About WorldIP.io
A complete map of the IPv4 Internet — every address, every ASN, every organization.
Who we are
WorldIP.io is a production-grade IP intelligence platform built and operated by Tuxxin LLC. We map the entire IPv4 Internet — every address, network, and organization — from infrastructure we own and run, not a reseller feed.
Most IP-data providers resell the same handful of geolocation databases. We take the opposite approach: a globally distributed scanner fleet across North America, Europe, and Asia-Pacific continuously resolves reverse and forward DNS across all 4.3 billion IPv4 addresses. The data is first-party, kept fresh in near real time, and served as clean JSON in under a second. Our fourth-generation scanner engine is built to complete a full pass of the IPv4 space in under 24 hours.
The platform runs the way a production service should — replicated across regions, continuously monitored, and engineered for accuracy at scale. A free public site sits on top of it, plus a keyless public API that is live today — call it from a single curl https://worldip.io/8.8.8.8 — and enriched, higher-volume subscription plans (VPN/proxy and datacenter classification, trust scoring, and live BGP) for teams that need more. New data products ship on a steady cadence. For a live look at the platform, see our infrastructure status page.
Mission
WorldIP.io exists to make IPv4 address data accessible to everyone. We merge multiple authoritative data sources into a single, fast, searchable database covering all 4.3 billion IPv4 addresses.
Whether you're a network engineer investigating a routing issue, a security analyst tracing an IP, or just curious about who owns an address — we provide the answer in under a second, free, with no signup required.
Data sources
WorldIP.io combines authoritative allocation data, our own continuous scanning and privacy analysis, and public threat intelligence:
- MaxMind GeoLite2 — IP-to-country, -city and -ASN mappings, refreshed weekly (CC BY-SA 4.0).
- RIR delegation files — IANA and the five Regional Internet Registries (ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC), polled every six hours for allocations, transfers and country re-assignments.
- ipinfo Lite — a free, daily ASN/country dataset that backfills coverage MaxMind doesn't include (CC BY-SA 4.0).
- Our scanner fleet — a multi-region fleet continuously resolves reverse-DNS (PTR) for every allocated IPv4 address over an encrypted mesh, so hostnames are indexed and searchable instantly.
- GRIP (General Research IP) — forward-DNS coverage: the domains observed with an A record pointing at an IP (“hosted domains”), shown alongside our reverse DNS on each IP page.
- BGP routing (RIPE RIS) + RPKI — the live global routing table from 23 collectors supplies announced prefixes, origin ASNs, route-anomaly detection and RPKI validity.
- Shodan — internet-facing exposure (open ports, services, known CVEs) shown on individual IP pages.
- Threat-intelligence blocklists — eight independent feeds (Spamhaus DROP, abuse.ch Feodo Tracker, ET Compromised, FireHOL Level 1, IPsum, blocklist.de, the Tor Project, plus Team Cymru bogons) drive the IP reputation / trust score.
- Privacy & proxy intelligence — WorldIP's own validated residential and mobile proxy detection, alongside VPN, Tor and datacenter classification with a decay-scored confidence signal, driving the access-type and privacy indicators on each IP page.
For full technical details, licensing and attribution, see our data sources & methodology page.
Trust score
Every IP, range, ASN and organization gets a transparent 0–100 trust score — a neutral baseline of 65, adjusted up or down by explainable signals: threat-intelligence blocklists, Shodan exposure, reverse-DNS / FCrDNS, BGP routing stability (MOAS / RPKI) and allocation category & age. Every contributing factor is shown on the page, so the math is auditable. It is an informational heuristic (experimental — trust-vectors v1.1.0), not a definitive verdict. How the trust score works →
Update cadence
Our database refreshes automatically every Tuesday at 04:00 UTC, within hours of MaxMind's weekly data release. The refresh process downloads fresh CSV files, merges them into our database, rebuilds aggregate statistics, and invalidates caches — all in about 5 minutes with zero downtime.
Technical stack
WorldIP.io is built for speed and reliability, serving the public site and a keyless (and keyed, higher-volume) API from the same infrastructure:
- Served via Cloudflare edge (TLS, DDoS protection, global CDN)
- Cloudflare edge cache with change-driven purge; IP pages ~24h TTL
- MariaDB for dimensional data (allocations, ASNs, organizations, geo) with optimized indexes for sub-millisecond range lookups
- ClickHouse as the source of truth for 4 billion+ scanned IPv4 addresses and their reverse-DNS records, with bloom-filter indexes for fast substring search
- Multi-region scanner fleet spanning North America, Europe and Asia-Pacific over an encrypted WireGuard mesh, region-locked to avoid cross-vantage hostname clobber
- A sharded XML sitemap covering our highest-value pages for comprehensive search-engine discovery
Current build
Every component of the platform is versioned independently and published from a single monorepo. The current deployed versions are:
Released 2026-07-18 15:47:07 UTC · commit 237e8a6
Contact
Questions, corrections, or partnership inquiries? Send us a message.
For security issues, email security@worldip.io.