DNSRecon
Operator: Carlos Perez and contributors, Puerto Rico
Locally installable DNS reconnaissance with Python, export features and an optional self-hosted REST API service.
Technical Infrastructure
Product
DNSRecon, a Python command-line program with an optional self-hosted REST API server.
Availability and source date
Active
As of: 16 October 2026.
No functionality test has been performed.
Use in OSINT research
Identifies DNS records, subdomains and reverse lookups. Many features actively query the target infrastructure; it is not a ready-made historical database.
Queries
| Input | Result | Result type |
|---|---|---|
| Domain / website | DNS records such as A, AAAA, MX, NS, SOA, SPF, TXT and SRV, and reachable subdomains. | Technical check according to provider |
| IP address | When an IP range or CIDR network is entered: PTR records for reverse lookups. | Technical check according to provider |
Features
- Retrieves common DNS record types.
- Searches for subdomains using wordlists and detects wildcard resolution.
- Checks nameservers for possible zone transfers.
- Performs reverse lookups of IP ranges using PTR records.
- Optionally supplements network ranges with Shodan data.
- Saves results as CSV, JSON, XML or SQLite.
Categories
- Technical Infrastructure
- DNS
Coverage
Dataset
No regional dataset of its own. DNS queries and optional external sources provide results for the specified infrastructure.
Access
Installation and deployment
Locally installable · Self-hosted
CLI on your own computer; optional self-hosted REST API server. No publicly hosted DNSRecon portal.
Requirements
Local installation with Python 3.12 or later; uv is recommended. Its own REST service is started separately. Optional Shodan queries require a Shodan API key.
Export
CSV, JSON, XML and SQLite; also its own REST interface.
Provider
Carlos Perez and contributors
Country of establishment
Puerto Rico
Interfaces
API
Available. Its own FastAPI REST service for DNS queries, which can run locally or on your own infrastructure. This is separate from the optional Shodan integration.
MCP
Not documented. Not described on the product and documentation pages reviewed.
AI agents
Not documented. Not described on the product and documentation pages reviewed.
Maintenance
Licence
GPL-2.0
Latest activity
Commit 10/2026
Stars
approx. 3,100 (as of 16 October 2026)
Legal note
Limitations
- Active DNS queries, zone transfers and wordlist attempts contact nameservers or target infrastructure.
- No complete dataset of historical DNS changes of its own.
- Additional Shodan data requires external API access.
Guides and practical reports
Official · DNSRecon: installation and REST API
DNSRecon-Projekt · EN
Explains the Python requirement, installation with uv, the CLI and starting your own API server.