API Documentation

IP Registrant Monitor

Overview

The DomainTools API is organized into distinct products with queries that follow a RESTful URL structure wherever possible. Each product offers free, un-authenticated access for the sample URLs listed with each product. If you haven’t already, you may want to review the getting started document to learn about authentication and response formats.

The IP Registrant Monitor API searches the ownership (Whois) records of IP address allocations for specific search terms. The product is ideal for monitoring specific IP owners (such as “DomainTools”) to be alerted whenever their information appears in a newly-allocated IP address range. The API will also alert you to IP ranges that no longer match a specific term.

https://api.domaintools.com/v1/ip-registrant-monitor/?query=google

NOTE: We are unable to provide a functioning test URL for this product because the data changes each day. See below for a sample response.

By default, the active data set is new or updated IP Whois records on the day you submit your API query. You should design your system to submit one API query per day for each registrant you want to monitor. If you experience a temporary failure in your processing routines, you can catch up on missing alerts up to six days back by providing the days_back parameter in your request.

IP Registrant Monitor Parameters

Parameters Description
query Required.
A space separated list of free text query terms. Returns the list of IP ranges that satisfy the query. The query terms have the following rules:

+term: Term must be included in the results.
-term: Term must not be included in the results.
term*: Term as a prefix must be included in the results.
No modifiers: The search performed is a phrase search.

For example, if you provide a query of “google inc” then only results that include both terms in the order provided will be included. Search terms are case-insensitive. Search terms should be URL encoded, including modifiers. E.g. + should be encoded as %2b to avoid interpretation as a space.

country Limits results to IP addresses allocated to an entity with a particular country. Valid options are ISO 3166-1 two character country codes.
Default: (All country codes)
server Limits results to ranges from a particular Whois server. Valid options are “whois.arin.net”, “whois.apnic.net”, “whois.ripe.net”, “whois.lacnic.net”, or “whois.afrinic.net”.
Default: (All whois servers)
include_total_count Returns the total number of results for a query. This should typically be used only for the first page of a large result set. Valid options are “true” and “false”.
Default: false
page Providing the page number allows access to additional pages of data. Results are returned 1000 ranges at a time. The maximum allowed value is 5.
Default: 1
search_type Type of changes to return. Valid options are “all”, “additions”, “removals”, “modifications”.
Default: all

Sample Response:

{
  "response": {
    "record_count": 99,
    "modified": [],
    "page": 1,
    "added": [
      {
        "ip_to": "51.255.100.255",
        "organization": "INTERNAL USAGE",
        "record_ip": "51.255.100.255",
        "record_date": "2016-01-05",
        "range": "51.255.100.224/27",
        "ip_from": "51.255.100.224",
        "server": "whois.ripe.net",
        "country": "FR"
      },
      {
        "ip_to": "51.254.170.239",
        "organization": "PrivateCloud id -831",
        "record_ip": "51.254.170.224",
        "record_date": "2016-01-05",
        "range": "51.254.170.224/28",
        "ip_from": "51.254.170.224",
        "server": "whois.ripe.net",
        "country": "FR"
      },
      ...
    ],
    "removed": [
      {
        "ip_to": "46.105.155.183",
        "record_ip": "46.105.155.177",
        "record_date": "2015-03-09",
        "range": "46.105.155.176/29",
        "ip_from": "46.105.155.176",
        "organization": "usertestro",
        "server": "whois.ripe.net",
        "country": "FR"
      },
      {
        "ip_to": "37.59.91.175",
        "record_ip": "37.59.91.163",
        "record_date": "2015-02-13",
        "range": "37.59.91.160/28",
        "ip_from": "37.59.91.160",
        "organization": "SP&PS",
        "server": "whois.ripe.net",
        "country": "FR"
      },
      ...
    ],
    "has_more_pages": false,
    "date": "2016-01-06",
    "query": "ovh"
  }
}

You must provide your
API credentials
to use this API.

General Information
Products