Loading...

Passive DNS

How to use the service?

CIRCL Passive DNS is accessible via a REST API and the output format is in JSON following Passive DNS - Common Output Format.

The REST API is accessible via the following URL

https://www.circl.lu/pdns/query/<queryvalue>

Query values can be any records like IP addresses, hostnames or domain names (please note that CIDR block queries are not supported):

https://www.circl.lu/pdns/query/www.circl.lu

and a sample JSON output:

1{"count": 20426, "time_first": 1298398417, "rrtype": "A", "rrname": "www.circl.lu", "rdata": "194.154.205.24", "time_last": 1299264077} {"count": 202990, "time_first": 1298398002, "rrtype": "CNAME", "rrname": "www.circl.lu", "rdata": "cpa.circl.lu", "time_last": 1408612615}

Access to CIRCL Passive DNS

Access to CIRCL Passive DNS is only allowed to trusted partners in Luxembourg and abroad. Contact us if you would like access. Include your affiliation and the foreseen use of the Passive DNS data.

Python Library to access the CIRCL Passive DNS API

We developed a Python library called PyPDNS to query any Passive DNS implementation following the Passive DNS - Common Output Format.

Ruby Library to access the CIRCL Passive DNS API

PassiveDNS::Client is a rubygem developed by Chris Lee who includes access to different passive DNS services including CIRCL.

Scala library to access the CIRCL Passive DNS API

Scala library is a Scala implementation developed by Jason Jones.

R Library to access the CIRCL Passive DNS API

R Port of CIRCL.LU’s PyPDNS Python module.