Back

Help

You are visiting the web interface of the 360 PassiveDNS.CN system. This system is the biggest public available db in China, with millions of dns queries coming in per second. The system is designed for security and research purpose, so there is no charge for using the system, however, access to the web interface is only available to qualified individuals (security researcher, network security admin, whitehat..etc ). Any automated queries against the web interface is not allowed. For bulk query, a much more powerful API access will be needed, you can find more details on our github page. NOT Free :)

PassiveDNS.CN supports two searching methods:


  1. Search based on rrset, where the search keyword is the left side content of the DNS RR, for example

    • To find out the IP history of a domain www.360.cn
      enter www.360.cn, select A from the "type" drop-down list, use the default rrset, click the SUBMIT button

    • To find out anything that ends with 360.cn (wildcard match, the web interface only support left side wildcard)
      enter *.360.cn, use the default ANY from the "type" drop-down list, use the default rrset, click the SUBMIT button


  2. Search based on rdata, where the search keyword is the right side content of the DNS RR, for example

    • To find out which domains have been resolved into 8.8.8.8
      enter 8.8.8.8, use the default ANY from the "type" drop-down list, select rdata from the "query" section, click the SUBMIT button

    • To find out which domains are using gmail-smtp-in.l.google.com as mail exchange server
      enter gmail-smtp-in.l.google.com, select mx from the "type" drop-down list, select rdata from the "query" section, click the SUBMIT button

    • To find out which domains are within the 1.2.3.0/24 block (the web support anything more specific then /24)
      enter 1.2.3.0/24, use the default ANY from the "type" drop-down list, select rdata from the "query" section, click the SUBMIT button and on the result page, you will notice the small S and D letter in the rrname field, which can be drilled down to further pages.


We welcome the opportunity for collaboration with other security companies/organizations in the security community. Please feel free to send us an email at passivedns@360.cn if you may have any thoughts, comments or suggestions.