Why two flag columns?

flag_emoji for systems that render emoji, flag_unicode for logs and terminals that take only plain text.

Open

Every IP range, with its country's flag.

Every IPv4 and IPv6 range matched to its country, with the flag as both an emoji and its Unicode code points, so it can be logged as plain text where emoji aren't an option.

In the lookup API: location.flag_emoji and location.flag_unicode, on every plan, free included.

Real rows, with what each column means.

See documentation →

The schema and metadata are in the docs. It is published as CSVGZ and MMDB.

start_ip	end_ip	country	country_name	flag_emoji	flag_unicode
37.59.158.52	37.59.158.55	ES	Spain	🇪🇸	U+1F1EA U+1F1F8
201.35.200.208	201.35.200.215	BR	Brazil	🇧🇷	U+1F1E7 U+1F1F7
1.0.0.0	1.0.0.255	AU	Australia	🇦🇺	U+1F1E6 U+1F1FA
2a09:4c0:3e0:20::	2a09:4c0:3e0:20:ffff:ffff:ffff:ffff	FI	Finland	🇫🇮	U+1F1EB U+1F1EE
2001:470:19:d7::	2001:470:19:d7:ffff:ffff:ffff:ffff	CN	China	🇨🇳	U+1F1E8 U+1F1F3

ip_country_flag_v1

Entries

925,665

Refresh

Daily

CSVGZ

7.40 MB

MMDB

3.97 MB

Download it from your code in one call.

Database API reference →

Every official client fetches the current IP Country Flag build to disk, as a link for your own runner or into memory, and checks it against its published checksums.

download()

Streams the current build to a file, which lands only once the whole transfer has arrived, so a failed one never leaves a truncated file behind.

downloadUrl()

The time-limited link the API redirects to, for your own downloader, a job runner or a CDN pull.

downloadBytes()

The build in memory, for a small database or a pipeline that never touches a filesystem.

metadata()

Row count, file sizes and when the build last updated. Poll it and fetch only when a new one has landed.

checksums()

The md5, sha1, sha256 and sha512 digests of one file, to verify it once it lands.

import os
from internetdata import InternetData
 
client = InternetData(os.environ["INTERNETDATA_API_KEY"])
 
# what is in today's build, without moving the file
meta = client.database.metadata("ip_country_flag_v1")
 
client.database.download("ip_country_flag_v1", "mmdb", "./ip_country_flag_v1.mmdb")
sums = client.database.checksums("ip_country_flag_v1", "mmdb")
print(meta.updated, meta.entries, sums["sha256"])

load.pypip install internetdata

Also available for .NET, Ruby, Rust, Swift, Erlang, Perl and Zig. See all on GitHub →

Put it to work in your own systems.

Free with an account, and the file is yours: teams join IP Country Flag against the traffic, logs and routing data they already hold, inside their own infrastructure.

Interface localization

Show a flag next to a country name in a picker, a billing address or an account list without shipping your own icon set.

Free with an account

Checksums published per file: md5, sha1, sha256 and sha512.

The ID fixes the schema, so a new build never changes the columns your parser reads.

Call the API in your language, with an official client.

All SDKs on GitHub →

Thirteen official clients, one for each language you ship in and one for the browser, plus middleware for seven web frameworks. Each answers private addresses without a request, caches what it looks up and splits big batches for you.

Node.js Web Python Go Java .NET PHP Ruby Rust Swift Erlang Perl Zig Express Fastify Next.js Django Flask FastAPI Laravel Symfony Rails Spring Boot ASP.NET Core net/http Gin axum Cowboy

Common questions

Read the docs →API reference →Email support →

On this page

Where does the country come from?

It's the country IP Geolocation gives the same range, so the two files agree.

00 · Unlimited

Unlimited lookups, no sign-up.

Paste it into a terminal. Any address answers with its country, network, company and hostname, with no key and no daily or monthly cap. ASes and domains answer too.

curl https://api.internetdata.io/8.8.8.8

{
"ip": "8.8.8.8",
"is_bogon": false,
"is_tor": false,
"is_relay": false,
"is_anycast": true,
"is_carrier": false,
"is_satellite": false,
"is_ssh": false,
"is_smtp": false,
"is_web": true,
"is_dns_resolver": true,
"is_bittorrent": false,
"hostname": "dns.google",
"location": {
"continent": "NA",
"continent_name": "North America",
"country": "US",
"country_name": "United States",
"timezone": "America/Los_Angeles",
"currency_code": "USD",
"currency_name": "Dollar",
"currency_symbol": "$",
"flag_emoji": "🇺🇸",
"flag_unicode": "U+1F1FA U+1F1F8"
},
"asn": {
"asn": 15169,
"name": "Google LLC",
"domain": "google.com",
"type": "hosting",
"prefix": "8.8.8.0/24"
},
"company": {
"name": "Google LLC",
"domain": "google.com"
},
"tor": {},
"relay": {},
"abuse": {
"email": "network-abuse@google.com"
}
}

01 · Every field

All of the data on a paid plan.

VPN, proxy, hosting and CDN flags, each naming the operator.

Location to the city, with coordinates and an accuracy radius.

WHOIS records, the whole abuse contact and the services an address runs.

Up to 1,000 addresses, ASes and domains in one request.

A free API key answers every field for its first 100 lookups each day, with no card.

See pricing Get a free API key

Every IP range, with its country's flag.

Real rows, with what each column means.

Download it from your code in one call.

Put it to work in your own systems.

Interface localization

Call the API in your language, with an official client.

Common questions

Where does the country come from?

Why two flag columns?

How often is it rebuilt?

Which formats does a build ship in?

Is it really free?

Is there a lookup API?

What if a row looks wrong?

Unlimited lookups, no sign-up.

All of the data on a paid plan.