet Registry (RIR) that manages the IP range. | Yes | ARIN |
| org_id | number | The unique identifier for the organization associated with the IP range. | Yes | 1 |
| admin_handles_id | number | The unique identifier for the administrative contact handle associated with the IP range. | Yes | 1 |
| tech_handles_id | number | The unique identifier for the technical contact handle associated with the IP range. | Yes | 1 |
| abuse_handles_id | number | The unique identifier for the abuse contact handle associated with the IP range. | Yes | 1 |
| irt_handles_id | number | The unique identifier for the Incident Response Team (IRT) contact handle associated, with the IP range. | Yes | 1 |
| raw_whois | string | The raw WHOIS record data associated with the IP range. | Yes | Raw WHOIS data string... |
| date_created | string | The date when the WHOIS record for the IP range was created. | Yes | 2020-01-01T12:00:00Z |
| date_updated | string | The date when the WHOIS record for the IP range was last updated. | Yes | 2023-01-15T12:00:00Z |
I. Example Records
start_ip,end_ip,name,country,domain,rir,org_id,admin_handles_id,tech_handles_id,abuse_handles_id,irt_handles_id,raw_whois,date_created,date_updated
2.57.104.72,2.57.104.79,ANX-NET-2571047229,AT,anexia.at,ripencc,null,1,1,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the -B flag.
% Information related to '2.57.104.72 - 2.57.104.79'
% Abuse contact for '2.57.104.72 - 2.57.104.79' is 'abuse@anexia.at'
inetnum: 2.57.104.72 - 2.57.104.79
netname: ANX-NET-2571047229
descr: powered by ANX
country: AT
admin-c: ANX-RIPE
tech-c: ANX-RIPE
mnt-by: ANEXIA-MNT
created: 2021-10-21T08:51:54Z
last-modified: 2021-10-21T08:51:54Z
source: RIPE
status: ASSIGNED PA
role: ANX Group RIPE NCC Role Handle
address: Feldkirchner Str. 140
address: 9020 Klagenfurt
address: Austria
address:
remarks: For non-technical details see: https://www.anexia.com
remarks: For technical contact details see: https://as47147.peeringdb.com
remarks: For peering details/requests see: https://peering.anexia.com
remarks:
remarks: All RIPE database entries are created automatically.
remarks:
abuse-mailbox: abuse@anexia.at
nic-hdl: ANX-RIPE
mnt-by: ANEXIA-MNT
created: 2019-04-10T08:24:01Z
last-modified: 2023-02-13T21:42:22Z
source: RIPE # Filtered
tech-c: ANXT-RIPE
% Information related to '2.57.104.0/24AS42473'
route: 2.57.104.0/24
descr: powered by ANX
origin: AS42473
mnt-by: ANEXIA-MNT
created: 2020-11-25T11:34:02Z
last-modified: 2020-11-25T11:34:02Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (SHETLAND)
",2021-10-21T08:51:54,2021-10-21T08:51:54
2.106.104.16,2.106.104.23,BESTSELLER-A-S-NET,DK,abuse.mail.dk,ripencc,null,2,2,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the -B flag.
% Information related to '2.106.104.16 - 2.106.104.23'
% Abuse contact for '2.106.104.16 - 2.106.104.23' is 'postmaster@abuse.mail.dk'
inetnum: 2.106.104.16 - 2.106.104.23
netname: BESTSELLER-A-S-NET
descr: Bestseller A-S
descr: Fredskovvej,5
descr: 7330 Brande
country: DK
remarks: +---------------------------------------+
remarks: | For abuse and security issues please |
remarks: | see http://postmaster.tdc.dk or |
remarks: | contact postmaster@abuse.mail.dk |
remarks: +---------------------------------------+
admin-c: JNC30-RIPE
tech-c: JNC30-RIPE
status: ASSIGNED PA
mnt-by: TDK-MNT
created: 2019-09-17T12:26:07Z
last-modified: 2019-09-17T12:26:07Z
source: RIPE
person: Jacob Noergaard Christensen
address: Bestseller A-S
address: Fredskovvej,5
address: 7330 Brande
address: DK
phone: +45 99424512
nic-hdl: JNC30-RIPE
mnt-by: TDK-MNT
created: 2019-09-17T12:26:07Z
last-modified: 2019-09-17T12:26:07Z
source: RIPE
% Information related to '2.104.0.0/14AS3292'
route: 2.104.0.0/14
descr: TDC
origin: AS3292
remarks: +---------------------------------------+
remarks: | For abuse and security issues please |
remarks: | see http://postmaster.tdc.dk or |
remarks: | contact postmaster@abuse.mail.dk |
remarks: +---------------------------------------+
mnt-by: AS3292-MNT
created: 2023-10-19T13:06:17Z
last-modified: 2023-10-19T13:06:17Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.121.2 (ABERDEEN)
",2019-09-17T12:26:07,2019-09-17T12:26:07
2.113.95.0,2.113.95.255,NFV,IT,business.telecomitalia.it,ripencc,null,3,3,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the -B flag.
% Information related to '2.113.95.0 - 2.113.95.255'
% Abuse contact for '2.113.95.0 - 2.113.95.255' is 'abuse@business.telecomitalia.it'
inetnum: 2.113.95.0 - 2.113.95.255
netname: NFV
descr: NFV Platform
descr: Telecom Italia SPA
country: IT
admin-c: INAS1-RIPE
tech-c: INAS1-RIPE
status: ASSIGNED PA
mnt-by: INTERB-MNT
created: 2015-09-09T11:41:16Z
last-modified: 2020-11-05T17:37:33Z
source: RIPE # Filtered
role: Interbusiness Network Administration Staff
address: Telecom Italia S.p.A
address: Italy
admin-c: ESB35-RIPE
tech-c: ESB35-RIPE
tech-c: ASB144-RIPE
tech-c: ABT49-RIPE
nic-hdl: INAS1-RIPE
abuse-mailbox: abuse@business.telecomitalia.it
mnt-by: INTERB-MNT
created: 2002-08-01T12:20:54Z
last-modified: 2024-01-16T08:51:36Z
source: RIPE # Filtered
% Information related to '2.112.0.0/15AS3269'
route: 2.112.0.0/15
descr: INTERBUSINESS
origin: AS3269
remarks: ************************************************
remarks: * Pay attention *
remarks: * Any communication sent to email different *
remarks: * from the following will be ignored! *
remarks: * Any abuse reports, please send them to *
remarks: * abuse@business.telecomitalia.it *
remarks: ************************************************
mnt-by: INTERB-MNT
created: 2010-04-30T09:24:32Z
last-modified: 2017-07-17T12:18:11Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.121.2 (SHETLAND)
",2015-09-09T11:41:16,2020-11-05T17:37:33
2.114.160.112,2.114.160.115,AUTOFORNITUREPULIMENIDIPULIMENIANTONIOECSAS,IT,business.telecomitalia.it,ripencc,null,4,4,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the -B flag.
% Information related to '2.114.160.112 - 2.114.160.115'
% Abuse contact for '2.114.160.112 - 2.114.160.115' is 'abuse@business.telecomitalia.it'
inetnum: 2.114.160.112 - 2.114.160.115
netname: AUTOFORNITUREPULIMENIDIPULIMENIANTONIOECSAS
descr: AUTOFORNITURE PULIMENI DI PULIMENI ANTONIO E C. S.A.S.
country: IT
admin-c: AP32138-RIPE
tech-c: AP32138-RIPE
status: ASSIGNED PA
mnt-by: INTERB-MNT
created: 2021-10-25T06:53:52Z
last-modified: 2021-10-25T06:53:52Z
source: RIPE # Filtered
person: ANTONIO PULIMENI
address: AUTOFORNITURE PULIMENI DI PULIMENI ANTONIO E C. S.A.S.
address: via NAZIONALE 111 95
address: 89013 GIOIA TAURO
address: Italy
nic-hdl: AP32138-RIPE
phone: +3996657011
fax-no: +3996657011
mnt-by: INTERB-MNT
created: 2021-10-25T06:53:51Z
last-modified: 2021-10-25T06:53:51Z
source: RIPE
% Information related to '2.114.0.0/15AS3269'
route: 2.114.0.0/15
descr: INTERBUSINESS
origin: AS3269
remarks: ************************************************
remarks: * Pay attention *
remarks: * Any communication sent to email different *
remarks: * from the following will be ignored! *
remarks: * Any abuse reports, please send them to *
remarks: * abuse@business.telecomitalia.it *
remarks: ************************************************
mnt-by: INTERB-MNT
created: 2010-04-30T09:25:19Z
last-modified: 2017-07-17T12:18:26Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.121.2 (SHETLAND)
",2021-10-25T06:53:52,2021-10-25T06:53:52
2.119.105.112,2.119.105.115,ITALMECCANICASRL,IT,business.telecomitalia.it,ripencc,null,5,5,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the -B flag.
% Information related to '2.119.105.112 - 2.119.105.115'
% Abuse contact for '2.119.105.112 - 2.119.105.115' is 'abuse@business.telecomitalia.it'
inetnum: 2.119.105.112 - 2.119.105.115
netname: ITALMECCANICASRL
descr: ITALMECCANICA SRL
country: IT
admin-c: OA3071-RIPE
tech-c: OA3071-RIPE
status: ASSIGNED PA
mnt-by: INTERB-MNT
created: 2021-02-10T15:32:26Z
last-modified: 2021-02-10T15:32:26Z
source: RIPE # Filtered
person: OTTAVIO AZZURRI
address: ITALMECCANICA SRL
address: VIA VINCENZO BELLINI 17/B
address: 50065 PONTASSIEVE
address: Italy
nic-hdl: OA3071-RIPE
phone: +39558309590
fax-no: +39558309590
mnt-by: INTERB-MNT
created: 2021-02-10T15:32:25Z
last-modified: 2021-02-10T15:32:25Z
source: RIPE
% Information related to '2.118.0.0/15AS3269'
route: 2.118.0.0/15
descr: INTERBUSINESS
origin: AS3269
remarks: ************************************************
remarks: * Pay attention *
remarks: * Any communication sent to email different *
remarks: * from the following will be ignored! *
remarks: * Any abuse reports, please send them to *
remarks: * abuse@business.telecomitalia.it *
remarks: ************************************************
mnt-by: INTERB-MNT
created: 2010-08-05T08:21:53Z
last-modified: 2017-07-17T12:18:58Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.121.2 (DEXTER)
",2021-02-10T15:32:26,2021-02-10T15:32:26
2.133.92.208,2.133.92.215,RG_BRANDS,KZ,telecom.kz,ripencc,null,6,6,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the -B flag.
% Information related to '2.133.92.208 - 2.133.92.215'
% Abuse contact for '2.133.92.208 - 2.133.92.215' is 'abuse@telecom.kz'
inetnum: 2.133.92.208 - 2.133.92.215
netname: RG_BRANDS
descr: The company with limited liability RG BRANDS KAZ
descr: t. Almaty, Raimbek, str. 212 B
country: KZ
admin-c: AI4553-RIPE
tech-c: AI4553-RIPE
status: ASSIGNED PA
mnt-by: KNIC-MNT
created: 2017-11-14T11:29:25Z
last-modified: 2017-11-14T11:29:25Z
source: RIPE
person: Anton Ikonikov
address: Almaty, Raimbek str, 212 B
address: KZ
phone: +7 705 800 83 41
nic-hdl: AI4553-RIPE
mnt-by: KNIC-MNT
created: 2017-11-14T11:29:25Z
last-modified: 2017-11-14T11:29:25Z
source: RIPE # Filtered
% Information related to '2.133.64.0/18AS9198'
route: 2.133.64.0/18
descr: Kazakhtelecom Data Network Administration
origin: AS9198
mnt-by: KNIC-MNT
created: 2011-12-06T11:03:09Z
last-modified: 2011-12-06T11:03:09Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (DEXTER)
",2017-11-14T11:29:25,2017-11-14T11:29:25
5.96.67.208,5.96.67.215,GEFINSRL,IT,business.telecomitalia.it,ripencc,null,7,7,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the -B flag.
% Information related to '5.96.67.208 - 5.96.67.215'
% Abuse contact for '5.96.67.208 - 5.96.67.215' is 'abuse@business.telecomitalia.it'
inetnum: 5.96.67.208 - 5.96.67.215
netname: GEFINSRL
descr: GEFIN S.R.L.
country: IT
admin-c: RZ3898-RIPE
tech-c: RZ3898-RIPE
status: ASSIGNED PA
mnt-by: INTERB-MNT
created: 2024-05-20T14:59:47Z
last-modified: 2024-05-20T14:59:47Z
source: RIPE # Filtered
person: ROBERTO ZIERO
address: GEFIN S.R.L.
address: VIA DEL LAVORO 6
address: 35014 FONTANIVA
address: Italy
nic-hdl: RZ3898-RIPE
phone: +39499415211
fax-no: +39499415211
mnt-by: INTERB-MNT
created: 2024-05-20T14:59:47Z
last-modified: 2024-05-20T14:59:47Z
source: RIPE
% Information related to '5.96.0.0/15AS3269'
route: 5.96.0.0/15
descr: INTERBUSINESS
origin: AS3269
remarks: ************************************************
remarks: * Pay attention *
remarks: * Any communication sent to email different *
remarks: * from the following will be ignored! *
remarks: * Any abuse reports, please send them to *
remarks: * abuse@business.telecomitalia.it *
remarks: ************************************************
mnt-by: INTERB-MNT
created: 2012-06-20T09:30:01Z
last-modified: 2017-07-17T12:19:18Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.121.2 (SHETLAND)
",2024-05-20T14:59:47,2024-05-20T14:59:47
5.190.92.0,5.190.92.255,ORG-HA764-RIPE,IR,tci.ir,ripencc,null,8,9,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the -B flag.
% Information related to '5.190.92.0 - 5.190.92.255'
% Abuse contact for '5.190.92.0 - 5.190.92.255' is 'LIRadmin@tci.ir'
inetnum: 5.190.92.0 - 5.190.92.255
descr: Ertebatat Dorbord Fars ( Khafr 1983)
netname: ORG-HA764-RIPE
country: IR
admin-c: PT8452-RIPE
tech-c: HB6934-RIPE
status: ASSIGNED PA
mnt-by: MNT-TCF
created: 2019-01-08T06:26:44Z
last-modified: 2019-01-08T06:26:44Z
source: RIPE
person: Hamid Bagheri
address: NO. 1
address: The boundary between alleyways 4 and 2
address: West Qudosi Blvd.
address: Shiraz
address: Fars
address: Iran
phone: +989399458985
nic-hdl: HB6934-RIPE
mnt-by: MNT-TCF
created: 2019-01-08T05:34:59Z
last-modified: 2019-01-08T05:34:59Z
source: RIPE
person: Parisa Tavakoli
address: 7183893995,Ghasredasht, Shiraz, IR.
phone: +987136112145
nic-hdl: PT8452-RIPE
mnt-by: MNT-TCF
created: 2018-06-26T08:12:11Z
last-modified: 2018-06-26T08:12:11Z
source: RIPE
% Information related to '5.190.0.0/17AS58224'
route: 5.190.0.0/17
origin: AS58224
mnt-by: TCI-RIPE-MNT
created: 2023-10-21T16:17:09Z
last-modified: 2023-10-21T16:17:09Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (BUSA)
",2019-01-08T06:26:44,2019-01-08T06:26:44
5.254.68.160,5.254.68.191,ZetNet,DE,zetservers.com,ripencc,1,10,10,11,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the -B flag.
% Information related to '5.254.68.160 - 5.254.68.191'
% Abuse contact for '5.254.68.160 - 5.254.68.191' is 'abuse@zetservers.com'
inetnum: 5.254.68.160 - 5.254.68.191
netname: ZetNet
org: ORG-OA1221-RIPE
country: DE
admin-c: MM56964-RIPE
tech-c: MM56964-RIPE
abuse-c: ACRO49963-RIPE
status: ASSIGNED PA
mnt-by: VOXILITY-MNT
created: 2023-06-21T10:51:42Z
last-modified: 2023-08-14T13:03:37Z
source: RIPE
organisation: ORG-OA1221-RIPE
org-name: ZetNet
org-type: OTHER
address: str.I.Jianu, nr.34, Lipova, jud.Arad
abuse-c: ACRO49963-RIPE
mnt-ref: VOXILITY-MNT
mnt-by: VOXILITY-MNT
created: 2022-09-27T07:58:04Z
last-modified: 2023-08-14T12:50:16Z
source: RIPE # Filtered
person: Tolgyi Alexandru Adalbert
address: str.I.Jianu, nr.34, Lipova, jud.Arad
phone: +40721524247
nic-hdl: MM56964-RIPE
mnt-by: VOXILITY-MNT
created: 2022-09-27T07:56:43Z
last-modified: 2023-08-14T12:48:53Z
source: RIPE
% Information related to '5.254.68.0/24AS3223'
route: 5.254.68.0/24
origin: AS3223
mnt-by: VOXILITY-MNT
created: 2016-05-06T14:59:16Z
last-modified: 2016-05-06T14:59:16Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (ABERDEEN)
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the ""-B"" flag.
% Information related to 'ACRO49963-RIPE'
role: Abuse contact role object
address: str.I.Jianu, nr.34, Lipova, jud.Arad
abuse-mailbox: abuse@zetservers.com
nic-hdl: ACRO49963-RIPE
mnt-by: VOXILITY-MNT
created: 2022-09-27T07:57:33Z
last-modified: 2023-08-14T12:49:21Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.121.2 (ABERDEEN)
",2023-06-21T10:51:42,2023-08-14T13:03:37
12.8.193.56,12.8.193.63,MERRITT-32-193-56,US,null,arin,2,,12,12,,"
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 12.8.193.56 - 12.8.193.63
CIDR: 12.8.193.56/29
NetName: MERRITT-32-193-56
NetHandle: NET-12-8-193-56-1
Parent: ATT (NET-12-0-0-0-1)
NetType: Reassigned
OriginAS:
Organization: MERRITT ISLAND AIR HEAT, IN (MIAHI-2)
RegDate: 2016-11-17
Updated: 2016-11-17
Ref: https://rdap.arin.net/registry/ip/12.8.193.56
OrgName: MERRITT ISLAND AIR HEAT, IN
OrgId: MIAHI-2
Address: 625 CYPRESS DR
City: MER ISL
StateProv: FL
PostalCode: 32952
Country: US
RegDate: 2016-11-17
Updated: 2016-11-17
Ref: https://rdap.arin.net/registry/entity/MIAHI-2
OrgTechHandle: DRABY2-ARIN
OrgTechName: DRABYK, ROGER
OrgTechPhone: +1-321-452-5665
OrgTechEmail: bdrabyk@yahoo.com
OrgTechRef: https://rdap.arin.net/registry/entity/DRABY2-ARIN
OrgAbuseHandle: DRABY2-ARIN
OrgAbuseName: DRABYK, ROGER
OrgAbusePhone: +1-321-452-5665
OrgAbuseEmail: bdrabyk@yahoo.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/DRABY2-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
",2016-11-17T00:00:00,2016-11-17T00:00:002. db-handles-details.csv.gz
This file contains detailed information on various network handles. It links a unique ID to a specific handle, name, country, address, and contact details such as email, phone, and fax.
| Field | Type | Description | Can be empty? | Example |
|---|---|---|---|---|
| id | number | The unique identifier for the WHOIS handle. | No | 1 |
| handle | string | The WHOIS handle. | No | EXAMPLE-HANDLE |
| name | string | The name associated with the WHOIS handle. | No | John Doe |
| country | string | The country associated with the WHOIS handle. | Yes | US |
| string | The email address associated with the WHOIS handle. | Yes | contact@example.org | |
| phone | string | The phone number associated with the WHOIS handle. | Yes | +1-800-555-0123 |
| fax | string | The fax number associated with the WHOIS handle. | Yes | +1-800-555-0456 |
| address | string | The physical address associated with the WHOIS handle. | Yes | 123 Example St, Example City, EX 12345, Country |
| date_updated | string | The date when the WHOIS handle information was last updated. | Yes | 2023-01-15T12:00:00Z |
| source | string | The source of the WHOIS handle information. | Yes | ARIN |
I. Example Records
id,handle,name,country,email,phone,fax,address,date_updated,source
8,pt8452-ripe,Parisa Tavakoli,,,+987136112145,,"7183893995, Ghasredasht, Shiraz, IR.",2018-06-26T08:12:11,RIPE
5,oa3071-ripe,OTTAVIO AZZURRI,,,+39558309590,+39558309590,"ITALMECCANICA SRL, VIA VINCENZO BELLINI 17/B, 50065 PONTASSIEVE, Italy",2021-02-10T15:32:25,RIPE
11,acro49963-ripe,Abuse contact role object,,abuse@zetservers.com,,,"str.I.Jianu, nr.34, Lipova, jud.Arad",2023-08-14T12:49:21,RIPE
10,mm56964-ripe,Tolgyi Alexandru Adalbert,,,+40721524247,,"str.I.Jianu, nr.34, Lipova, jud.Arad",2023-08-14T12:48:53,RIPE
7,rz3898-ripe,ROBERTO ZIERO,,,+39499415211,+39499415211,"GEFIN S.R.L., VIA DEL LAVORO 6, 35014 FONTANIVA, Italy",2024-05-20T14:59:47,RIPE
12,draby2-arin,"DRABYK, ROGER",,bdrabyk@yahoo.com,+1-321-452-5665,,,,https://rdap.arin.net/registry/entity/DRABY2-ARIN
3,inas1-ripe,Interbusiness Network Administration Staff,,abuse@business.telecomitalia.it,,,"Telecom Italia S.p.A, Italy",2024-01-16T08:51:36,RIPE
2,jnc30-ripe,Jacob Noergaard Christensen,,,+45 99424512,,"Bestseller A-S, Fredskovvej, 5, 7330 Brande, DK",2019-09-17T12:26:07,RIPE
9,hb6934-ripe,Hamid Bagheri,,,+989399458985,,"NO. 1, The boundary between alleyways 4 and 2, West Qudosi Blvd., Shiraz, Fars, Iran",2019-01-08T05:34:59,RIPE
4,ap32138-ripe,ANTONIO PULIMENI,,,+3996657011,+3996657011,"AUTOFORNITURE PULIMENI DI PULIMENI ANTONIO E C. S.A.S., via NAZIONALE 111 95, 89013 GIOIA TAURO, Italy",2021-10-25T06:53:51,RIPE
1,anx-ripe,ANX Group RIPE NCC Role Handle,,abuse@anexia.at,,,"Feldkirchner Str. 140, 9020 Klagenfurt, Austria",2023-02-13T21:42:22,RIPE
6,ai4553-ripe,Anton Ikonikov,,,+7 705 800 83 41,,"Almaty, Raimbek str, 212 B, KZ",2017-11-14T11:29:25,RIPE3. db-org-details.csv.gz
This file provides detailed organization information. It links a unique ID to an organization's handle, name, type, address, country, and various contact details including email, phone, and fax.
| Field | Type | Description | Can be empty? | Example |
|---|---|---|---|---|
| id | number | The unique identifier for the WHOIS organization. | No | 1 |
| handle | string | The handle of the WHOIS organization. | Yes | EXAMPLE-ORG |
| name | string | The name of the WHOIS organization. | No | Example Organization |
| type | string | The type of the WHOIS organization. | Yes | organization |
| address | string | The address of the WHOIS organization. | Yes | 123 Example St, Example City, EX 12345, Country |
| country | string | The country of the WHOIS organization. | Yes | US |
| string | The email address of the WHOIS organization. | Yes | contact@example.org | |
| phone | string | The phone number of the WHOIS organization. | Yes | +1-800-555-0123 |
| fax | string | The fax number of the WHOIS organization. | Yes | +1-800-555-0456 |
| date_updated | string | The date when the WHOIS organization information was last updated. | Yes | 2023-01-15T12:00:00Z |
| source | string | The source of the WHOIS organization information. | Yes | ARIN |
I. Example Records
id,handle,name,type,address,country,email,phone,fax,date_updated,source
2,miahi-2,"MERRITT ISLAND AIR HEAT, IN",,"625 CYPRESS DR, MER ISL, FL, 32952, United States",US,,,,,arin
1,org-oa1221-ripe,ZetNet,other,"str.I.Jianu, nr.34, Lipova, jud.Arad",,,,,2023-08-14T12:50:16,ripencc4. File Relationship Diagram
The diagram below illustrates the relationships between the various files included in the CSV database package. It shows how the main CSV file connects to reference tables for person and organization handle files, ensuring consistent and accurate data across for all the records.
File Format & Encoding
All IP Whois CSV datasets are provided in UTF-8 encoding, comma-separated, and compressed with Gzip (.csv.gz). Each file includes a header row listing the field names for clarity and consistency.
Field values are unquoted by default, with quotes applied only in the following cases:
- Line breaks within text fields.
- Commas inside a value (e.g., addresses).
- Lists of values (e.g., languages).
- Spaces that may be auto-quoted by export tools.
MMDB Database Documentation
1. Overview
MMDB version of the database consists of two files: one MMDB file containing all the data (organization and contact handle details), a README file, and a checksum file, and one checksum file, all compressed together in a ZIP file for easy delivery.
2. Archive Content
After downloading and extracting the IP Whois MMDB database archive, you'll find the following files (with their types noted):
Full WHOIS details for IP addresses: name, country, domain, RIR, contact IDs, and raw WHOIS record.
- File Size: 22.00 MB
- Entries: 11.2M
Documentation for dataset contents, schema, usage, and support.
- File Size: 7.97 KB
- File Size: 95 Bytes
Response Schema
This section describes the structure of the data returned from the IP Whois MMDB file. Each field is detailed with its type, meaning, and example values to help you interpret responses and integrate them into your applications.
1. db-ip-whois.mmdb
This file contains detailed WHOIS mappings for both IPv4 and IPv6 address ranges. Below is an example of the structure you'll find in the response.
2. Field Reference
The following reference lists all fields available in the MMDB response. Each entry includes the field path, its description, data type, and example value to help you understand how to parse and integrate the data.
I. Example Records
{
"whois": {
"abuse_handles": [],
"admin_handles": [
{
"address": "Feldkirchner Str. 140, 9020 Klagenfurt, Austria",
"country": "",
"date_updated": "2023-02-13T21:42:22",
"email": "abuse@anexia.at",
"fax": "",
"handle": "anx-ripe",
"name": "ANX Group RIPE NCC Role Handle",
"phone": "",
"source": "RIPE"
}
],
"country": "AT",
"date_created": "2021-10-21T08:51:54",
"date_updated": "2021-10-21T08:51:54",
"domain": "anexia.at",
"irt_handles": [],
"name": "ANX-NET-2571047229",
"organization": {},
"raw_whois": "% This is the RIPE Database query service.\n% The objects are in RPSL format.\n%\n% The RIPE Database is subject to Terms and Conditions.\n% See https://docs.db.ripe.net/terms-conditions.html\n\n% Note: this output has been filtered.\n% To receive output for a database update, use the -B flag.\n\n% Information related to '2.57.104.72 - 2.57.104.79'\n\n% Abuse contact for '2.57.104.72 - 2.57.104.79' is 'abuse@anexia.at'\n\ninetnum: 2.57.104.72 - 2.57.104.79\nnetname: ANX-NET-2571047229\ndescr: powered by ANX\ncountry: AT\nadmin-c: ANX-RIPE\ntech-c: ANX-RIPE\nmnt-by: ANEXIA-MNT\ncreated: 2021-10-21T08:51:54Z\nlast-modified: 2021-10-21T08:51:54Z\nsource: RIPE\nstatus: ASSIGNED PA\n\nrole: ANX Group RIPE NCC Role Handle\naddress: Feldkirchner Str. 140\naddress: 9020 Klagenfurt\naddress: Austria\naddress:\nremarks: For non-technical details see: https://www.anexia.com\nremarks: For technical contact details see: https://as47147.peeringdb.com\nremarks: For peering details/requests see: https://peering.anexia.com\nremarks:\nremarks: All RIPE database entries are created automatically.\nremarks:\nabuse-mailbox: abuse@anexia.at\nnic-hdl: ANX-RIPE\nmnt-by: ANEXIA-MNT\ncreated: 2019-04-10T08:24:01Z\nlast-modified: 2023-02-13T21:42:22Z\nsource: RIPE # Filtered\ntech-c: ANXT-RIPE\n\n% Information related to '2.57.104.0/24AS42473'\n\nroute: 2.57.104.0/24\ndescr: powered by ANX\norigin: AS42473\nmnt-by: ANEXIA-MNT\ncreated: 2020-11-25T11:34:02Z\nlast-modified: 2020-11-25T11:34:02Z\nsource: RIPE\n\n% This query was served by the RIPE Database Query Service version 1.121.2 (SHETLAND)\n\n",
"rir": "ripencc",
"tech_handles": [
{
"address": "Feldkirchner Str. 140, 9020 Klagenfurt, Austria",
"country": "",
"date_updated": "2023-02-13T21:42:22",
"email": "abuse@anexia.at",
"fax": "",
"handle": "anx-ripe",
"name": "ANX Group RIPE NCC Role Handle",
"phone": "",
"source": "RIPE"
}
]
}
}Database Integrity & Authenticity Verification
There are two methods of verifying the integrity and authenticity of our Database:
1. Using the Signature File (Recommended)
IPGeolocation.io signs every database release to ensure its authenticity and integrity. This allows customers to verify that a downloaded IP Whois database file originates directly from IPGeolocation.io and has not been altered, corrupted, or tampered with during transfer or storage.
Each database update includes a corresponding signature file, generated using our private signing key. Customers can validate the database using the provided public verification key. To verify a database file, you need:
- Database file (the downloaded archive)
- Signature file (the matching signature for that archive)
- Public key (public-key.pem)
These files are available via official IPGeolocation.io download endpoints and are also shared in database update notifications.
2. Using the Checksum File (Legacy)
Each database archive includes a checksum.txt file containing the SHA-256 checksums for the files packaged in the archive. You can use this file to validate that the extracted contents are complete and unchanged.
Data Format & Constraints
- All fields defined in the schema are always present in the IP Whois MMDB response.
- Fields may contain empty strings (""), but never null, so null checks are not required.
- Place names such as countries, states, districts, and cities are available in multiple translations.
- All text values are encoded in UTF-8.
- Field names and response structure remain stable across updates for backward compatibility.
Database Updates & Delivery
When you subscribe to our IP Whois database, we'll send you static download links. These links never change, so you can use them both for your initial download and for all future updates. You will receive:
- Database Archive URL : downloads the latest release of your subscribed database (CSV, MMDB or requested formats).
- Signature File URL : downloads the matching signature file for the latest release (used for authenticity verification).
- Public Key URL : downloads the public verification key (used with the signature file).
- Status Endpoint URL : returns the database's most recent update timestamp.
Our databases are refreshed daily and weekly, ensuring you always have access to the most current data. Each time your subscribed dataset is updated, you'll also receive an email notification so you don't miss a release.
For automated workflows, you can check our status endpoint to see the last update timestamp. When the date changes, simply re-fetch the archive using your static download URL to pull the latest version into your system.