DNINT APIs

Contents

DNINT APIs#

Internet-scan, DNS, BGP, and threat-intel APIs the DNINT operator pulls from. Passive APIs cost almost nothing in OPSEC; active scans go through the operator’s own kit.

API

Auth + tier

Endpoint

Returns

Shodan API

API key; paid tiers.

https://api.shodan.io/

Internet-wide port and banner search.

Censys Search

API key; free + paid.

https://search.censys.io/api/v2/

Hosts, certificates, services index.

ZoomEye

API key.

https://api.zoomeye.org/

Internet-wide scanner (Chinese-operated).

BinaryEdge

API key; paid.

https://api.binaryedge.io/v2/

Host and service search.

Onyphe

API key; paid.

https://www.onyphe.io/api/v2/

Scan and threat-intel data.

FOFA

API key; paid; CN-operated.

https://fofa.info/api/

Chinese internet-wide scanner.

Hunter.how

API key.

https://api.hunter.how/

Internet-wide search.

LeakIX

API key.

https://leakix.net/

Exposed-service search.

GreyNoise

API key; free + paid.

https://api.greynoise.io/v3/

Internet background-noise classification.

SecurityTrails

API key; paid.

https://api.securitytrails.com/v1/

DNS and domain history.

DNSDB (Farsight)

API key; paid.

https://api.dnsdb.info/

Passive DNS.

VirusTotal (DNS / domain)

API key.

https://www.virustotal.com/api/v3/

Domain / IP graph and history.

crt.sh

Free.

https://crt.sh/?q=…&output=json

Certificate Transparency log search.

CertSpotter API

Free + paid.

https://api.certspotter.com/v1/

Real-time CT log monitoring.

RIPEstat

Free.

https://stat.ripe.net/data/

RIPE BGP, geoloc, abuse contact, whois.

BGPView

Free.

https://api.bgpview.io/

ASN, prefix, peering.

RDAP

Free; standard protocol.

https://rdap.<TLD-or-RIR>/

Domain and IP registration replacement for WHOIS.

AlienVault OTX

API key; free.

https://otx.alienvault.com/api/v1/

Threat-intel exchange.

URLscan API

API key for submission.

https://urlscan.io/api/v1/

URL scan and search.

References#

Contents