Name		Name	Last commit message	Last commit date
parent directory ..
API		API
README.md		README.md
rwhois_sample.csv		rwhois_sample.csv
rwhois_sample.json		rwhois_sample.json
rwhois_sample.mmdb		rwhois_sample.mmdb
whois_asn_sample.csv		whois_asn_sample.csv
whois_asn_sample.json		whois_asn_sample.json
whois_mnt_sample.csv		whois_mnt_sample.csv
whois_mnt_sample.json		whois_mnt_sample.json
whois_net_sample.csv		whois_net_sample.csv
whois_net_sample.json		whois_net_sample.json
whois_org_sample.csv		whois_org_sample.csv
whois_org_sample.json		whois_org_sample.json
whois_poc_sample.csv		whois_poc_sample.csv
whois_poc_sample.json		whois_poc_sample.json
whois_rir_sample.csv		whois_rir_sample.csv
whois_rir_sample.json		whois_rir_sample.json
whois_rir_sample.mmdb		whois_rir_sample.mmdb

README.md

WHOIS Database

Comprehensive, contextual and updated WHOIS data to lookup IP address and domain ownership, point of contact, organization, networks etc.

Database Schema & Description

[data updated as of August, 2022]

The following database schema represents the CSV database. We also provide JSON and MMDB format data.

Expand each section to learn about each database.

RIR WHOIS

RIR WHOIS data is created by parsing IP WHOIS data from the regional Internet Registries. Aside from normalizing and structuring the data from different RIR, we include additional contexts and insights.

Field Name	Example	Data Type	Notes
`range`	45.142.160.224-45.142.161.255	TEXT	IP Address range/netblock
`id`	PL-DOMYNET-NETWORK	TEXT	Raw netblock identifier from WHOIS
`name`	DomyNet Sp. z o.o.	TEXT	Name of netblock
`country`	PL	TEXT	ISO 3166 country code
`status`	ASSIGNED PA	TEXT	Range assignment type (RIPE’s documentation)
`tech`	PK9274-RIPE	TEXT	ID for technical contact of WHOIS record
`maintainer`	MNT-PL-DOMYNET-1	TEXT	ID for contact authorized to update WHOIS record for netblock
`admin`	PK9274-RIPE	TEXT	ID for administrative contact of netblock
`source`	ripe	TEXT	RIR associated with record (RIPE, ARIN, etc.)
`whois_domain`	domynet.pl	TEXT	Domain name (from WHOIS entry)
`updated`	2020-01-09	TEXT	Last updated date (taken from WHOIS entry)
`org`	ORG-DSZO39-RIPE	TEXT	ID or name of organization responsible for netblock
`rdns_domain`	domynet.pl	TEXT	Domain associated with IP range (only available if a majority of IPs within range share a common reverse DNS domain)
`domain`	domynet.pl	TEXT	Domain associated with netblock (based on our data sets)
`geoloc`	52.2260524 20.9941955	TEXT	Latitude/longitude coordinates indicating where users of network are located
`org_address`	ul. Lindleya 16/301 02-013 Warszawa POLAND	TEXT	Address of the associated organization
`asn`	AS208348	TEXT	Autonomous system number for organization that routes traffic for IP (based on BGP routing data)
`as_name`	DomyNet Sp. z o.o.	TEXT	Name of AS (based on our data sets and data processing)
`as_domain`	domynet.pl	TEXT	Domain of AS (based on our data sets and data processing)
`as_type`	isp	TEXT	ISP, business, or hosting (based on around 20 different features and our custom training set)

RWHOIS

The ARIN region (North America) is special in that it allows ISPs and LIRs to maintain their own database instead of reporting assignments to ARIN. This database is called Referral WHOIS or RWHOIS. To cover this case we fetch data from RWHOIS servers and normalize it in a standard set of fields.

Field Name	Example	Data Type	Notes
`range`	50.28.18.195	TEXT	IP Address range/netblock
`id`	NETBLK-GRADOCEROPUB.50.28.18.195/32	TEXT	Raw netblock identifier from WHOIS
`name`	Grado Cero Publicidad S.A. de C.V.	TEXT	Name of netblock
`descr`	GRADOCEROPUB-50.28.18.195	TEXT	Description
`host`	rwhois.liquidweb.com:4321	TEXT	Host information
`country`	MX	TEXT	ISO 3166 country code
`email`	[email protected]	TEXT	Contact email information
`abuse`	[email protected]	TEXT	Abuse email information
`domain`	gradocero.com	TEXT	Domain associated with the netblock
`country.1`	MX	TEXT	Secondary country information
`city`	Naucalpan de Juarez	TEXT	City information
`street`	Calle Andes #46	TEXT	Street information
`postal`	53125	TEXT	Postal Code information
`updated`	2021-01-26 00:00:00	TEXT	Update date in the WHOIS registry
`imported`	2021-01-27 04:44:47.206483	TEXT	Imported date in the WHOIS registry

WHOIS ASN (Autonomous System Numbers)

ASN registration information (aut-num objects).

Field Name	Example	Data Type	Notes
`id`	AS3670	TEXT	ASN information
`name`	Optimum Group	TEXT	Name of the netblock
`country`	US	TEXT	ISO 3166 country code
`org_id`	OPT	TEXT	Organization id of the netblock
`created`	1994-06-10	TEXT	Created date in the WHOIS registry
`updated`	1995-12-08	TEXT	Update date in the WHOIS registry
`source`	arin	TEXT	RIR associated with the record
`raw`	ASHandle: AS3670 OrgID: PT A...	TEXT	Raw data field

WHOIS MNT (Maintainer)

Field Name	Example	Data Type	Notes
`id`	NETFIL-MNT	TEXT	ID for the contact authorized to update record
`name`	NETFIL SRL BULEVARDUL RACOTEANU NR.163A FILI...	TEXT	Name and information of the mnt contact
`admin_id`	VD1057-RIPE	TEXT	Administrative contact id of the netblock
`tech_id`	VD1057-RIPE	TEXT	Technical contact id of the netblock
`org_id`	ORG-NS89-RIPE	TEXT	Organization responsible for the netblock
`created`	2010-04-14	TEXT	Created date in the WHOIS registry
`updated`	2010-04-14	TEXT	Updated date in the WHOIS registry
`source`	ripe	TEXT	RIR associated with the record
`raw`	mntner: NETFIL-MNT descr: NE...	TEXT	Raw data field

updated and created values can be set to datetime data type.

WHOIS NET (Networks)

Network information from WHOIS registry

Field Name	Example	Data Type	Notes
`range`	148.59.204.0/23	TEXT	Netblock range
`id`	IN	TEXT	Raw netblock identifier from WHOIS
`name`	iTel Networks Inc	TEXT	Name of the netblock
`country`	CA	TEXT	ISO 3166 country code
`domain`	itel.com	TEXT	Domain associated with the netblock
`org_id`	IN	TEXT	Organization id of the netblock in the RIR db
`status`	ALLOCATION	TEXT	Range assignment type (see details)
`tech_id`	ABO24-ARIN JONAS30-ARIN RINKD-ARIN TRIGG15-...	TEXT	ID for technical contact
`mnt_id`	ITELN-ARIN	TEXT	ID for contact authorized to update the record
`admin_id`	RINKD-ARIN	TEXT	Administrative contact id of the netblock
`abuse_id`	ABUSE3422-ARIN	TEXT	Abuse contact id of the netblock
`created`	2016-10-07	TEXT	Created date in the WHOIS registry
`updated`	2016-10-07	TEXT	Updated date in the WHOIS registry
`source`	arin	TEXT	RIR associated with the record
`raw`	NetHandle: NET-148-59-204-0-1 OrgID: ...	TEXT	Raw data field

updated and created values can be set to datetime data type.

WHOIS ORG (Organization)

Organization information from WHOIS registry

Field Name	Example	Data Type	Notes
`id`	CTC-7	TEXT	ID of the organization responsible for the netblock
`name`	Communications Technology Center	TEXT	Name of the organization responsible for the netblock
`address`		TEXT	Address information of the organization
`street`	IT Division PO Box 42495	TEXT	Street address information of the organization
`city`	Olympia	TEXT	City of the organization
`state`	WA	TEXT	State / Region of the organization
`postalcode`	98504-2495	TEXT	Postal code information of the organization
`country`	US	TEXT	ISO 3166 country code
`admin_id`	NIEDK-ARIN	TEXT	Administrative contact id of the netblock
`tech_id`	NIEDK-ARIN	TEXT	Technical contact ID of the netblock
`abuse_id`	ABUSE135-ARIN NIEDK-ARIN	TEXT	Abuse contact ID of the netblock
`mnt_id`	NIEDK-ARIN	TEXT	ID for the contact authorized to update record
`email`		TEXT	Email information of the organization
`domain`	sbctc.edu	TEXT	Domain associated with the netblock
`created`	1994-04-19	TEXT	Created date in the WHOIS registry
`updated`	2015-11-24	TEXT	Updated date in the WHOIS registry
`source`	arin	TEXT	RIR associated with the record
`raw`	OrgID: CTC-7 OrgName: Communi...	TEXT	Raw data field

updated and created values can be set to datetime data type.

WHOIS POC (Point of Contact)

WHOIS database registry from point of contact

Field Name	Example	Data Type	Notes
`id`	TRONT-ARIN	TEXT	ID of the netblock owner
`name`	Matthew Tront	TEXT	Name of the point of contact of the organization responsible for the netblock
`mobilephone`	+1-302-521-3780	TEXT	Organizational mobile phone number of the point of contact
`officephone`	+1-215-873-2200	TEXT	Organizational office phone number of the point of contact
`fax`	+1-215-645-0383	TEXT	Organizational fax number of the point of contact
`address`	US, PA, Philadelphia, 456 North 5th St., 19123	TEXT	Address of the point of contact of the netblock owner
`country`	US	TEXT	ISO 3166 country code
`email`	[email protected]	TEXT	Email of the point of contact of the netblock owner
`abuse_email`	[email protected]	TEXT	Abuse contact of the point of contact of the netblock owner
`created`	2014-11-12	TEXT	Created date in the WHOIS registry
`updated`	2014-11-12	TEXT	Updated date in the WHOIS registry
`source`	arin	TEXT	RIR associated with the record
`raw`	POCHandle: TRONT-ARIN IsRole: …	TEXT	Raw data field

updated and created values can be set to datetime data type.

API Response

As well as the database product, IPinfo also provides a robust API service. Please visit the IPinfo Documentation portal to learn more.