RequestGuard / Docs

IP WHOIS Lookup API

Query IP address ownership, ASN, BGP routing, and network allocation information. Get organization details, abuse contacts, and network ranges from Regional Internet Registries.

Last updated Dec 1, 2024

The IP WHOIS Lookup API retrieves comprehensive IP address information:

  • Network Ownership: Organization, contacts, registration dates
  • BGP Routing: ASN, BGP prefix, routing information
  • Reverse DNS: Hostname (PTR record)

Endpoint

GET https://api.requestguard.com/v1/ip/whois

Parameters

ParameterTypeRequiredDescription
ipstringYesThe IP address to query (IPv4 or IPv6)
rawbooleanNoInclude raw response data (default: false)

Response

{
  "success": true,
  "data": {
    "ip": "8.8.8.8",
    "range": "8.8.8.0/24",
    "handle": "NET-8-8-8-0-2",
    "name": "GOGL",
    "type": "DIRECT ALLOCATION",
    "status": "active",
    "country": "US",
    "netblock": "NET-8-0-0-0-0",
    "asn": 15169,
    "asName": "GOOGLE, US",
    "bgpPrefix": "8.8.8.0/24",
    "hostname": "dns.google",
    "rir": "ARIN",
    "organization": {
      "handle": "GOGL",
      "name": "Google LLC",
      "address": "1600 Amphitheatre Parkway, Mountain View, CA, 94043, United States",
      "registered": "2000-03-30T00:00:00-05:00",
      "updated": "2019-10-31T15:45:45-04:00"
    },
    "abuse": {
      "handle": "ABUSE5250-ARIN",
      "name": "Abuse",
      "organization": "Abuse",
      "address": "1600 Amphitheatre Parkway, Mountain View, CA, 94043, United States",
      "phone": "+1-650-253-0000",
      "email": "network-abuse@google.com",
      "registered": "2015-11-06T15:36:35-05:00",
      "updated": "2024-08-01T17:54:23-04:00"
    },
    "admin": {
      "handle": "ZG39-ARIN",
      "name": "Google LLC",
      "organization": "Google LLC",
      "address": "1600 Amphitheatre Parkway, Mountain View, CA, 94043, United States",
      "phone": "+1-650-253-0000",
      "email": "arin-contact@google.com",
      "registered": "2000-11-30T13:54:08-05:00",
      "updated": "2025-11-10T07:10:31-05:00"
    },
    "registered": "2023-12-28T17:24:33-05:00",
    "updated": "2023-12-28T17:24:56-05:00",
    "_meta": {
      "queriedAt": "2024-12-01T12:00:00.000Z",
      "responseTime": 101
    }
  }
}

Response Fields

Data Object

FieldTypeDescription
ipstringThe queried IP address
rangestringNetwork range in CIDR notation
handlestringNetwork block identifier
namestringNetwork name/identifier
typestringAllocation type
statusstringNetwork status (e.g., active, inactive)
countrystringCountry code (ISO 3166-1 alpha-2)
netblockstringParent allocation handle
asnnumberAutonomous System Number
asNamestringAS organization name
bgpPrefixstringBGP announced prefix (actual routing)
hostnamestringReverse DNS hostname (PTR record)
rirstringRegional Internet Registry name
organizationobjectRegistrant/owner information
abuseobjectAbuse contact for reporting
adminobjectAdministrative contact
techobjectTechnical contact (if different from admin)
registeredstringNetwork registration date (ISO 8601)
updatedstringLast update date (ISO 8601)
_metaobjectQuery metadata

Contact Object

FieldTypeDescription
handlestringUnique identifier
namestringContact name
organizationstringOrganization name
addressstringFull address
phonestringPhone number
emailstringEmail address
registeredstringContact registration date
updatedstringContact last update date

Regional Internet Registries

RIRRegion
ARINNorth America
RIPE NCCEurope, Middle East, Central Asia
APNICAsia-Pacific
LACNICLatin America, Caribbean
AFRINICAfrica

Example Requests

Basic Lookup

curl "https://api.requestguard.com/v1/ip/whois?ip=8.8.8.8"

IPv6 Lookup

curl "https://api.requestguard.com/v1/ip/whois?ip=2001:4860:4860::8888"

Example Response (RIPE NCC)

{
  "success": true,
  "data": {
    "ip": "185.100.87.209",
    "range": "185.100.87.0/24",
    "handle": "185.100.87.0 - 185.100.87.255",
    "name": "FlokiNET-Romania",
    "type": "ASSIGNED PA",
    "status": "active",
    "country": "RO",
    "netblock": "185.100.84.0 - 185.100.87.255",
    "asn": 200651,
    "asName": "FLOKINET, IS",
    "bgpPrefix": "185.100.87.0/24",
    "rir": "RIPE NCC",
    "organization": {
      "handle": "lir-is-flokinetehf-1-MNT",
      "name": "lir-is-flokinetehf-1-MNT"
    },
    "abuse": {
      "handle": "AR74596-RIPE",
      "name": "Abuse-C Role",
      "address": "ICELAND, Reykjavík, 101, Austurstræti 12a",
      "email": "abuse@flokinet.is"
    },
    "admin": {
      "handle": "KW2939-RIPE",
      "name": "FlokiNET Ltd",
      "address": "Bel Ombre Rd. P.5057, NA, Beau Vallon, Seychelles",
      "phone": "+358942458241"
    },
    "registered": "2015-12-15T13:52:42Z",
    "updated": "2024-03-22T13:51:21Z",
    "_meta": {
      "queriedAt": "2024-12-01T12:00:00.000Z",
      "responseTime": 343
    }
  }
}

Error Responses

Missing Parameter

{
  "success": false,
  "error": {
    "code": "MISSING_PARAMETER",
    "message": "Missing required parameter: ip"
  }
}

Invalid IP

{
  "success": false,
  "error": {
    "code": "INVALID_IP",
    "message": "Invalid IP address format"
  }
}

Private IP

{
  "success": false,
  "error": {
    "code": "PRIVATE_IP",
    "message": "Cannot lookup private IP address"
  }
}

Rate Limits

PlanRequests per minute
Free10
Pro100
EnterpriseUnlimited

Network Types

TypeDescription
DIRECT ALLOCATIONBlock allocated directly by an RIR
ALLOCATIONBlock allocated to an ISP/organization
ASSIGNMENTBlock assigned to an end-user
ASSIGNED PAProvider Aggregatable assignment
ASSIGNED PIProvider Independent assignment

Use Cases

  • Security Analysis: Identify organizations behind suspicious IPs
  • Abuse Reporting: Find correct abuse contacts
  • Network Research: Understand IP allocation and ownership
  • Compliance: Verify IP ownership for regulatory purposes
  • Threat Intelligence: Enrich IP data with organization context