{"uid":"cap_t6-J8ppiHTiIAlB6cesKU","slug":"sitecheck-web-intel-open-dns-resolver-check-port-53-47020fc5","name":"SiteCheck Web Intel – Open DNS Resolver Check (Port 53)","description":"Reports whether Shodan's pre-collected passive scan data shows TCP port 53 (DNS) open on an IPv4 address. It is a passive port fact only: it does not send a query, so it cannot say whether the server answers recursively for outside names. Absence means not seen, not closed.","url":"https://api.webintel-api.workers.dev/api/security/open-resolver-check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","description":"IPv4 address such as 8.8.8.8 (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_BMX3bx8ApnMoxZpyZswur","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Reports whether Shodan's passive scan data shows TCP port 53 (DNS) open on a given IPv4 address, indicating potential open resolver exposure.","exampleAgentPrompt":"Can you check whether Shodan's passive scan data shows TCP port 53 (DNS) open on the IP address 198.51.100.42?","exampleUseCases":[{"title":"Checking DNS exposure on a server","prompt":"I need to know if the IP 203.0.113.10 has port 53 open according to Shodan's passive scans — I want to see if it might be acting as an exposed DNS server."},{"title":"Security audit of cloud infrastructure","prompt":"We're auditing our cloud servers. Can you check whether Shodan has seen port 53 open on 192.0.2.55? We want to make sure we're not accidentally exposing a DNS service."},{"title":"Investigating a suspicious IP","prompt":"There's a suspicious IP 198.51.100.200 in our logs — can you check if Shodan's data shows TCP port 53 open on it to see if it could be used as a DNS resolver?"}],"resultDescription":"Returns whether Shodan's passive scan records show TCP port 53 open on the specified IPv4 address. The result is a passive observation: a positive result means Shodan previously detected the port open; absence means it was not seen in Shodan's data, not that the port is definitively closed. No active probe is sent.","failureModes":["Missing or invalid IP address returns a 400-level error","IPv6 addresses are not supported (IPv4 only)","Shodan may have stale or incomplete data for less-scanned IP ranges","IP not in Shodan's dataset returns a negative/absent result, which should not be interpreted as definitively closed","Rate limiting or payment failure may return 402 or 429 errors"],"whenToPreferThis":"Use this endpoint when you need a fast, passive check on whether a specific IPv4 address has been observed by Shodan with port 53 (DNS) open, without sending any active probe. Ideal for security audits, threat intelligence enrichment, and reconnaissance workflows where you want to avoid active scanning. Prefer this over active DNS probing tools when stealth or passivity is required, or when you want Shodan's historical perspective rather than a real-time network probe.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T12:43:23.499Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-open-dns-resolver-check-port-53-47020fc5"}