Overview
The DomainTools API is organized into distinct products with queries that follow a RESTful URL structure wherever possible. Each product offers free, un-authenticated access for the sample URLs listed with each product. If you haven’t already, you may want to review the getting started document to learn about authentication and response formats.
The IP Registrant Monitor API searches the ownership (Whois) records of IP address allocations for specific search terms. The product is ideal for monitoring specific IP owners (such as “DomainTools”) to be alerted whenever their information appears in a newly-allocated IP address range. The API will also alert you to IP ranges that no longer match a specific term.
https://api.domaintools.com/v1/ip-registrant-monitor/?query=google
NOTE: We are unable to provide a functioning test URL for this product because the data changes each day. See below for a sample response.
By default, the active data set is new or updated IP Whois records on the day you submit your API query. You should design your system to submit one API query per day for each registrant you want to monitor. If you experience a temporary failure in your processing routines, you can catch up on missing alerts up to six days back by providing the days_back parameter in your request.
IP Registrant Monitor Parameters
Parameters | Description |
---|---|
query | Required. A space separated list of free text query terms. Returns the list of IP ranges that satisfy the query. The query terms have the following rules: +term: Term must be included in the results. For example, if you provide a query of “google inc” then only results that include both terms in the order provided will be included. Search terms are case-insensitive. Search terms should be URL encoded, including modifiers. E.g. + should be encoded as %2b to avoid interpretation as a space. |
country | Limits results to IP addresses allocated to an entity with a particular country. Valid options are ISO 3166-1 two character country codes. Default: (All country codes) |
server | Limits results to ranges from a particular Whois server. Valid options are “whois.arin.net”, “whois.apnic.net”, “whois.ripe.net”, “whois.lacnic.net”, or “whois.afrinic.net”. Default: (All whois servers) |
include_total_count | Returns the total number of results for a query. This should typically be used only for the first page of a large result set. Valid options are “true” and “false”. Default: false |
page | Providing the page number allows access to additional pages of data. Results are returned 1000 ranges at a time. The maximum allowed value is 5. Default: 1 |
search_type | Type of changes to return. Valid options are “all”, “additions”, “removals”, “modifications”. Default: all |
Sample Response:
{ "response": { "record_count": 99, "modified": [], "page": 1, "added": [ { "ip_to": "51.255.100.255", "organization": "INTERNAL USAGE", "record_ip": "51.255.100.255", "record_date": "2016-01-05", "range": "51.255.100.224/27", "ip_from": "51.255.100.224", "server": "whois.ripe.net", "country": "FR" }, { "ip_to": "51.254.170.239", "organization": "PrivateCloud id -831", "record_ip": "51.254.170.224", "record_date": "2016-01-05", "range": "51.254.170.224/28", "ip_from": "51.254.170.224", "server": "whois.ripe.net", "country": "FR" }, ... ], "removed": [ { "ip_to": "46.105.155.183", "record_ip": "46.105.155.177", "record_date": "2015-03-09", "range": "46.105.155.176/29", "ip_from": "46.105.155.176", "organization": "usertestro", "server": "whois.ripe.net", "country": "FR" }, { "ip_to": "37.59.91.175", "record_ip": "37.59.91.163", "record_date": "2015-02-13", "range": "37.59.91.160/28", "ip_from": "37.59.91.160", "organization": "SP&PS", "server": "whois.ripe.net", "country": "FR" }, ... ], "has_more_pages": false, "date": "2016-01-06", "query": "ovh" } }
You must provide your
API credentials to use this API.
- Account Information
- Brand Monitor
- Domain Profile
- Domain Reputation
- Domain Risk Score
- Domain Search
- Hosting History
- IP Monitor
- IP Registrant Monitor
- Iris Detect
- Iris Enrich
- Iris Investigate
- Iris Pivot
- Name Server Monitor
- Parsed Whois
- PhishEye
- Registrant Monitor
- Reverse IP
- Reverse IP Whois
- Reverse Name Server
- Reverse Whois
- Whois History
- Whois Lookup