IP to Hosting Database

# IP to Hosting Database

The IP to Hosting Database contains all known hosting / cloud IP ranges of the Internet. The database is continuously updated and new hosting / cloud providers are added as soon as they emerge. The database considers all of the following services as hosting providers:

• Normal hosting providers such as Hetzner.de or Leaseweb.com
• Large cloud providers such as Amazon AWS or Microsoft Azure
• Content Delivery Networks such as Cloudflare, Fastly or edg.io
• Anti-DDOS services such as qrator.net or ddos-guard.net
• IP leasing organizations such as ipxo.com or interlir.com
• Other SaaS, IaaS, or PaaS organizations such as fly.io or Heroku

Purchase IP to Hosting Database (49$ / month)

# Introduction

Ipapi.is strongly emphasizes hosting detection. Hosting detection is the process of determining whether an IP address belongs to a hosting provider. Knowing whether an IP address is associated with a hosting or cloud provider carries significant IT security implications. A sophisticated hosting detection algorithm was developed to identify thousands of new and lesser-known hosting providers across the entire Internet.

Information on whether an IP address belongs to a hosting provider is displayed directly in the API output in the is_datacenter field. For example, the following IP addresses are all associated with hosting or cloud providers:

• 94.130.228.239 - Hetzner Online GmbH
• 156.224.19.121 - Arosscloud INC
• 149.88.110.171 - Datacamp Limited
• 217.182.121.212 - Raiola Networks SL
• 45.79.150.128 - Linode

Click on the button below in order to view all currently tracked hosting providers:

# How does Hosting Detection Work?

Each IP address on the Internet is owned or administered by an organization or institute. This organization can be privately owned or part of a nonprofit organization. Regional Internet Registries (RIRs) such as ARIN, RIPE NCC, or APNIC store this information in WHOIS databases.

Therefore, it is possible to map each IP address on the Internet to its administrative organization. The next step is to determine whether this organization is a hosting provider or not. This step is particularly challenging since WHOIS information does not directly include this detail. Often, WHOIS records only contain the bare minimum of information about organizations for privacy reasons.

Most WHOIS databases store IP ranges in NetRange or inetnum objects. These objects are usually linked to an organization name. Based on this linked organization name, a hosting provider classification must be made. Any other approach leads to the problem that the corresponding IP ranges are hard to identify. Put differently: The organization name from WHOIS records can only be extracted in such a way that a direct link to the IP range remains intact. Otherwise, IP ranges could not be classified.

Several different strategies are pursued in order to determine if an organization is a hosting provider or not:

• The least efficient method is to manually label organizations as hosting providers. This is practically impossible, since the Internet is constantly evolving and manually labeling hundreds of thousands of organizations is not an efficient process.
• A more efficient method is to automatically label organizations as hosting providers based on metadata such as organization name, organization domain, organization website with HTML text and HTML meta tags as input. For this purpose, ipapi.is constantly monitors websites of all major network-owning organizations of the Internet. This requires crawling hundreds of thousands of websites on a monthly basis. The hosting detection algorithm is described in a dedicated blog article.
• Many large hosting providers publish their IP ranges on their website. Hundreds of such feeds are used. Examples:
  • Google Cloud IP Ranges
  • Azure IP Ranges
  • Amazon AWS IP Ranges
  • DigitalOcean IP Ranges
  • Linode IP Ranges
• Another approach is to consider the work of open-source projects that attempt to find hosting IP addresses. Examples of such projects are:
  • github.com/client9/ipcat
  • github.com/Umkus/ip-index
  • github.com/X4BNet/lists_vpn

By employing the above strategies, thousands of hosting providers and their IP networks are tracked. This data collection and data labeling process is time-consuming and is prone to false positives. ipapi.is focuses on false positive reduction and provides the most comprehensive hosting provider database on the Internet.

# Why is Hosting Detection important?

Often, hosting providers allow their clients to purchase computing and networking resources without providing any form of identification. Those resources are often abused for the following malicious purposes:

• Hosting VPN and proxy servers
• Scanning and crawling software
• Malware and viruses
• Bots
• VNC or Remote Desktop Servers

Hosting providers can give cybercriminals the necessary infrastructure to launch attacks on the Internet. Knowing whether an IP address belongs to a hosting provider is therefore essential for security purposes. As a general rule of thumb, there is no good reason to allow traffic on your website or app to originate from hosting IP ranges.

# IP to Hosting Package (npm)

The ip-to-hosting npm package gives you an accurate tool to determine if an IP address belongs to a hosting provider or not.

# Hosting Database Format

The file format of the hosting ranges database is in CSV format and contains the following fields:

• ip_version - Either 4 (IPv4) or 6 (IPv6), determining the IP type of the network.
• startIp - The start IP address of the range in string format. Example: 45.59.132.0
• endIp - The end IP address of the range in string format. Example: 45.59.135.255
• datacenter - The name of the hosting / cloud provider. Example: PureVoltage Hosting Inc.
• domain - The domain name of the hosting / cloud provider. Example: purevoltage.com

In order to learn how to download & parse the database, read the documentation. The following example contains an small excerpt of the entire database:

4,185.100.3.0,185.100.3.255,VeriSign Inc.,www.verisign.com
4,95.138.138.88,95.138.138.95,RSPC-UK-MAGNETIZE-CONSULTANTS-LTD IP Space,www.rackspace.com
4,212.114.82.64,212.114.82.127,OSN Online Service Nuernberg GmbH,osn.de
4,104.28.115.93,104.28.115.93,iCloud Private Relay,
4,81.27.213.128,81.27.213.135,Netip A/S,netip.dk
4,46.17.9.0,46.17.9.255,Ospito B.V.,ospito.nl
4,77.232.134.0,77.232.134.255,timeweb.net,
4,80.88.198.0,80.88.198.255,OrbitalNet Virtual Hosts site 2,orbital.net
4,45.59.132.0,45.59.135.255,PureVoltage Hosting Inc.,purevoltage.com
4,89.234.46.80,89.234.46.87,Centric Telecom Limited,rackspace.com
4,52.150.139.128,52.150.139.143,Microsoft Azure,
4,118.99.188.128,118.99.188.191,SaveCom International Inc.,www.savecom.net.tw
4,115.236.74.192,115.236.74.195,"Hangzhou hundred township edge agricultural development co., LTD",
4,104.28.127.54,104.28.127.54,iCloud Private Relay,
4,195.182.58.0,195.182.58.255,velia.net (HK) Ltd,velia.net
4,92.48.76.134,92.48.76.135,EUKHost customer server,www.eukhost.com
4,154.66.217.16,154.66.217.23,UG Airtel Servers,
4,104.28.65.47,104.28.65.47,iCloud Private Relay,
4,20.37.76.200,20.37.76.203,Microsoft Azure,
4,185.109.170.208,185.109.170.215,UK Dedicated Servers LTD,www.ukservers.com
4,46.247.142.0,46.247.159.255,"Mouk, LLC",mouk.net
4,83.69.205.140,83.69.205.143,Mastertel Network For MarioMikke,mastertel.ru
4,80.156.186.0,80.156.186.255,Veniris Cloud GmbH,
4,134.213.38.52,134.213.38.55,RSPC-UK-BDO IP Space,www.rackspace.com
4,5.23.52.0,5.23.52.255,TimeWeb Co. LTD,timeweb.com
4,104.28.100.62,104.28.100.62,iCloud Private Relay,
4,45.121.192.0,45.121.192.255,UDomain Web Hosting Company Ltd,
4,120.136.58.0,120.136.58.255,Solarix Network's Limited,solarix.net.nz
4,77.95.228.49,77.95.228.49,Snel.com B.V.,www.snel.com
4,54.37.143.204,54.37.143.207,OU IPHOSTER,
4,65.55.33.176,65.55.33.191,Microsoft Azure,
4,77.93.240.200,77.93.240.203,IRIDEOS S.P.A.,irideos.it
4,104.28.92.51,104.28.92.51,iCloud Private Relay,
4,89.234.11.144,89.234.11.151,Centric Telecom Limited,rackspace.com

# List of Hosting Providers

The table below lists the top 2000 hosting providers of the Internet.