ipwhois 0.10.2

Documentation

https://secynic.github.io/ipwhois

Github

https://github.com/secynic/ipwhois

Pypi

https://pypi.python.org/pypi/ipwhois

Typical usage

>>>> from ipwhois import IPWhois
>>>> from pprint import pprint

>>>> obj = IPWhois('74.125.225.229')
>>>> results = obj.lookup()
>>>> pprint(results)

{
'asn': '15169',
'asn_cidr': '74.125.225.0/24',
'asn_country_code': 'US',
'asn_date': '2007-03-13',
'asn_registry': 'arin',
'nets': [{'abuse_emails': 'arin-contact@google.com',
          'address': '1600 Amphitheatre Parkway',
          'cidr': '74.125.0.0/16',
          'city': 'Mountain View',
          'country': 'US',
          'created': '2007-03-13T00:00:00',
          'description': 'Google Inc.',
          'handle': 'NET-74-125-0-0-1',
          'misc_emails': None,
          'name': 'GOOGLE',
          'postal_code': '94043',
          'range': '74.125.0.0 - 74.125.255.255',
          'state': 'CA',
          'tech_emails': 'arin-contact@google.com',
          'updated': '2012-02-24T00:00:00'}],
'query': '74.125.225.229',
'raw': None,
'raw_referral': None,
'referral': None
}

Multiple networks listed and referral whois

>>>> from ipwhois import IPWhois
>>>> from pprint import pprint

>>>> obj = IPWhois('38.113.198.252')
>>>> results = obj.lookup(get_referral=True)
>>>> pprint(results)

{
'asn': '174',
'asn_cidr': '38.0.0.0/8',
'asn_country_code': 'US',
'asn_date': '',
'asn_registry': 'arin',
'nets': [{'abuse_emails': 'abuse@cogentco.com',
          'address': '1015 31st St NW',
          'cidr': '38.0.0.0/8',
          'city': 'Washington',
          'country': 'US',
          'created': '1991-04-16T00:00:00',
          'description': 'PSINet, Inc.',
          'handle': 'NET-38-0-0-0-1',
          'misc_emails': None,
          'name': 'COGENT-A',
          'postal_code': '20007',
          'range': '38.0.0.0 - 38.255.255.255',
          'state': 'DC',
          'tech_emails': 'ipalloc@cogentco.com',
          'updated': '2011-05-20T00:00:00'},
         {'abuse_emails': 'abuse@cogentco.com',
          'address': '1015 31st St NW',
          'cidr': '38.112.0.0/13',
          'city': 'Washington',
          'country': 'US',
          'created': '2003-08-20T00:00:00',
          'description': 'PSINet, Inc.',
          'handle': 'NET-38-112-0-0-1',
          'misc_emails': None,
          'name': 'COGENT-NB-0002',
          'postal_code': '20007',
          'range': None,
          'state': 'DC',
          'tech_emails': 'ipalloc@cogentco.com',
          'updated': '2004-03-11T00:00:00'}],
'query': '38.113.198.252',
'raw': None,
'raw_referral': None,
'referral': {'address': '1015 31st St NW',
             'cidr': '38.113.198.0/23',
             'city': 'Washington',
             'country': 'US',
             'description': 'Cogent communications - IPENG',
             'name': 'NET4-2671C60017',
             'postal_code': '20007',
             'state': 'DC',
             'updated': '2007-09-18 22:02:09'}
}

Whois lookup via HTTP (REST)

>>>> from ipwhois import IPWhois
>>>> from pprint import pprint

>>>> obj = IPWhois('74.125.225.229')
>>>> results = obj.lookup_rws()
>>>> pprint(results)

{
'asn': '15169',
'asn_cidr': '74.125.225.0/24',
'asn_country_code': 'US',
'asn_date': '2007-03-13',
'asn_registry': 'arin',
'nets': [{'abuse_emails': 'arin-contact@google.com',
          'address': '1600 Amphitheatre Parkway',
          'cidr': '74.125.0.0/16',
          'city': 'Mountain View',
          'country': 'US',
          'created': '2007-03-13T12:09:54-04:00',
          'description': 'Google Inc.',
          'handle': 'NET-74-125-0-0-1',
          'misc_emails': None,
          'name': 'GOOGLE',
          'postal_code': '94043',
          'range': '74.125.0.0 - 74.125.255.255',
          'state': 'CA',
          'tech_emails': 'arin-contact@google.com',
          'updated': '2012-02-24T09:44:34-05:00'}],
'query': '74.125.225.229',
'raw': None
}

Use a proxy

>>>> from urllib import request
>>>> from ipwhois import IPWhois
>>>> handler = request.ProxyHandler({'http': 'http://192.168.0.1:80/'})
>>>> opener = request.build_opener(handler)
>>>> obj = IPWhois('74.125.225.229', proxy_opener = opener)

Retrieve host information for an IP address

>>>> from ipwhois import IPWhois
>>>> from pprint import pprint

>>>> obj = IPWhois('74.125.225.229')
>>>> results = obj.get_host()
>>>> pprint(results)

('dfw06s26-in-f5.1e100.net', [], ['74.125.225.229'])

Retrieve the official country name for an ISO 3166-1 country code

>>>> from ipwhois import IPWhois
>>>> from ipwhois.utils import get_countries

>>>> countries = get_countries()
>>>> obj = IPWhois('74.125.225.229')
>>>> results = obj.lookup(False)
>>>> print(countries[results['nets'][0]['country']])

United States

Parse out IP addresses and ports from text or a file

>>>> from ipwhois.utils import unique_addresses
>>>> from pprint import pprint

>>>> input_data = (
    'You can have IPs like 74.125.225.229, or 2001:4860:4860::8888'
    'Put a port at the end 74.125.225.229:80 or for IPv6: '
    '[2001:4860:4860::8888]:443 or even networks like '
    '74.125.0.0/16 and 2001:4860::/32.'
)

>>>> results = unique_addresses(data=input_data, file_path=None)
>>>> pprint(results)

{'2001:4860:4860::8888': {'count': 2, 'ports': {'443': 1}},
 '2001:4860::/32': {'count': 1, 'ports': {}},
 '74.125.0.0/16': {'count': 1, 'ports': {}},
 '74.125.225.229': {'count': 2, 'ports': {'80': 1}}}

0.10.2 (2015-05-19)

• Fixed APNIC parsing for updated field.

• Fixed datetime parsing and validation when Zulu (Z) is appended.

• Added RIPE parsing for created and updated fields (whois and RWS).

• Removed unnecessary parentheses in IPWhois class declaration.

• Some documentation and comment tweaking to work with Sphinx.

• Minor PEP 8 tweaks.

0.10.1 (2015-02-09)

• Fixed setup.py bug.

0.10.0 (2015-02-09)

• Added .csv support for country code source. You can no longer download country code information from iso.org.

• Added support for IPv4Address or IPv6Address as the address arg in IPWhois.

• Fixed file open encoding bug. Moved from open to io.open.

• Fixed parameter in IPWhois ip defined checks.

• Fixed TestIPWhois.test_ip_invalid() assertions.

0.9.1 (2014-10-14)

• Added ignore_referral_errors parameter to lookup().

• Fixed ipaddress import conflicts with alternate ipaddress module.

• Tuned import exception in ipwhois.utils.

• Fixed retry handling in get_whois().

• Fixed CIDR regex parsing bug where some nets were excluded from the results.

0.9.0 (2014-07-27)

• Fixed order on REST email fields

• Fixed setup error for initial install when dependencies don’t exist.

• Added RWhois support.

• Added server and port parameters to IPWhois.get_whois().

• Added unique_addresses() to ipwhois.utils and unit tests.

• Added some unit tests to test_lookup().

• Replaced dict.copy() with copy.deepcopy(dict).

• Fixed bug in abuse emails parsing.

• Added handle and range values to returned nets dictionary.

0.8.2 (2014-05-12)

• Fixed multi-line field parsing (Issue #36).

• Added unique_everseen() to ipwhois.utils to fix multi-line field order.

• Re-added support for RIPE RWS now that their API is fixed.

0.8.1 (2014-03-05)

• Fixed encoding error in IPWhois.get_whois().

0.8.0 (2014-02-18)

• Added ASNRegistryError to handle unknown ASN registry return values.

• Added ASN registry lookup third tier fallback to ARIN.

• Fixed variable naming to avoid shadows built-in confusion.

• Fixed some type errors: Expected type ‘str’, got ‘dict[str, dict]’ instead.

• Fixed RIPE RWS links, since they changed their API.

• Temporarily removed RIPE RWS functionality until they fix their API.

• Removed RADB fallback, since RIPE removed it.

0.7.0 (2014-01-14)

• Added Python 2.6+ support.

• The country field in net dicts is now forced uppercase.

0.6.0 (2014-01-13)

• Added APNIC RWS support for IPWhois.lookup_rws().

• Fixed issue in IPWhois.lookup_rws() for radb-grs fallback.