How often is the data rebuilt?

Daily for most databases, and weekly for IP RWHOIS, IP RDNS, SSH IP, SMTP IP, DNS Resolver IP, Web IP, Domain List, Domain DNS and IP Hosted Domains. The database API says when each one last changed, so you fetch a file only when there's a new one.

Are any of the databases free?

Yes: Tor IP, Relay IP, IP ASN, ASN, IP Country, IP Timezone, IP Country Flag, IP Country Currency, Anycast IP, Bogon IP and Bogon ASN are free with an account, under CC BY-SA 4.0, and download from the console as soon as you sign up.

Can we see the data before we commit?

Yes. Every database's page shows real rows from it, and on a licensed one Download sample gets you a file of its current rows, or for Residential Proxy IP and Mobile Proxy IP asks us for a slice. An evaluation license puts the whole database in your hands for a fixed period under NDA, then converts into whichever license fits.

Can we resell or embed the data?

Yes, under a redistribution license. Your license type shows against each database you hold in the console: Evaluation, Standard or Redistribution.

Do the MMDB files work with our existing readers?

Yes, through a reader's generic lookup: they're MaxMind DB files, so libmaxminddb and the maxminddb libraries open them, and each database's docs name its fields. A GeoIP2 reader's city() or country() expects MaxMind's own field layout, which ours doesn't follow.

What happens when a classification is wrong?

Send us the address and what you saw. We check it, and where we agree the fix lands in the next update of that database, and we tell you which one carries it.

Trusted IP data and domain intelligence.

See where any IP address is, whose network it's on and whether it's a VPN, proxy or Tor exit. Ask the API about any address, AS or domain, or download the databases and run them yourself.

Get a free API key Browse databasesUnlimited lookups, no key needed

Full catalog →

start_ip	end_ip	provider	confidence	last_seen
216.131.87.112	216.131.87.127	ipvanish	high	2026-09-08
208.85.18.71	208.85.18.71	tunnelbear	high	2026-09-07
187.13.129.184	187.13.129.187	nordvpn	high	2026-09-07
172.235.240.0	172.235.240.11	metrovpn_net	medium	2026-09-04
95.170.13.20	95.170.13.23	pingvpn_pingsecure	low	2026-06-16

vpn_ip_v1

Entries

14,497,907

Refresh

Daily

CSVGZ

100 MB

MMDB

84.94 MB

Look up any IP address, AS or domain.

Type any IP address and see what our databases hold on it: its location, the network and company behind it, any VPN, proxy or Tor, and the servers it runs. An AS or a domain works too.

GETapi.internetdata.io/

Pick an example below, or type an address, an AS number or a domain above.

Examples

Every page here has the same JSON: swap the site for api.internetdata.io in its address.

Ask about any address, network or domain in one GET.

Unlimited needs no key and has no cap. A paid plan answers every field, from VPN and proxy flags to WHOIS, and a free account gets them for its first 100 lookups each day.

curl "https://api.internetdata.io/146.70.116.130"

GET /8.8.8.8

One address, IPv4 or IPv6.

GET /AS15169

One AS: its registry row, and on a paid plan its routes and WHOIS.

GET /example.com

One domain: registered or not, and which records it has; on a paid plan the records.

GET /myip

The address the request came from.

POST /batch

Up to 1,000 of any of them in one call, on a paid plan.

The API What each plan answers

{
  "ip": "146.70.116.130",
  "is_bogon": false,
  "is_tor": false,
  "is_relay": false,
  "is_anycast": false,
  "is_carrier": false,
  "is_satellite": false,
  "is_ssh": false,
  "is_smtp": false,
  "is_web": false,
  "is_dns_resolver": false,
  "is_bittorrent": false,
  "location": {
    "continent": "EU",
    "continent_name": "Europe",
    "country": "AT",
    "country_name": "Austria",
    "timezone": "Europe/Vienna",
    "currency_code": "EUR",
    "currency_name": "Euro",
    "currency_symbol": "€",
    "flag_emoji": "🇦🇹",
    "flag_unicode": "U+1F1E6 U+1F1F9"
  },
  "tor": {},
  "relay": {},
  "asn": {
    "asn": 9009,
    "name": "M247 Europe SRL",
    "domain": "m247global.com",
    "type": "hosting",
    "prefix": "146.70.116.0/24"
  },
  "company": {
    "name": "M247 LTD Vienna Infrastructure",
    "domain": "m247.ro"
  },
  "hostname": "",
  "abuse": {
    "email": "abuse@m247.ro"
  }
}

Anonymity

The service behind the address, by name.

On a paid plan the answer names the VPN or proxy service an address belongs to, so a rule can single one out.

135M

anonymous IPs

481M

hosting IPs

6.4K

providers

Daily

update frequency

NordVPN

Proton VPN

ExpressVPN

Surfshark

Mullvad

CyberGhost

Private Internet Access

Windscribe

IPVanish

TunnelBear

hide.me

PureVPN

Hotspot Shield

VyprVPN

Mozilla VPN

Norton VPN

Psiphon

Bright Data

Oxylabs

Decodo

IPRoyal

SOAX

Webshare

Rayobyte

DataImpulse

Proxy-Cheap

PacketStream

Infatica

ProxyEmpire

Massive

Shifter

Zyte

Ownership

Every record behind an address.

Look up any address for who holds the range, who uses it, which AS announces it and where to send an abuse report.

10M

ranges with the company using them

12M

registry records

1.5M

announced ranges

4.2M

ranges with an abuse contact

1.2B

reverse DNS names

Used byAPNIC and Cloudflare DNS Resolver project · cloudflare.comHostingIP Company
Announced byAS13335 Cloudflare, Inc. · 1.1.1.0/24RPKI validIP ASN
AS recordCLOUDFLARENET · ARINASN Whois
Registered toAPNIC Research and Development · APNIC-LABS · APNICIP Whois
Reassigned toNo reassignment publishedIP RWHOIS
Abuse contacthelpdesk@apnic.netIP Abuse Contact
Reverse DNSone.one.one.oneIP RDNS

Network

Tell carrier, satellite, anycast and CDN addresses apart.

Each answer names the network behind the address: the mobile carrier by MCC and MNC, the satellite operator or the delivery network, and an anycast range answers from many places.

Carrier IP1Bcarrier IPs641 mobile networks in 211 countries310-410 AT&T262-01 Telekom440-10 NTT docomo208-01 Orange Satellite IP4.6Msatellite IPs51 operators, LEO to geostationary Anycast IP6.5Kanycast rangesEach one answers from many places at once.CDN IP21MCDN IPsThe edge space of 102 delivery networks

Geolocation

Every address, placed on the map.

Look up any address for its country, region and city, with the city's timezone and postal code, and an accuracy radius that says how close the point is.

3.7B

IPv4 addresses placed

250

countries and territories

58K

cities named

400

IANA timezones

GET /146.70.116.130

Place: Vienna, Austria
Coordinates: 48.20849, 16.37208
Accuracy radius: 10 km
Time zone: Europe/Vienna

Each dot is a 2° cell where IP Geolocation names at least one city.

"location": {
  "continent": "EU",
  "continent_name": "Europe",
  "country": "AT",
  "country_name": "Austria",
  "timezone": "Europe/Vienna",
  "currency_code": "EUR",
  "currency_name": "Euro",
  "currency_symbol": "€",
  "flag_emoji": "🇦🇹",
  "flag_unicode": "U+1F1E6 U+1F1F9",
  "region": "Vienna",
  "region_code": "AT-9",
  "city": "Vienna",
  "postal_code": "1230",
  "latitude": 48.20849,
  "longitude": 16.37208,
  "accuracy_radius": 10,
  "geoname_id": "2761369",
  "dma_code": "",
  "last_changed": "2026-10-06"
}

A paid plan adds the city and the lines below it; every plan answers the rest.

Services

What every address runs.

See what runs on an address: SSH, mail and web servers with their banners and certificates, open DNS resolvers and BitTorrent clients.

SSH IP24MSSH hostsEach one runs an SSH server on TCP 22.SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.19 SMTP IP3.2Mmail hostsEach one runs a mail server on TCP 587.220 zakix.com ESMTP Web IP87Mweb endpointsEach one serves TLS or HTTP on 443 or 80.awselb/2.0 · TLSv1.3 DNS Resolver IP6.7MresolversEach one answers DNS for anyone on UDP 53.rcode 0 · recursive BitTorrent IP59MaddressesEach one runs a BitTorrent client.LT · 38 ports

Domain

Every registered domain, and its DNS.

Every domain registered under the generic TLDs and under .ee, .fr, .nu, .se and .sk, and those in use under the other country codes, with the A, AAAA, MX, NS and CNAME records they resolve to and the domains each address hosts.

Domain List347Mregistered domainsRebuilt weekly, with no subdomains and no nameserver hosts.brandbuilding.comprepfuel.comtamalinstitute.orgtapngo.xyzxn--123-fj2et9f.com Domain DNS1.7BDNS recordsA file per record type, rebuilt weekly, with CNAMEs followed.AAAAAMXNSCNAME IP Hosted Domains31MIP addressesRebuilt weekly, each with how many domains it hosts and up to 1,000 of them.118.107.235.188148.251.176.15569.163.186.209186.202.87.1382a02:28f0:50cc:132::

Call the API in your language, with an official client.

All SDKs on GitHub →

Thirteen official clients, one for each language you ship in and one for the browser, plus middleware for fifteen web frameworks. Each answers private addresses without a request, caches what it looks up and splits big batches for you.

Node.js Web Python Go Java .NET PHP Ruby Rust Swift Erlang Perl Zig Express Fastify Next.js Django Flask FastAPI Laravel Symfony Rails Spring Boot ASP.NET Core net/http Gin axum Cowboy

Free, unlimited lookups. Every field on a paid plan.

Compare plans and licenses →

Unlimited

Free

No key or card needed

Unlimited lookups
Every field, 100 a day, with a free key

Location, ASN and service flagsPlus company, abuse email and hostname
Database downloadsThe Open databases
Support

Get a free API key

Starter

$39.00/mo

Billed monthly

250,000 lookups a month
Then $0.18 per 1,000 lookups

Every fieldAnonymity, city, WHOIS, services and domains
Database downloadsThe Open databases
Support48-hour response time

Get a free API key

ScaleMost popular

$199.00/mo

Billed monthly

2,000,000 lookups a month
Then $0.14 per 1,000 lookups

Every fieldAnonymity, city, WHOIS, services and domains
Database downloadsThe Open databases
Support24-hour response time

Get a free API key

Max

$399.00/mo

Billed monthly

5,000,000 lookups a month
Then $0.10 per 1,000 lookups

Every fieldAnonymity, city, WHOIS, services and domains
Database downloadsThe Open databases
Support12-hour response time

Get a free API key

Enterprise

Custom

Annual, priced to your volume

Custom lookup volume
Negotiated overage rate

Every fieldAnonymity, city, WHOIS, services and domains
Database downloadsEvery database, licensed per database
Priority supportNamed contact and agreed response times

Contact sales

Database licenses start at $49 a month, each database priced on its own. The licenses

Common questions

Read the docs →API reference →Email support →

On this page

Is there a lookup API?

Yes, at api.internetdata.io: any IP address, AS or domain as JSON, with no key needed on Unlimited and every field on a paid plan. The API page has the endpoints and limits.

00 · Unlimited

Unlimited lookups, no sign-up.

Paste it into a terminal. Any address answers with its country, network, company and hostname, with no key and no daily or monthly cap. ASes and domains answer too.

curl https://api.internetdata.io/8.8.8.8

{
  "ip": "8.8.8.8",
  "is_tor": false,
  "is_anycast": true,
  "is_dns_resolver": true,
  "location": {
    "country": "US", ...
  },
  "asn": { "asn": 15169, ... },
  "hostname": "dns.google"
}

01 · Every field

All of the data on a paid plan.

VPN, proxy, hosting and CDN flags, each naming the operator.

Location to the city, with coordinates and an accuracy radius.

WHOIS records, the whole abuse contact and the services an address runs.

Up to 1,000 addresses, ASes and domains in one request.

A free API key answers every field for its first 100 lookups each day, with no card.

See pricing Get a free API key