What is the difference between the ISP and Organization outputs?

The ISP is the top-level organization or company to which the IP address range is directly assigned by the RIR. The Organization is the company or organization to which the ISP has sub-let the IP address range. For the majority of networks, we return the same value for both outputs.

The ISP output generally contains the ISP name. However, when we are not able to obtain the ISP, we include the name of the organization the IP address block was assigned to. For example, the ISP output often contains the names of universities instead of the universities’ ISPs.

The organization name is available for about 40% of corporate, government, and educational networks. In situations where we are not able to identify a specific business entity, we return the ISP name instead of the name of the business.