IP Whois Database

Overview

Our IP WHOIS Database delivers clean, consistently parsed ownership data for any IPv4/IPv6 range, so you can verify who controls an address block, identify the right contacts, and act with confidence. Use it to harden security, speed up network troubleshooting, validate IP ownership during onboarding or investigations, and enrich tooling with reliable WHOIS insights across the global internet.

Raw WHOIS text is preserved for auditability. Available in CSV, JSON and MMDB formats. Below, you'll find full documentation of the archive contents, schema definitions, file specifications, and integration notes to help you get up and running quickly.

Available Database Formats

CSV

File Size: 1.22 GB

Entries: 11.2M

Fields: 55

Last Updated: Yesterday

Documentation

MMDB

File Size: 22.00 MB

Entries: 11.2M

Fields: 55

Last Updated: Yesterday

Documentation

CSV Database Documentation

1. Overview

The CSV version is a set of Gzip-compressed CSV files containing IP ranges and detailed IP WHOIS information. These files are designed for bulk imports and integration into relational databases.

2. Archive Content

After downloading and extracting the IP Whois CSV database archive, you'll find the following files (with their types noted):

db-ip-whois.csv.gz

IP range links to WHOIS details: name, country, domain, RIR, and raw WHOIS record.

File Size: 1.13 GB

Entries: 11.2M

Fields: 14

db-org-details.csv.gz

Links an organization ID to its handle, name, type, and contact details.

File Size: 93.02 MB

Entries: 2.7M

Fields: 11

db-handles-details.csv.gz

Links the network handle ID to its name, country, address, and contact details.

File Size: 3.81 MB

Entries: 104.6K

Fields: 10

README.md

Documentation for dataset contents, schema, usage, and support.

File Size: 7.97 KB

db-ip-whois.md5

File Size: 213 Bytes

Schema

This section describes the schema of each file included in the IP Whois Database archive. For every file, you'll find its purpose, field definitions, and examples to help with integration.

1. db-ip-whois.csv.gz

This file contains detailed WHOIS information for IP address ranges. It maps each IP block to the name, country, domain, and RIR, as well as various contact handle IDs and the full raw_whois record.

Field	Type	Description	Can be empty?	Example
start_ip	string	The starting IP address of the range in IPv4 or IPv6 format.	No	192.168.0.1
end_ip	string	The ending IP address of the range in IPv4 or IPv6 format.	No	192.168.0.255
name	string	The name associated with the IP range in the WHOIS record.	Yes	Example Network
country	string	The country code associated with the IP range in the WHOIS record.	Yes	US
domain	string	The domain name associated with the IP range in the WHOIS record.	Yes	example.com
rir	string	The Regional Internet Registry (RIR) that manages the IP range.	Yes	ARIN
org_id	number	The unique identifier for the organization associated with the IP range.	Yes	1
admin_handles_id	number	The unique identifier for the administrative contact handle associated with the IP range.	Yes	1
tech_handles_id	number	The unique identifier for the technical contact handle associated with the IP range.	Yes	1
abuse_handles_id	number	The unique identifier for the abuse contact handle associated with the IP range.	Yes	1
irt_handles_id	number	The unique identifier for the Incident Response Team (IRT) contact handle associated, with the IP range.	Yes	1
raw_whois	string	The raw WHOIS record data associated with the IP range.	Yes	Raw WHOIS data string...
date_created	string	The date when the WHOIS record for the IP range was created.	Yes	2020-01-01T12:00:00Z
date_updated	string	The date when the WHOIS record for the IP range was last updated.	Yes	2023-01-15T12:00:00Z

I. Example Records

Example

start_ip,end_ip,name,country,domain,rir,org_id,admin_handles_id,tech_handles_id,abuse_handles_id,irt_handles_id,raw_whois,date_created,date_updated
2.114.178.96,2.114.178.103,DCRDISTRIBUTIONANDCOSMETICRESEARCHSRL,IT,business.telecomitalia.it,ripencc,null,1,2,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '2.114.178.96 - 2.114.178.103'

% Abuse contact for '2.114.178.96 - 2.114.178.103' is 'abuse@business.telecomitalia.it'

inetnum:        2.114.178.96 - 2.114.178.103
netname:        DCRDISTRIBUTIONANDCOSMETICRESEARCHSRL
descr:          D.C.R. DISTRIBUTION AND COSMETIC RESEARCH SRL
country:        IT
admin-c:        MS22734-RIPE
tech-c:         MS22735-RIPE
status:         ASSIGNED PA
mnt-by:         INTERB-MNT
created:        2010-10-04T10:07:22Z
last-modified:  2020-04-09T14:53:09Z
source:         RIPE # Filtered

person:         MARIO SANNINO
address:        DCR DISTRIBUTION AND COSMETIC RESEARCH SRL
address:        VIA CIS DI NOLA IS 7 IS 7
address:        80035
address:        Italy
phone:          +39815109495
fax-no:         +3981
nic-hdl:        MS22734-RIPE
created:        2010-10-04T10:07:22Z
last-modified:  2020-06-04T06:13:02Z
source:         RIPE
mnt-by:         INTERB-MNT

person:         MARIO SANNINO
address:        DCR DISTRIBUTION AND COSMETIC RESEARCH SRL
address:        VIA CIS DI NOLA IS 7 IS 7
address:        80035 NOLA
address:        Italy
phone:          +39922211431
fax-no:         +3981
nic-hdl:        MS22735-RIPE
created:        2010-10-04T10:07:22Z
last-modified:  2020-06-03T23:04:45Z
source:         RIPE
mnt-by:         INTERB-MNT

% Information related to '2.114.0.0/15AS3269'

route:          2.114.0.0/15
descr:          INTERBUSINESS
origin:         AS3269
remarks:        ************************************************
remarks:        * Pay attention *
remarks:        * Any communication sent to email different *
remarks:        * from the following will be ignored! *
remarks:        * Any abuse reports, please send them to *
remarks:        * abuse@business.telecomitalia.it *
remarks:        ************************************************
mnt-by:         INTERB-MNT
created:        2010-04-30T09:25:19Z
last-modified:  2017-07-17T12:18:26Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.122.1 (BUSA)

",2010-10-04T10:07:22,2020-04-09T14:53:09
2.207.202.216,2.207.202.223,TECENESE-NET,DE,vodafone.com,ripencc,null,3,3,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '2.207.202.216 - 2.207.202.223'

% Abuse contact for '2.207.202.216 - 2.207.202.223' is 'abuse.de@vodafone.com'

inetnum:        2.207.202.216 - 2.207.202.223
netname:        TECENESE-NET
descr:          Techem Energy Services GmbH
descr:          Sunderweg 2
descr:          33649 Bielefeld
descr:          GERMANY
country:        DE
admin-c:        ANOC1-RIPE
tech-c:         ANOC1-RIPE
status:         ASSIGNED PA
mnt-by:         ARCOR-MNT
created:        2021-08-12T09:26:18Z
last-modified:  2021-08-12T09:26:18Z
source:         RIPE # Filtered

role:           Vodafone Germany IP Core Backbone
address:        Vodafone GmbH
address:        Campus Eschborn
address:        Duesseldorfer Strasse 15
address:        D-65760 Eschborn
address:        Germany
phone:          +49 6196 52352105
remarks:        trouble: Security issues abuse.de@vodafone.com
remarks:        trouble: Information http://www.vodafone.de
remarks:        trouble: Peering contact peering@adm.arcor.net
remarks:        trouble: Operational issues :
remarks:        DanubiusNOC-DE-FO-FIXED_ro@vodafone.com
remarks:        trouble: Address assignment ip-registry@arcor.net
admin-c:        SM9000-RIPE
admin-c:        NH4266-RIPE
admin-c:        JS19072-RIPE
admin-c:        IE1226-RIPE
admin-c:        TK11590-RIPE
admin-c:        FB3293-RIPE
admin-c:        TG2269-RIPE
admin-c:        ME9243-RIPE
tech-c:         NH15-RIPE
nic-hdl:        ANOC1-RIPE
mnt-by:         ARCOR-MNT
created:        2002-07-11T08:48:33Z
last-modified:  2026-04-24T11:56:13Z
source:         RIPE # Filtered
abuse-mailbox:  abuse.de@vodafone.com

% Information related to '2.204.0.0/14AS3209'

route:          2.204.0.0/14
descr:          ARCOR-IP
origin:         AS3209
mnt-routes:     ARCOR-MNT
mnt-by:         ARCOR-MNT
created:        2017-05-30T05:58:18Z
last-modified:  2017-05-30T05:58:18Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122.1 (BUSA)

",2021-08-12T09:26:18,2021-08-12T09:26:18
2.228.51.52,2.228.51.55,FASTWEB-KOS_SERVIZI_SOCIETA__CONSORTILE,IT,fastweb.it,ripencc,null,4,5,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '2.228.51.52 - 2.228.51.55'

% Abuse contact for '2.228.51.52 - 2.228.51.55' is 'abuse@fastweb.it'

inetnum:        2.228.51.52 - 2.228.51.55
netname:        FASTWEB-KOS_SERVIZI_SOCIETA__CONSORTILE
descr:          KOS SERVIZI SOCIETA CONSORTILE public subnet
country:        IT
admin-c:        FD6789-RIPE
tech-c:         IRSN1-RIPE
status:         ASSIGNED PA
mnt-by:         FASTWEB-MNT
remarks:        In case of improper use originating from our network,
remarks:        please mail customer or abuse@fastweb.it
created:        2022-06-13T11:05:51Z
last-modified:  2022-06-13T11:05:51Z
source:         RIPE

person:         FABIO DIENI
address:        VIA OTTONE IV DI BRUNSWIK 12
address:        MATELICA MC
address:        IT
phone:          +39 3488864961
nic-hdl:        FD6789-RIPE
mnt-by:         FASTWEB-MNT
created:        2022-06-13T11:05:48Z
last-modified:  2022-06-13T11:05:48Z
source:         RIPE # Filtered

person:         IP Registration Service NIS
address:        Via Caracciolo, 51
address:        20155 Milano MI
address:        Italy
phone:          +39 02 45451
fax-no:         +39 02 45451
nic-hdl:        IRSN1-RIPE
mnt-by:         FASTWEB-MNT
remarks:
remarks:        In case of improper use originating
remarks:        from our network,
remarks:        please mail customer or abuse@fastweb.it
remarks:
created:        2005-09-15T10:18:18Z
last-modified:  2008-02-29T14:12:48Z
source:         RIPE # Filtered

% Information related to '2.224.0.0/13AS12874'

route:          2.224.0.0/13
descr:          Fastweb Networks block
origin:         AS12874
remarks:
remarks:        In case of improper use originating from our network,
remarks:        please mail customer or abuse@fastweb.it
remarks:
mnt-by:         FASTWEB-MNT
created:        2011-02-07T10:33:03Z
last-modified:  2011-02-07T10:33:03Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122.1 (ABERDEEN)

",2022-06-13T11:05:51,2022-06-13T11:05:51
2.228.70.24,2.228.70.31,FASTWEB-BROS-001,IT,fastweb.it,ripencc,null,6,5,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '2.228.70.24 - 2.228.70.31'

% Abuse contact for '2.228.70.24 - 2.228.70.31' is 'abuse@fastweb.it'

inetnum:        2.228.70.24 - 2.228.70.31
netname:        FASTWEB-BROS-001
descr:          BROS-001 public subnet
country:        IT
admin-c:        MI5775-RIPE
tech-c:         IRSN1-RIPE
status:         ASSIGNED PA
mnt-by:         FASTWEB-MNT
remarks:        In case of improper use originating from our network,
remarks:        please mail customer or abuse@fastweb.it
created:        2024-05-07T11:25:27Z
last-modified:  2024-05-07T11:25:27Z
source:         RIPE

person:         IP Registration Service NIS
address:        Via Caracciolo, 51
address:        20155 Milano MI
address:        Italy
phone:          +39 02 45451
fax-no:         +39 02 45451
nic-hdl:        IRSN1-RIPE
mnt-by:         FASTWEB-MNT
remarks:
remarks:        In case of improper use originating
remarks:        from our network,
remarks:        please mail customer or abuse@fastweb.it
remarks:
created:        2005-09-15T10:18:18Z
last-modified:  2008-02-29T14:12:48Z
source:         RIPE # Filtered

person:         MARIANA IANCU
address:        STRADA TORINO 34/36
address:        BEINASCO TO
address:        IT
phone:          +39 3703773172
nic-hdl:        MI5775-RIPE
mnt-by:         FASTWEB-MNT
created:        2024-05-07T11:25:24Z
last-modified:  2024-05-07T11:25:24Z
source:         RIPE # Filtered

% Information related to '2.224.0.0/13AS12874'

route:          2.224.0.0/13
descr:          Fastweb Networks block
origin:         AS12874
remarks:
remarks:        In case of improper use originating from our network,
remarks:        please mail customer or abuse@fastweb.it
remarks:
mnt-by:         FASTWEB-MNT
created:        2011-02-07T10:33:03Z
last-modified:  2011-02-07T10:33:03Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122.1 (SHETLAND)

",2024-05-07T11:25:27,2024-05-07T11:25:27
5.96.34.192,5.96.34.199,BRICOMANITALIASRL,IT,business.telecomitalia.it,ripencc,null,7,7,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.96.34.192 - 5.96.34.199'

% Abuse contact for '5.96.34.192 - 5.96.34.199' is 'abuse@business.telecomitalia.it'

inetnum:        5.96.34.192 - 5.96.34.199
netname:        BRICOMANITALIASRL
descr:          BRICOMAN ITALIA S.R.L.
country:        IT
admin-c:        DS26226-RIPE
tech-c:         DS26226-RIPE
status:         ASSIGNED PA
mnt-by:         INTERB-MNT
created:        2024-09-26T12:17:13Z
last-modified:  2024-09-26T12:17:13Z
source:         RIPE # Filtered

person:         DARIO SEGHEZZI
address:        BRICOMAN ITALIA S.R.L.
address:        VIA GUGLIELMO MARCONI 24
address:        20090 ROZZANO
address:        Italy
nic-hdl:        DS26226-RIPE
phone:          +39283905463
fax-no:         +39283905463
mnt-by:         INTERB-MNT
created:        2024-09-26T12:17:12Z
last-modified:  2024-09-26T12:17:12Z
source:         RIPE

% Information related to '5.96.0.0/15AS3269'

route:          5.96.0.0/15
descr:          INTERBUSINESS
origin:         AS3269
remarks:        ************************************************
remarks:        * Pay attention *
remarks:        * Any communication sent to email different *
remarks:        * from the following will be ignored! *
remarks:        * Any abuse reports, please send them to *
remarks:        * abuse@business.telecomitalia.it *
remarks:        ************************************************
mnt-by:         INTERB-MNT
created:        2012-06-20T09:30:01Z
last-modified:  2017-07-17T12:19:18Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.122.1 (SHETLAND)

",2024-09-26T12:17:13,2024-09-26T12:17:13
5.101.139.88,5.101.139.95,PRO001,GB,ukservers.com,ripencc,null,8,8,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.101.139.88 - 5.101.139.95'

% Abuse contact for '5.101.139.88 - 5.101.139.95' is 'abuse@ukservers.com'

inetnum:        5.101.139.88 - 5.101.139.95
netname:        PRO001
descr:          PRO001
country:        GB
admin-c:        DH1778-RIPE
tech-c:         DH1778-RIPE
status:         ASSIGNED PA
mnt-by:         UKSERVERS-MNT
created:        2024-04-16T14:00:02Z
last-modified:  2024-04-16T14:00:02Z
source:         RIPE

person:         David Howes
address:        UK Dedicated Servers Ltd
address:        Continuity House
address:        205 Torrington Avenue
address:        Coventry
address:        CV4 9UT
mnt-by:         UKSERVERS-MNT
phone:          +44 (0)800 610 1 620
nic-hdl:        DH1778-RIPE
created:        2007-04-23T09:45:22Z
last-modified:  2022-09-06T13:32:33Z
source:         RIPE

% Information related to '5.101.136.0/21AS42831'

route:          5.101.136.0/21
descr:          UK Dedicated Servers Limited
origin:         AS42831
mnt-by:         UKSERVERS-MNT
created:        2014-01-17T15:26:31Z
last-modified:  2014-01-17T15:26:31Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122.1 (BUSA)

",2024-04-16T14:00:02,2024-04-16T14:00:02
5.101.199.128,5.101.199.255,Bristol,RU,umnyeseti.ru,ripencc,1,9,9,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.101.199.128 - 5.101.199.255'

% Abuse contact for '5.101.199.128 - 5.101.199.255' is 'support@umnyeseti.ru'

inetnum:        5.101.199.128 - 5.101.199.255
netname:        Bristol
descr:          Customers-net, Russia, Moscow, Vnukovo area, Bristol
country:        RU
admin-c:        USN9-RIPE
tech-c:         USN9-RIPE
status:         ASSIGNED PA
mnt-by:         UMNYESETI-MNT
created:        2019-08-27T14:16:43Z
last-modified:  2019-08-27T14:17:00Z
source:         RIPE

role:           Umnye Seti NOC
address:        Grand Ltd.
address:        141002, Russian Federation, Mytishchi, Kolpakova str., dom 2, korpus 15, office 204
org:            ORG-GL125-RIPE
admin-c:        MIK239-RIPE
tech-c:         MIK239-RIPE
nic-hdl:        USN9-RIPE
mnt-by:         UMNYESETI-MNT
abuse-mailbox:  support@umnyeseti.ru
created:        2013-03-26T15:33:12Z
last-modified:  2022-01-18T11:03:36Z
source:         RIPE # Filtered

% Information related to '5.101.192.0/21AS56340'

route:          5.101.192.0/21
descr:          UMNYESETI-NET
origin:         AS56340
mnt-by:         UMNYESETI-MNT
created:        2014-09-16T10:07:22Z
last-modified:  2014-09-16T10:07:22Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122.1 (ABERDEEN)


organisation:   ORG-GL125-RIPE
org-name:       Grand Ltd
country:        RU
reg-nr:         1115029006630
org-type:       LIR
address:        Kolpakova str. dom 2 korpus 15 office 204
address:        141002
address:        Mytishchi
address:        RUSSIAN FEDERATION
phone:          +74959871780
phone:          +74996851895
fax-no:         +74959871780
admin-c:        MIK239-RIPE
abuse-c:        USN9-RIPE
mnt-ref:        RIPE-NCC-HM-MNT
mnt-ref:        UMNYESETI-MNT
mnt-ref:        MNT-GCX
mnt-ref:        MNT-PINSUPPORT
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         UMNYESETI-MNT
created:        2013-01-23T13:01:25Z
last-modified:  2026-05-13T07:13:20Z
source:         RIPE # Filtered

",2019-08-27T14:16:43,2019-08-27T14:17:00
5.149.147.0,5.149.147.255,ELECTROCOM-KLG-WHITE-NET,RU,ttk.ru,ripencc,null,10,10,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.149.147.0 - 5.149.147.255'

% Abuse contact for '5.149.147.0 - 5.149.147.255' is 'abuse@ttk.ru'

inetnum:        5.149.147.0 - 5.149.147.255
netname:        ELECTROCOM-KLG-WHITE-NET
descr:          ZAO Transtelekom MR Spark Kaluga B2B/B2C Network
country:        RU
admin-c:        ECRM3-RIPE
tech-c:         ECRM3-RIPE
status:         ASSIGNED PA
mnt-by:         ELECTRO-COM-MNT
created:        2013-02-20T05:51:51Z
last-modified:  2015-01-12T14:18:08Z
source:         RIPE

role:           MR Kavkaz ITS
address:        AO TransTeleKom
address:        Vereyskaya st., d.29, str.33 k.12
address:        123357 Moscow
address:        Russian Federation
admin-c:        CEC14-RIPE
tech-c:         VVK117-RIPE
abuse-mailbox:  netmsk@electro-com.ru
nic-hdl:        ECRM3-RIPE
mnt-by:         ELECTRO-COM-MNT
created:        2009-08-28T15:58:30Z
last-modified:  2021-05-20T12:47:12Z
source:         RIPE # Filtered

% Information related to '5.149.147.0/24AS21438'

route:          5.149.147.0/24
origin:         AS21438
mnt-by:         MNT-RU-ELECTRO-COM
mnt-by:         ELECTRO-COM-MNT
created:        2017-09-21T02:50:27Z
last-modified:  2017-09-21T02:50:27Z
source:         RIPE

% Information related to '5.149.147.0/24AS35641'

route:          5.149.147.0/24
origin:         AS35641
mnt-by:         ELECTRO-COM-MNT
created:        2016-10-04T07:40:44Z
last-modified:  2016-10-04T07:40:44Z
source:         RIPE

% Information related to '5.149.147.0/24AS44775'

route:          5.149.147.0/24
descr:          Electro-com Kaluga White Pool
origin:         AS44775
mnt-by:         ELECTRO-COM-MNT
created:        2013-02-20T05:53:25Z
last-modified:  2015-01-12T14:21:23Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122.1 (BUSA)

",2013-02-20T05:51:51,2015-01-12T14:18:08
5.167.192.0,5.167.199.255,ERTH-SPB-PPPOE-25-NET,RU,domru.ru,ripencc,2,11,11,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.167.192.0 - 5.167.199.255'

% Abuse contact for '5.167.192.0 - 5.167.199.255' is 'abuse@domru.ru'

inetnum:        5.167.192.0 - 5.167.199.255
netname:        ERTH-SPB-PPPOE-25-NET
descr:          JSC ER-Telecom Holding Saint-Petersburg Branch
descr:          Saint-Petersburg, Russia
descr:          PPPoE individual customers network
remarks:        INFRA-AW
country:        RU
admin-c:        ERTH78-RIPE
tech-c:         ERTH78-RIPE
org:            ORG-CHSB2-RIPE
status:         ASSIGNED PA
mnt-by:         RAID-MNT
created:        2018-05-03T11:13:32Z
last-modified:  2018-05-03T11:13:32Z
source:         RIPE # Filtered

organisation:   ORG-CHSB2-RIPE
org-name:       JSC ER-Telecom Holding Saint-Petersburg Branch
org-type:       OTHER
descr:          TM DOM.RU, Saint-Petersburg ISP
address:        Kolomyazhsky, 29
address:        Saint-Petersburg
address:        Russian Federation
phone:          +7-800-333-7000
fax-no:         +7-800-333-7000
admin-c:        ERTH78-RIPE
tech-c:         ERTH78-RIPE
abuse-c:        RAID1-RIPE
mnt-ref:        RAID-MNT
mnt-by:         RAID-MNT
created:        2010-09-27T05:16:44Z
last-modified:  2019-10-16T05:07:58Z
source:         RIPE # Filtered

role:           Network Operation Center CJSC ER-Telecom Holding Saint-Petersburg branch
address:        JSC ER-Telecom Holding Saint-Petersburg
address:        Kolomyazhsky, 29
address:        Saint-Petersburg
address:        Russian Federation
phone:          +7-800-333-7000
fax-no:         +7-800-333-7000
abuse-mailbox:  abuse@domru.ru
admin-c:        ERTH3-RIPE
tech-c:         RAID1-RIPE
nic-hdl:        ERTH78-RIPE
created:        2010-08-26T04:50:06Z
last-modified:  2019-11-08T09:18:10Z
source:         RIPE # Filtered
mnt-by:         RAID-MNT

% Information related to '5.167.192.0/19AS51570'

route:          5.167.192.0/19
origin:         AS51570
org:            ORG-CHSB2-RIPE
descr:          JSC ER-Telecom Holding Saint-Petersburg Branch
descr:          Saint-Petersburg, Russia
mnt-by:         RAID-MNT
created:        2018-05-03T11:15:12Z
last-modified:  2018-05-03T11:15:12Z
source:         RIPE # Filtered

organisation:   ORG-CHSB2-RIPE
org-name:       JSC ER-Telecom Holding Saint-Petersburg Branch
org-type:       OTHER
descr:          TM DOM.RU, Saint-Petersburg ISP
address:        Kolomyazhsky, 29
address:        Saint-Petersburg
address:        Russian Federation
phone:          +7-800-333-7000
fax-no:         +7-800-333-7000
admin-c:        ERTH78-RIPE
tech-c:         ERTH78-RIPE
abuse-c:        RAID1-RIPE
mnt-ref:        RAID-MNT
mnt-by:         RAID-MNT
created:        2010-09-27T05:16:44Z
last-modified:  2019-10-16T05:07:58Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.122.1 (BUSA)

",2018-05-03T11:13:32,2018-05-03T11:13:32
5.196.198.56,5.196.198.63,OVH_199757544,ES,ovh.net,ripencc,3,12,12,,,"% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the -B flag.

% Information related to '5.196.198.56 - 5.196.198.63'

% Abuse contact for '5.196.198.56 - 5.196.198.63' is 'abuse@ovh.net'

inetnum:        5.196.198.56 - 5.196.198.63
netname:        OVH_199757544
country:        ES
descr:          Failover Ips
org:            ORG-FDA16-RIPE
admin-c:        OTC11-RIPE
tech-c:         OTC11-RIPE
status:         ASSIGNED PA
mnt-by:         OVH-MNT
created:        2018-11-30T15:17:31Z
last-modified:  2018-11-30T15:17:31Z
source:         RIPE

organisation:   ORG-FDA16-RIPE
org-name:       Ferraz Demur Alfredo
org-type:       OTHER
address:        Calle Dos de Enero 4
address:        50013 Zaragoza
address:        ES
phone:          +33.976361909
mnt-ref:        OVH-MNT
mnt-by:         OVH-MNT
created:        2014-07-24T12:02:03Z
last-modified:  2017-10-30T16:30:16Z
source:         RIPE # Filtered

role:           OVH ES Technical Contact
address:        OVH Hispano
address:        Calle Princesa, 22 2 Dcha
address:        Madrid 28008
address:        Spain
admin-c:        OK217-RIPE
tech-c:         GM84-RIPE
nic-hdl:        OTC11-RIPE
abuse-mailbox:  abuse@ovh.net
mnt-by:         OVH-MNT
created:        2009-09-16T16:09:56Z
last-modified:  2012-08-08T09:06:53Z
source:         RIPE # Filtered

% Information related to '5.196.0.0/16AS16276'

route:          5.196.0.0/16
descr:          OVH
origin:         AS16276
mnt-by:         OVH-MNT
created:        2014-08-15T12:51:31Z
last-modified:  2014-08-15T12:51:31Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.122.1 (BUSA)

",2018-11-30T15:17:31,2018-11-30T15:17:31

2. db-handles-details.csv.gz

This file contains detailed information on various network handles. It links a unique ID to a specific handle, name, country, address, and contact details such as email, phone, and fax.

Field	Type	Description	Can be empty?	Example
id	number	The unique identifier for the WHOIS handle.	No	1
handle	string	The WHOIS handle.	No	EXAMPLE-HANDLE
name	string	The name associated with the WHOIS handle.	No	John Doe
country	string	The country associated with the WHOIS handle.	Yes	US
email	string	The email address associated with the WHOIS handle.	Yes	contact@example.org
phone	string	The phone number associated with the WHOIS handle.	Yes	+1-800-555-0123
fax	string	The fax number associated with the WHOIS handle.	Yes	+1-800-555-0456
address	string	The physical address associated with the WHOIS handle.	Yes	123 Example St, Example City, EX 12345, Country
date_updated	string	The date when the WHOIS handle information was last updated.	Yes	2023-01-15T12:00:00Z
source	string	The source of the WHOIS handle information.	Yes	ARIN

I. Example Records

Example

id,handle,name,country,email,phone,fax,address,date_updated,source
11,erth78-ripe,Network Operation Center CJSC ER-Telecom Holding Saint-Petersburg branch,,abuse@domru.ru,+7-800-333-7000,+7-800-333-7000,"JSC ER-Telecom Holding Saint-Petersburg, Kolomyazhsky, 29, Saint-Petersburg, Russian Federation",2019-11-08T09:18:10,RIPE
6,mi5775-ripe,MARIANA IANCU,,,+39 3703773172,,"STRADA TORINO 34/36, BEINASCO TO, IT",2024-05-07T11:25:24,RIPE
3,anoc1-ripe,Vodafone Germany IP Core Backbone,,abuse.de@vodafone.com,+49 6196 52352105,,"Vodafone GmbH, Campus Eschborn, Duesseldorfer Strasse 15, D-65760 Eschborn, Germany",2026-04-24T11:56:13,RIPE
8,dh1778-ripe,David Howes,,,+44 (0)800 610 1 620,,"UK Dedicated Servers Ltd, Continuity House, 205 Torrington Avenue, Coventry, CV4 9UT",2022-09-06T13:32:33,RIPE
9,usn9-ripe,Umnye Seti NOC,,support@umnyeseti.ru,,,"Grand Ltd., 141002, Russian Federation, Mytishchi, Kolpakova str., dom 2, korpus 15, office 204",2022-01-18T11:03:36,RIPE
5,irsn1-ripe,IP Registration Service NIS,,,+39 02 45451,+39 02 45451,"Via Caracciolo, 51, 20155 Milano MI, Italy",2008-02-29T14:12:48,RIPE
1,ms22734-ripe,MARIO SANNINO,,,+39815109495,+3981,"DCR DISTRIBUTION AND COSMETIC RESEARCH SRL, VIA CIS DI NOLA IS 7 IS 7, 80035, Italy",2020-06-04T06:13:02,RIPE
4,fd6789-ripe,FABIO DIENI,,,+39 3488864961,,"VIA OTTONE IV DI BRUNSWIK 12, MATELICA MC, IT",2022-06-13T11:05:48,RIPE
10,ecrm3-ripe,MR Kavkaz ITS,,netmsk@electro-com.ru,,,"AO TransTeleKom, Vereyskaya st., d.29, str.33 k.12, 123357 Moscow, Russian Federation",2021-05-20T12:47:12,RIPE
12,otc11-ripe,OVH ES Technical Contact,,abuse@ovh.net,,,"OVH Hispano, Calle Princesa, 22 2 Dcha, Madrid 28008, Spain",2012-08-08T09:06:53,RIPE
2,ms22735-ripe,MARIO SANNINO,,,+39922211431,+3981,"DCR DISTRIBUTION AND COSMETIC RESEARCH SRL, VIA CIS DI NOLA IS 7 IS 7, 80035 NOLA, Italy",2020-06-03T23:04:45,RIPE
7,ds26226-ripe,DARIO SEGHEZZI,,,+39283905463,+39283905463,"BRICOMAN ITALIA S.R.L., VIA GUGLIELMO MARCONI 24, 20090 ROZZANO, Italy",2024-09-26T12:17:12,RIPE

3. db-org-details.csv.gz

This file provides detailed organization information. It links a unique ID to an organization's handle, name, type, address, country, and various contact details including email, phone, and fax.

Field	Type	Description	Can be empty?	Example
id	number	The unique identifier for the WHOIS organization.	No	1
handle	string	The handle of the WHOIS organization.	Yes	EXAMPLE-ORG
name	string	The name of the WHOIS organization.	No	Example Organization
type	string	The type of the WHOIS organization.	Yes	organization
address	string	The address of the WHOIS organization.	Yes	123 Example St, Example City, EX 12345, Country
country	string	The country of the WHOIS organization.	Yes	US
email	string	The email address of the WHOIS organization.	Yes	contact@example.org
phone	string	The phone number of the WHOIS organization.	Yes	+1-800-555-0123
fax	string	The fax number of the WHOIS organization.	Yes	+1-800-555-0456
date_updated	string	The date when the WHOIS organization information was last updated.	Yes	2023-01-15T12:00:00Z
source	string	The source of the WHOIS organization information.	Yes	ARIN

I. Example Records

Example

id,handle,name,type,address,country,email,phone,fax,date_updated,source
2,org-chsb2-ripe,JSC ER-Telecom Holding Saint-Petersburg Branch,other,"Kolomyazhsky, 29, Saint-Petersburg, Russian Federation",,,+7-800-333-7000,+7-800-333-7000,2019-10-16T05:07:58,ripencc
3,org-fda16-ripe,Ferraz Demur Alfredo,other,"Calle Dos de Enero 4, 50013 Zaragoza, ES",,,+33.976361909,,2017-10-30T16:30:16,ripencc
1,org-gl125-ripe,Grand Ltd,lir,"Kolpakova str. dom 2 korpus 15 office 204, 141002, Mytishchi, RUSSIAN FEDERATION, Russia",RU,,+74996851895,+74959871780,2026-05-13T07:13:20,ripencc

4. File Relationship Diagram

The diagram below illustrates the relationships between the various files included in the CSV database package. It shows how the main CSV file connects to reference tables for person and organization handle files, ensuring consistent and accurate data across for all the records.

File Format & Encoding

All IP Whois CSV datasets are provided in UTF-8 encoding, comma-separated, and compressed with Gzip (.csv.gz). Each file includes a header row listing the field names for clarity and consistency.

Field values are unquoted by default, with quotes applied only in the following cases:

Line breaks within text fields.
Commas inside a value (e.g., addresses).
Lists of values (e.g., languages).
Spaces that may be auto-quoted by export tools.

MMDB Database Documentation

1. Overview

MMDB version of the database consists of two files: one MMDB file containing all the data (organization and contact handle details), a README file, and a checksum file, and one checksum file, all compressed together in a ZIP file for easy delivery.

2. Archive Content

After downloading and extracting the IP Whois MMDB database archive, you'll find the following files (with their types noted):

db-ip-whois.mmdb

Full WHOIS details for IP addresses: name, country, domain, RIR, contact IDs, and raw WHOIS record.

File Size: 22.00 MB

Entries: 11.2M

README.md

Documentation for dataset contents, schema, usage, and support.

File Size: 7.97 KB

db-ip-whois.md5

File Size: 95 Bytes

Response Schema

This section describes the structure of the data returned from the IP Whois MMDB file. Each field is detailed with its type, meaning, and example values to help you interpret responses and integrate them into your applications.

1. db-ip-whois.mmdb

This file contains detailed WHOIS mappings for both IPv4 and IPv6 address ranges. Below is an example of the structure you'll find in the response.

2. Field Reference

The following reference lists all fields available in the MMDB response. Each entry includes the field path, its description, data type, and example value to help you understand how to parse and integrate the data.

Showing 7 of 53

Select a field to view details

I. Example Records

Example

{
  "whois": {
    "abuse_handles": [],
    "admin_handles": [
      {
        "address": "DCR DISTRIBUTION AND COSMETIC RESEARCH SRL, VIA CIS DI NOLA IS 7 IS 7, 80035, Italy",
        "country": "",
        "date_updated": "2020-06-04T06:13:02",
        "email": "",
        "fax": "+3981",
        "handle": "ms22734-ripe",
        "name": "MARIO SANNINO",
        "phone": "+39815109495",
        "source": "RIPE"
      }
    ],
    "country": "IT",
    "date_created": "2010-10-04T10:07:22",
    "date_updated": "2020-04-09T14:53:09",
    "domain": "business.telecomitalia.it",
    "irt_handles": [],
    "name": "DCRDISTRIBUTIONANDCOSMETICRESEARCHSRL",
    "organization": {},
    "raw_whois": "% This is the RIPE Database query service.\n% The objects are in RPSL format.\n%\n% The RIPE Database is subject to Terms and Conditions.\n% See https://docs.db.ripe.net/terms-conditions.html\n\n% Note: this output has been filtered.\n%       To receive output for a database update, use the -B flag.\n\n% Information related to '2.114.178.96 - 2.114.178.103'\n\n% Abuse contact for '2.114.178.96 - 2.114.178.103' is 'abuse@business.telecomitalia.it'\n\ninetnum:        2.114.178.96 - 2.114.178.103\nnetname:        DCRDISTRIBUTIONANDCOSMETICRESEARCHSRL\ndescr:          D.C.R. DISTRIBUTION AND COSMETIC RESEARCH SRL\ncountry:        IT\nadmin-c:        MS22734-RIPE\ntech-c:         MS22735-RIPE\nstatus:         ASSIGNED PA\nmnt-by:         INTERB-MNT\ncreated:        2010-10-04T10:07:22Z\nlast-modified:  2020-04-09T14:53:09Z\nsource:         RIPE # Filtered\n\nperson:         MARIO SANNINO\naddress:        DCR DISTRIBUTION AND COSMETIC RESEARCH SRL\naddress:        VIA CIS DI NOLA IS 7 IS 7\naddress:        80035\naddress:        Italy\nphone:          +39815109495\nfax-no:         +3981\nnic-hdl:        MS22734-RIPE\ncreated:        2010-10-04T10:07:22Z\nlast-modified:  2020-06-04T06:13:02Z\nsource:         RIPE\nmnt-by:         INTERB-MNT\n\nperson:         MARIO SANNINO\naddress:        DCR DISTRIBUTION AND COSMETIC RESEARCH SRL\naddress:        VIA CIS DI NOLA IS 7 IS 7\naddress:        80035 NOLA\naddress:        Italy\nphone:          +39922211431\nfax-no:         +3981\nnic-hdl:        MS22735-RIPE\ncreated:        2010-10-04T10:07:22Z\nlast-modified:  2020-06-03T23:04:45Z\nsource:         RIPE\nmnt-by:         INTERB-MNT\n\n% Information related to '2.114.0.0/15AS3269'\n\nroute:          2.114.0.0/15\ndescr:          INTERBUSINESS\norigin:         AS3269\nremarks:        ************************************************\nremarks:        * Pay attention *\nremarks:        * Any communication sent to email different *\nremarks:        * from the following will be ignored! *\nremarks:        * Any abuse reports, please send them to *\nremarks:        * abuse@business.telecomitalia.it *\nremarks:        ************************************************\nmnt-by:         INTERB-MNT\ncreated:        2010-04-30T09:25:19Z\nlast-modified:  2017-07-17T12:18:26Z\nsource:         RIPE # Filtered\n\n% This query was served by the RIPE Database Query Service version 1.122.1 (BUSA)\n\n",
    "rir": "ripencc",
    "tech_handles": [
      {
        "address": "DCR DISTRIBUTION AND COSMETIC RESEARCH SRL, VIA CIS DI NOLA IS 7 IS 7, 80035 NOLA, Italy",
        "country": "",
        "date_updated": "2020-06-03T23:04:45",
        "email": "",
        "fax": "+3981",
        "handle": "ms22735-ripe",
        "name": "MARIO SANNINO",
        "phone": "+39922211431",
        "source": "RIPE"
      }
    ]
  }
}

Database Integrity & Authenticity Verification

There are two methods of verifying the integrity and authenticity of our Database:

1. Using the Signature File (Recommended)

IPGeolocation.io signs every database release to ensure its authenticity and integrity. This allows customers to verify that a downloaded IP Whois database file originates directly from IPGeolocation.io and has not been altered, corrupted, or tampered with during transfer or storage.

Each database update includes a corresponding signature file, generated using our private signing key. Customers can validate the database using the provided public verification key. To verify a database file, you need:

Database file (the downloaded archive)
Signature file (the matching signature for that archive)
Public key (public-key.pem)

These files are available via official IPGeolocation.io download endpoints and are also shared in database update notifications.

Note

The public key may be provided as PEM-encoded text. Save it to a file named public-key.pem

Ensure OpenSSL is installed on your system. If not, install it using the following commands

On Linux, if openssl is not installed

sudo apt install openssl

Verify OpenSSL installation:

openssl version

To verify the database file, run the following command, replacing the placeholders with your actual file paths:

openssl dgst -sha256 -verify <path-to-public-key.pem> -signature <path-to-signature-file.sig> <path-to-database-file.zip>

Example output:

Verified OK

if verification FAILED do not use the file, re-download the database and signature from official IPGeolocation endpoints. If the issue persists, please contact our support team.

2. Using the Checksum File (Legacy)

Each database archive includes a checksum.txt file containing the SHA-256 checksums for the files packaged in the archive. You can use this file to validate that the extracted contents are complete and unchanged.

Tip

Always verify downloaded files with the provided checksum before importing.

On Linux, if sha256sum is not installed, first run:

sudo apt-get install coreutils

Then check the archive files against the checksum file with:

sha256sum -c checksum.txt

Example output:

db-ip-whois.csv.gz: OK
db-org-details.csv.gz: OK
db-handles-details.csv.gz: OK
README.md: OK
db-ip-whois.md5: OK

*your output may differ depending on the specific database archive you downloaded.

If a file's checksum does not match, FAILED will be shown instead of OK . If verification fails, first confirm that the download completed correctly; if the issue persists, please contact our support team.

Data Format & Constraints

All fields defined in the schema are always present in the IP Whois MMDB response.
Fields may contain empty strings (""), but never null, so null checks are not required.
Place names such as countries, states, districts, and cities are available in multiple translations.
All text values are encoded in UTF-8.
Field names and response structure remain stable across updates for backward compatibility.

Database Updates & Delivery

When you subscribe to our IP Whois database, we'll send you static download links. These links never change, so you can use them both for your initial download and for all future updates. You will receive:

Database Archive URL : downloads the latest release of your subscribed database (CSV, MMDB or requested formats).
Signature File URL : downloads the matching signature file for the latest release (used for authenticity verification).
Public Key URL : downloads the public verification key (used with the signature file).
Status Endpoint URL : returns the database's most recent update timestamp.

Our databases are refreshed daily and weekly, ensuring you always have access to the most current data. Each time your subscribed dataset is updated, you'll also receive an email notification so you don't miss a release.

For automated workflows, you can check our status endpoint to see the last update timestamp. When the date changes, simply re-fetch the archive using your static download URL to pull the latest version into your system.

IP Whois Database

Overview

Available Database Formats

CSV Database Documentation

1. Overview

2. Archive Content

Schema

1. db-ip-whois.csv.gz

I. Example Records

2. db-handles-details.csv.gz

I. Example Records

3. db-org-details.csv.gz

I. Example Records

4. File Relationship Diagram

File Format & Encoding

MMDB Database Documentation

1. Overview

2. Archive Content

Response Schema

1. db-ip-whois.mmdb

2. Field Reference

I. Example Records

Database Integrity & Authenticity Verification

1. Using the Signature File (Recommended)

2. Using the Checksum File (Legacy)

Data Format & Constraints

Database Updates & Delivery

Subscribe to Our Newsletter