Internet infrastructure · passive DNS database and API
Farsight DNSDB: coverage and access
historical DNS pivots, domain/IP co-occurrence, threat hunting and infrastructure change analysis
What it covers
Geography and granularity
Geography: global DNS observations
Granularity: DNS RRset, resource record, first-seen/last-seen and bailiwick metadata
Source type: passive DNS database and API
Potential use
historical DNS pivots, domain/IP co-occurrence, threat hunting and infrastructure change analysis
Access and cost
REST API and Scout application
DomainTools/Farsight account and API credentials
Cost: commercial; licensing required
Update cadence: ongoing passive-DNS and authoritative-data ingestion
- Provider page ↗
- Documentation and access details ↗Check the provider's current terms and instructions before use
Interpret carefully
Limits that affect the decision
passive DNS reflects sensor visibility and does not prove current resolution or ownership
ongoing passive-DNS and authoritative-data ingestion
This record summarizes source documentation; Jon Bishop did not conduct an independent audit of the underlying dataset.