---
name: ip-owner-lookup
description: Find out who uses an IP address (reverse DNS, RDAP/whois owner, ASN/ISP, TLS certificate name, HTTP redirect, open ports) via devops.majbase.com. Use when asked "whose IP is this", "what is behind this address", or to identify a crawler/server from logs.
---

# IP Owner Lookup

Call `GET https://devops.majbase.com/ip-owner-lookup/api?ips=<ip1>,<ip2>` (up to 10 public IPs; private ranges are refused).

Response: `{"results": [{"ip", "summary", "ptr", "rdap": {name, range, country, orgs}, "geo": {as, isp, org, city, country, hosting}, "tls": {cn, sans, issuer, not_after}, "http"/"https": {status, location}, "ports": {"22": bool, ...}, "known"}], "rejected": [[token, reason]]}`.

Report the `summary` line first (it already combines the most specific names found), then the TLS certificate names and the registry owner. Rate limit: 30 lookups per hour per client.
