GeoIP IP Risk Databases
Maxmind’s GeoIP IP Risk database contains all IP networks associated with non-corporate proxies, VPNs, and other anonymous IP addresses, and other IP addresses associated with risky activity.
To learn more about the GeoIP IP Risk database, please see the GeoIP IP Risk database overview. If you are interested in purchasing the database, please contact our Enterprise Business team for assistance.
Data Privacy
To comply with data privacy regulations, please monitor our Do Not Sell My Personal Information Requests page (login required) for IP addresses and networks that should not be used for advertising or marketing purposes. You can automate retrieval of this list using our privacy exclusions API.
Binary Database
Binary databases make use of the MaxMind DB file format.
You can use the mmdbinspect tool (in beta), a command line interface built with Go, to look up one or more IPs from one or more MMDB databases and receive output in a parsable JSON format.
CSV Database
In addition to our MaxMind DB binary format, we also offer GeoIP and GeoLite databases in a CSV format suitable for importing into a SQL database. The CSV files are shipped as a single zip file.The zip file itself is named GeoIP2-IP-Risk-CSV_{YYYYMMDD}.zip.
The downloaded zip file contains a single directory which in turn
contains several files. That directory is named
GeoIP2-IP-Risk-CSV_{YYYYMMDD}.
The files in this zip archive are:
| Filename | Description |
|---|---|
LICENSE.txt | End user license |
COPYRIGHT.txt | Copyright statement |
GeoIP2-IP-Risk-Blocks-IPv4.csv | CSV file containing data on IPv4 addresses |
GeoIP2-IP-Risk-Blocks-IPv6.csv | CSV file containing data on IPv6 addresses |
Blocks Files
There are two CSV files for network blocks, one each for IPv4 and IPv6 blocks.
These are named GeoIP2-IP-Risk-Blocks-IPv4.csv and
GeoIP2-IP-Risk-Blocks-IPv6.csv respectively.
| Name | Type | Description |
|---|---|---|
| network | IP network as a string | This is the IPv4 or IPv6 network in CIDR format such as "2.125.160.216/29" or "2001:c50::/32". We offer a utility to convert this column to start/end IPs or start/end integers. See the conversion utility section for details. |
| ip_risk | decimal | This field contains the risk associated with the IP address. The value
ranges from 0.01 to 99. A higher score indicates a higher risk. Learn more about the IP risk score on our Knowledge Base. min: 0.01, max: 99 |
Conversion Utility
We’ve created a small utility program to allow you to convert a GeoIP CSV file’s representation of IP addresses to another format. You can choose between start/end IP addresses, with the addresses represented as strings or integers.
The program is available from our geoip2-csv-converter GitHub project releases tab.
Example Files
We maintain example files in CSV and MMDB format. The files contain dummy data rather than real GeoIP data.CSV Example Files
We maintain examples of the CSV files as they would be downloaded from the account portal:
MMDB Example Files
We maintain test MMDB files on GitHub:
Alternatively, you can view all of our MMDB test data on GitHub.
Database Changes
We may add new data fields to the IP Risk database at any time.
New database fields are added as new columns to the right of existing columns in our CSV files, and as additional data in our MMDB files.
Subscribe to our GeoIP release notes to be notified when new data is added to our databases.