detector

Offline IP intelligence SDK for Python 3.9+.

One call returns every field of every bundled database, merged into a single standardised English document — no API keys, no network, no extra downloads. Distance between IPs is one call away, 1-to-1 or 1-to-N (N unbounded).

from detector import info, distance      # two coroutines, nothing else

await info("8.8.8.8")                    # -> dict   (the standard JSON document)
await info(["8.8.8.8", "1.1.1.1"])       # -> [dict, dict]      (same function)
await info("8.8.8.8", as_object=True)    # -> IPInfo            (model, if you want it)
await distance("8.8.8.8", "1.1.1.1")     # -> dict
await distance("8.8.8.8", ["1.1.1.1", "223.5.5.5"])   # -> [dict, dict]

• 11 datasets bundled (every dataset ip-location-db publishes), 76 MB of xz, read through memory-mapped MMDB files
• Multi-source merge with cross_check / agreement / conflicts so you can see which source said what before trusting a value
• Nothing is dropped: unmapped vendor fields land in traits, complete per-database records land in raw
• Two async functions: info and distance, each taking one address or a batch, each returning the standard JSON document (as_object=True for models)
• JSON by default, stable field names, null for missing values, English only
• Dependencies: maxminddb only (stdlib everywhere else)

Install

pip install detector-sdk        # distribution name; the import name is `detector`
pip install .                   # from a checkout

The databases ship inside the wheel. First use decompresses them into ~/.cache/detector/extracted (override with DETECTOR_CACHE_DIR) — ~230 MB of MMDB across 12 files. Reading is memory-mapped, so RAM stays low (~30 MB with everything loaded).

Licence warning : GeoLite2 data is bundled here because this build was asked to ship everything ip-location-db publishes. MaxMind's EULA forbids redistributing their data to third parties, so publishing this wheel (or an image containing it) to the public requires your own MaxMind entitlement. Detector(datasets=[...]) / exclude=[...] let you drop those three datasets, and NON_REDISTRIBUTABLE_KEYS lists them.

Quick start

Two coroutines, each polymorphic over single and batch input:

import asyncio
from detector import info, distance

async def main():
    # information: the return value IS the standard JSON document
    row = await info("8.8.8.8")
    row["country"]["iso_code"]       # 'US'
    row["city"]["name"]              # 'Mountain View'
    row["asn"]["organization"]       # 'Google LLC'
    row["location"]["latitude"]      # 37.422
    row["cross_check"]["country"]    # what each of the 7 country sources answered
    row["conflicts"]                 # ['asn_organization', 'location']
    json.dumps(row)                  # already JSON-serialisable

    many = await info(["8.8.8.8", "1.1.1.1", "114.114.114.114"])
    [item["country"]["iso_code"] for item in many]   # ['US', 'AU', 'CN']

    streaming = await info(generator_of_millions)    # windowed, bounded memory

    model = await info("8.8.8.8", as_object=True)    # IPInfo, attribute access
    model.country.iso_code, model.city.name(), model.coordinates

    # distance: same shape
    await distance("8.8.8.8", "1.1.1.1")                    # dict
    await distance("8.8.8.8", ["1.1.1.1", "223.5.5.5"])     # [dict, dict]
    await distance(["8.8.8.8"], ["1.1.1.1", "223.5.5.5"])   # N x M
    await distance("8.8.8.8", "1.1.1.1", method="vincenty") # WGS84 ellipsoid

asyncio.run(main())

Options go per call, or once:

from detector import configure
configure(datasets=["dbip-city", "dbip-asn"], locales=("en",), include_raw=False,
          cache_size=8192, max_concurrency=64)

The same two functions also accept the JSON envelope ({"type","action","data","status"}), so a queue/socket consumer needs no extra entry point:

await info({"type": "ipv4", "action": "info", "data": {"ip": "8.8.8.8"}})      # -> dict
await distance({"type": "ipv4", "action": "distance",
                "data": {"ip": "8.8.8.8", "list": ["1.1.1.1"]}})               # -> dict
# as_object=True gives the Response model instead

Distance result

row = await distance("8.8.8.8", "1.1.1.1")
row["distance_km"]      # 11953.88   (haversine, default)
row["distance_mi"]      # 7427.79
row["same_country"]     # False
row["same_asn"]         # False
row["reason"]           # None when it could be computed

model = await distance("8.8.8.8", "1.1.1.1", as_object=True)
model.km, float(model), f"{model}"     # 11953.88, 11953.88, '8.8.8.8 -> 1.1.1.1: 11,953.88 km'

Explicit clients

When you want the client object instead of the pooled one (max_concurrency, window, nearest, describe, stats, update_datasets):

from detector import AsyncDetector

async with await AsyncDetector.create(max_concurrency=64, window=1024) as client:
    rows = await client.lookup_many(ips)
    ranked = await client.nearest("223.5.5.5", candidates, limit=3)
    print(await client.describe())

The standard output document

{
  "ip": "8.8.8.8",
  "version": 4,
  "found": true,
  "network": "8.8.8.0/24",
  "networks": {"dbip-city": "8.8.8.0/24", "dbip-country": "8.8.0.0/17"},
  "flags": {"is_private": false, "is_global": true, "is_loopback": false,
            "is_reserved": false, "is_multicast": false, "is_unspecified": false},
  "continent": {"name": "North America", "names": {"en": "North America", "...": "..."},
                "geoname_id": 6255149, "code": "NA"},
  "country": {"name": "United States", "names": {"en": "United States"},
              "geoname_id": 6252001, "iso_code": "US", "is_in_eu": false},
  "subdivisions": [{"name": "California", "names": {}, "geoname_id": null, "iso_code": null}],
  "city": {"name": "Mountain View", "names": {"en": "Mountain View"}, "geoname_id": null},
  "location": {"latitude": 37.422, "longitude": -122.085,
               "time_zone": null, "accuracy_radius": null},
  "postal": null,
  "time_zone": null,
  "asn": {"number": 15169, "asn": "AS15169", "organization": "Google LLC"},
  "traits": {},
  "hostname": null,
  "display": "Mountain View, California, United States",
  "sources": {"dbip-city": "DBIP-City-Lite", "dbip-asn": "DBIP-ASN-Lite",
              "iptoasn-asn": "IPtoASN-ASN", "...": "..."},
  "cross_check": {"country": {"DBIP-City-Lite": "US", "User-Country": "US"},
                  "asn": {"DBIP-ASN-Lite": 15169, "IPtoASN-ASN": 15169}},
  "agreement": {"country": true, "asn": true},
  "conflicts": [],
  "raw": {"dbip-city": {"city": {"names": {"en": "Mountain View"}}, "...": "..."}},
  "meta": {"schema_version": "1.0", "locales": ["en"],
           "databases": [{"key": "dbip-city", "name": "DBIP-City-Lite",
                          "build_date": "2026-09-01", "license": "CC BY 4.0"}],
           "attribution": "IP Geolocation by DB-IP (https://db-ip.com)"}
}

Want a different locale order? await info("8.8.8.8", locales=("zh-CN", "en")) — the names dictionaries always carry every language the source provides.

JSON protocol

The two functions take the envelope directly - info() for action=info, distance() for action=distance - and return a Response (.ok, .status, .data, .error, .meta, .to_dict(), .to_json()):

response = await distance({"type": "ipv4", "action": "distance",
                           "data": {"ip": "8.8.8.8", "list": ["1.1.1.1", "223.5.5.5"]}})
response.ok        # True
response.data      # {"ip": ..., "source": {...}, "list": [...], "summary": {...}}

await info('{"type":"ipv6","action":"info","data":{"ip":"2001:4860:4860::8888"}}')
await info(envelope, as_dict=True)     # plain dict instead of a Response

action aliases (lookup, query, dist, ...) are accepted on input; the response always echoes the canonical English action. Declaring type: ipv4 while sending an IPv6 literal is an error, not a silent mismatch.

Datasets

⚠ = bundled but not redistributable: MaxMind's EULA does not permit passing their data on to third parties. Drop them with Detector(exclude=NON_REDISTRIBUTABLE_KEYS) if you are publishing.

Files are stored as .mmdb.xz (xz beats gzip by ~35% on MMDB data and the standard-library lzma module unpacks it). Loaded files also carry their address family, so a v6-only GeoLite2 half is never consulted for an IPv4 address.

You can always ignore the bundled copies and point the SDK at files you are licensed to hold:

from detector import Detector

detector = Detector(databases={
    "my-geolite2-city": "/data/GeoLite2-City.mmdb",
    "my-geoip2-isp":    "/data/GeoIP2-ISP.mmdb",
})

Any MMDB v2.0 file works — MaxMind, DB-IP, ip-location-db, or one you built with mmdb_writer. Unknown schemas still contribute: unmapped keys end up in traits, the whole record in raw.

Selecting datasets

Detector(datasets=["dbip-city", "iptoasn-asn"])          # only these
Detector(exclude=["user-country", "server-country"])     # all but these
Detector(datasets=["dbip-city"], include_raw=False)      # smaller payloads

Updating

import asyncio
from detector import update_datasets, update_datasets_async, known_datasets

known_datasets()                     # full registry: licences, mirrors, cadence

update_datasets("~/.cache/detector") # blocking
await update_datasets_async(         # concurrent asyncio downloads
    "~/.cache/detector",
    datasets=["dbip-city", "iptoasn-asn"],
    concurrency=4,
)

Fresh files in the cache directory override the bundled copies automatically. DETECTOR_DB_DIR repoints the whole bundled directory instead.

Extension points

Performance notes

• Lookups are memory-mapped: 12 databases open cost ~30 MB RSS, and the 127 MB city database never lands in your heap.
• Warm startup is ~10 ms; the very first run decompresses the bundled data (~13 s).
• A default lookup is ~477 µs (2.1k IP/s) over 11 datasets / 12 files; ~40 µs when the address is already in the LRU cache.
• Generators keep memory flat for arbitrarily long inputs: await info(gen); include_raw=False trims documents from ~9.8 KB to ~5.8 KB.
• Threads and multiprocessing inside the SDK were removed on purpose - both measured slower than sequential. Shard the input across processes instead (see docs/07-performance.md).
• Install the C extension of maxminddb (libmaxminddb-dev present at install time) for 3-5x faster raw lookups.

Documentation

Runnable examples live in examples/ (quickstart.py, async_concurrency.py, json_protocol.py, bulk_streaming.py, custom_database.py, show_output.py).

Licence

MIT for the code. Data licences and mandatory attribution are documented in NOTICE and reproduced automatically in every response under meta.attribution.