Skip to content
InternetData

Every IP range a company owns, looked up by its domain.

Each IPv4 and IPv6 range an organization owns or uses, keyed by its own domain, one CIDR per row, with the name and country registered for the range: the company itself, or one of its subsidiaries or offices, the small blocks its providers assigned to it included. A second file lists the domains that redirect to a company's own, so a brand's other names lead to its ranges too. Rebuilt daily.

Request evaluation

Schema at a glance.

See documentation →

The schema and metadata are in the docs. It is published as CSVGZ.

rangedomainnamecountry
56.155.0.0/16amazon.comAmazon Data Services OsakaJP
2001:1890:1c12:9600::/55apple.comAPPLE INCUS
139.15.0.0/16bosch.comRobert Bosch Gesellschaft mit Beschraenkter HaftungDE
170.149.0.0/17nytimes.comThe New York Times CompanyUS
97.67.74.80/29nytimes.comThe New York Times IncUS
ID
domain_ip_ranges_v1
Entries
8,281,269
Refresh
Daily
CSVGZ
48.29 MB
Domain IP Ranges Alias

Domain IP Ranges Alias

Domain IP Ranges Alias documentation →
domainredirects_to
a2sb.comfirstmerchants.com
chobanihealthprofessionals.comchobani.com
choicelinx.comcigna.com
sxrewards.comsixt.com
times.comnytimes.com
ID
domain_ip_ranges_alias_v1
Entries
61,368
Refresh
Daily
CSVGZ
511 KB

Downloading it from code.

Database API reference →

One call gets you the current Domain IP Ranges build. Every official client wraps it three ways: straight to disk, a time-limited link you hand to your own runner, or bytes in memory, and checksums() returns the published digests to verify it against.

download()
Streams the current build to a file, which lands only once the whole transfer has arrived, so a failed one never leaves a truncated file behind.
downloadUrl()
The time-limited link the API redirects to, for your own downloader, a job runner or a CDN pull.
downloadBytes()
The build in memory, for a small database or a pipeline that never touches a filesystem.
metadata()
Row count, file sizes and when the build last updated. Poll it and fetch only when a new one has landed.
checksums()
The md5, sha1, sha256 and sha512 digests of one file, to verify it once it lands.
import os
from internetdata import InternetData
client = InternetData(os.environ["INTERNETDATA_API_KEY"])
# what is in today's build, without moving the file
meta = client.database.metadata("domain_ip_ranges_v1")
client.database.download("domain_ip_ranges_v1", "csvgz", "./domain_ip_ranges_v1.csv.gz")
sums = client.database.checksums("domain_ip_ranges_v1", "csvgz")
print(meta.updated, meta.entries, sums["sha256"])
load.pypip install internetdata
Also available for .NET, Ruby, Rust, Swift, Erlang, Perl and Zig. See all on GitHub →

Getting your hands on it.

Teams join Domain IP Ranges against traffic they already log, inside their own infrastructure, and never send an address anywhere to get an answer.

Attack surface mapping

Start from a company's domain and list every range it owns, the blocks its ISPs assigned to it included, before you scope a test or a scan.

Partner allowlists

Allow or block a vendor's or a partner's whole network by its domain, rather than chasing its addresses one at a time.

Company research

See how much address space a company or a prospect holds, where it's registered, and which subsidiaries hold the rest.

License the full database
Sales will quote on volume, term and whether you need redistribution rights.
Checksums published per file: md5, sha1, sha256 and sha512.
The ID fixes the schema, so a new build never changes the columns your parser reads.
Samples are cut from the current build, not a synthetic extract.

An official client for every major language.

All SDKs on GitHub →

Twelve official clients for the languages you ship in, each wrapping the database endpoints: list what you're licensed for, poll a build, follow the download redirect and verify what landed. Install commands are in the docs.

On this page

What does a row tell us?

One CIDR the organization behind domain owns or uses, with the name and country registered for it: the company itself, or a subsidiary or an office of it under its own name.

00 · Evaluate

Test the real build first.

An evaluation license puts a full current build in your hands, with no sampling, so you can measure it against your own traffic before anyone talks about terms.

Request evaluation
01 · License

Then license what you use.

Standard, for detection and decisions inside your own product and operations.
Redistribution, when the data ships onward inside what you sell, priced by scope rather than by seat.
Annual terms, a named contact, and monthly, quarterly or yearly payment.