IP Registrant Monitor

The IP Registrant Monitor API searches the ownership (Whois) records of IP address allocations for specific search terms. The product is ideal for monitoring specific IP owners (such as "DomainTools") to be alerted whenever their information appears in a newly-allocated IP address range. The API will also alert you to IP ranges that no longer match a specific term.

https://api.domaintools.com/v1/ip-registrant-monitor/?query=google

We are unable to provide a functioning test URL for this product because the data changes each day. See below for a sample response.

By default, the active data set is new or updated IP Whois records on the day you submit your API query. You should design your system to submit one API query per day for each registrant you want to monitor. If you experience a temporary failure in your processing routines, you can catch up on missing alerts up to six days back by providing the days_back parameter in your request.

IP Registrant Monitor Parameters

Parameters	Description
query	Required. A space separated list of free text query terms. Returns the list of IP ranges that satisfy the query. The query terms have the following rules: +term: Term must be included in the results; -term: Term must not be included in the results; term*: Term as a prefix must be included in the results; No modifiers: The search performed is a phrase search. For example, if you provide a query of google inc then only results that include both terms in the order provided will be included. Search terms are case-insensitive. Search terms should be URL encoded, including modifiers. E.g. + should be encoded as %2b to avoid interpretation as a space.
country	Limits results to IP addresses allocated to an entity with a particular country. Valid options are ISO 3166-1 two character country codes. Default: (All country codes)
server	Limits results to ranges from a particular Whois server. Valid options are whois.arin.net, whois.apnic.net, whois.ripe.net, whois.lacnic.net, or whois.afrinic.net. Default: (All whois servers)
include_total_count	Returns the total number of results for a query. This should typically be used only for the first page of a large result set. Valid options are "true" and "false". Default: false
page	Providing the page number allows access to additional pages of data. Results are returned 1000 ranges at a time. The maximum allowed value is 5. Default: 1
search_type	Type of changes to return. Valid options are all, additions, removals, modifications. Default: all

Sample Response

{
  "response": {
    "record_count": 99,
    "modified": [],
    "page": 1,
    "added": [
      {
        "ip_to": "51.255.100.255",
        "organization": "INTERNAL USAGE",
        "record_ip": "51.255.100.255",
        "record_date": "2016-01-05",
        "range": "51.255.100.224/27",
        "ip_from": "51.255.100.224",
        "server": "whois.ripe.net",
        "country": "FR"
      },
      {
        "ip_to": "51.254.170.239",
        "organization": "PrivateCloud id \-831",
        "record_ip": "51.254.170.224",
        "record_date": "2016-01-05",
        "range": "51.254.170.224/28",
        "ip_from": "51.254.170.224",
        "server": "whois.ripe.net",
        "country": "FR"
      },
      ...
    ],
    "removed": [
      {
        "ip_to": "46.105.155.183",
        "record_ip": "46.105.155.177",
        "record_date": "2015-03-09",
        "range": "46.105.155.176/29",
        "ip_from": "46.105.155.176",
        "organization": "usertestro",
        "server": "whois.ripe.net",
        "country": "FR"
      },
      {
        "ip_to": "37.59.91.175",
        "record_ip": "37.59.91.163",
        "record_date": "2015-02-13",
        "range": "37.59.91.160/28",
        "ip_from": "37.59.91.160",
        "organization": "SP\&PS",
        "server": "whois.ripe.net",
        "country": "FR"
      },
      ...
    ],
    "has_more_pages": false,
    "date": "2016-01-06",
    "query": "ovh"
  }
}