Passive DNS (RRsets)
The real-time firehose of passive DNS data from dns0.eu.
Format
{
"timestamp": "2023-03-26T13:30:38Z",
"name": "www.bing.com.",
"type": "A",
"data": ["13.107.21.200", "204.79.197.200"]
}
Rate
The current rate is around 80,000,000 unique RRsets per day.
RRsets are deduplicated on (name, type, sort(data)) over a 24-hour period.
Pricing
€9,999/month — talk to us at contact@dns0.eu to set up the subscription and get your API key.
Threat intelligence partners get free or discounted access to this data feed.
Authentication
Authenticate by passing your API key as Bearer token in the Authorization header.
The WebSocket streaming endpoint is available without authentication for testing purposes (up to 10 minutes per day).
Stream
Download
Newline-delimited JSON dumps of the previous day’s stream are made available daily at the following URL.
https://data.dns0.eu/rrsets
The file is updated every day between midnight and 1am UTC. Use conditional
requests (If-Modified-Since) or make use of HEAD requests to avoid
unnecessary bandwidth usage.