Datacenter & Hosting IP Database

The IP to Hosting Database contains the IP ranges of 29,206 hosting, cloud and datacenter providers, from Amazon AWS, Microsoft Azure and Google Cloud to thousands of small VPS hosts. People browse the web from home, office and mobile networks. Traffic from a datacenter is a server talking: a bot, a scraper, a proxy or a VPN. That makes "does this IP address belong to a hosting provider?" one of the strongest and simplest signals for bot detection and fraud prevention.

• 564,507 IPv4 and 769,680 IPv6 ranges, each with the provider's name and domain
• Cloud providers, VPS and dedicated server hosts, CDNs, DDoS protection, IP leasing companies and PaaS platforms
• An index of all providers with the size of their address space
• Thousands of small and new hosting providers that no published IP range list contains
• Rebuilt every day, in CSV and MMDB format
• The same data as the is_datacenter field of the ipapi.is API

{
  "is_datacenter": true,
  "datacenter": {
    "datacenter": "Microsoft Azure",
    "network": "20.96.0.0/11",
    "name": "AzureCloud",
    "region": "",
    "regionId": 0,
    "platform": "Azure",
    "systemService": ""
  }
}

# Use Cases

Anyone can rent a server in minutes, usually without proving who they are, and get a fresh IP address with it. That is why so much automated traffic comes from datacenters: scrapers, credential stuffing tools, spam bots, VPN and proxy servers. Knowing which addresses belong to a datacenter helps you to:

# Purchase Database

Create a free account, subscribe in your dashboard with a card or PayPal, and download the database right away, in every format it comes in. The subscription is billed monthly and can be canceled at any time. Updates are included: your personal download link always serves the latest release, so one scheduled command keeps your copy current. See pricing and the terms.

Need more than one database? The Business plan includes all seven databases ($563 per month if bought separately), the largest standard API plan and the right to run the API on your own servers, for $200 per month.

# Database Format

The IPv4 and the IPv6 ranges are in separate files, HostingRangesIPv4 and HostingRangesIPv6, each in CSV and MMDB format, with these columns:

The CSV package also contains HostingProviders.csv, an index of all 29,206 providers with their domain and the number of IPv4 and IPv6 addresses they hold (orgName, domain, numIPv4, numIPv6), largest first. An address that is not in the database is not known to belong to a hosting provider.

An excerpt of the IPv4 CSV file:

startIp,endIp,ipVersion,datacenter,domain
8.213.164.0,8.213.167.255,4,Alibaba Cloud,alibabacloud.com
81.68.64.0,81.68.127.255,4,Tencent Cloud,tencentcloud.com
45.199.153.0,45.199.153.255,4,Cloud Innovation Ltd,cloudinnovation.org
5.9.15.200,5.9.15.207,4,Hetzner Online GmbH,hetzner.com
23.26.134.0,23.26.134.255,4,Internet Utilities NA LLC,netutils.io
5.39.54.64,5.39.54.95,4,OVH SAS,ovhcloud.com
78.108.60.0,78.108.63.255,4,Internet Utilities Europe and Asia Limited,ipxo.com
144.230.96.0,144.230.127.255,4,"Rackdog, LLC",rackdog.com
36.53.42.0,36.53.42.255,4,SAKURA Internet Inc.,sakura.ad.jp
104.108.48.0,104.108.63.255,4,"Akamai International, BV",akamai.com
217.217.16.0,217.217.31.255,4,TerraTransit AG,terratransit.de
216.133.0.0,216.133.63.255,4,IPNetZone,ipnetzone.com

# How to Use the IP to Hosting Database

Download the IPv4 sample in MMDB format:

curl -O https://ipapi.is/data/samples/HostingRangesIPv4-Sample.mmdb

Look up an IP address with mmdbctl:

mmdbctl read -f json-pretty 8.213.164.10 HostingRangesIPv4-Sample.mmdb

which outputs:

{
  "datacenter": "Alibaba Cloud",
  "domain": "alibabacloud.com",
  "ip": "8.213.164.10",
  "ipVersion": "4",
  "network": "8.213.164.0-8.213.167.255"
}

The MMDB format can be read by the MaxMind DB reader library of every major programming language. In Python:

import maxminddb  # pip install maxminddb

reader = maxminddb.open_database('HostingRangesIPv4-Sample.mmdb')
record = reader.get('203.0.113.7')
if record:
    print('Datacenter:', record['datacenter'], record['domain'])
else:
    print('Not a known hosting range')

# What is Hosting Detection?

Hosting detection determines whether an IP address belongs to a hosting provider: a company that rents out servers, virtual machines or cloud services rather than connecting people to the Internet. In the ipapi.is API, the answer is the is_datacenter field, and the datacenter object names the provider. Some of the providers in the database:

• Amazon AWS
• Google Cloud
• Hetzner Online GmbH
• DigitalOcean
• Cloudflare

The database counts every kind of infrastructure provider as hosting:

• Hosting and dedicated server providers such as Hetzner or Leaseweb
• Cloud providers such as Amazon AWS or Microsoft Azure
• Content Delivery Networks such as Cloudflare or Fastly
• DDoS protection services such as Qrator or DDoS-Guard
• IP leasing companies such as IPXO or InterLIR
• Platforms such as Fly.io or Heroku

# How the Data is Collected

Every IP address is assigned to an organization, and the Regional Internet Registries such as ARIN, RIPE NCC and APNIC record which one in their WHOIS databases. The question is which of these hundreds of thousands of organizations are hosting providers. WHOIS records do not say, so the database combines several methods:

• Published IP ranges: many large providers publish their address ranges, for example Amazon AWS, Google Cloud, Microsoft Azure, DigitalOcean and Linode. Hundreds of such feeds are collected.
• Classification of every network owner: our classifier reads the website and the registry records of the organizations that hold IP addresses and decides whether they sell hosting. This finds the thousands of small providers that publish nothing. How it works is described in this article.
• Reverse DNS: our crawl of the reverse DNS records of every IPv4 address reveals server names such as static.1.2.3.4.clients.your-server.de.
• The hosts of popular websites: whoever hosts the most visited websites of the Internet is checked, which uncovers providers that are missing.
• Open source lists such as ipcat, ip-index and X4BNet lists serve as a cross-check.

Each method alone produces false positives, for example ISPs that also sell a few servers. Combining them, and keeping each provider tied to the ranges it actually holds, keeps the database precise.

# IP to Hosting Package (npm)

The ip-to-hosting npm package tells you in Node.js whether an IP address belongs to a hosting provider.

# Frequently Asked Questions

# List of Hosting Providers

The 2,000 largest hosting providers of the Internet. All 29,206 are in the database.