ONYPHE
Operator: ONYPHE SAS, France
Researches internet services, passive DNS data and technical connections through IP addresses and domains.
Technical Infrastructure
OPSEC caution
The additional Ondemand function performs active queries against the specified IP address, domain or hostname.
Product
ONYPHE, a search and analysis platform for publicly reachable internet infrastructure.
Availability and source date
Active
As of: 25 October 2026.
Check: 25 October 2026.
A public index search for ip:8.8.8.8.
Ten of 6,538 results were visible, with Google LLC, ASN 15169, ports, TLS/HTTP data and current observations from 25 October 2026.
Use in OSINT research
Connects IP addresses and domains with observed services, certificates, DNS traces and technical relationships. Current and historical findings support infrastructure research.
Queries
| Input | Result | Result type |
|---|---|---|
| IP address | Observed services with ports, protocols, banners, domain relationships and timestamps. | Retrieved |
| Domain / website | Associated infrastructure and available current and historical technical findings. | Retrieved |
Features
- Searches recorded internet services and passive DNS data.
- Pivots between IP addresses, domains, autonomous systems and organisations.
- Shows service banners, protocols and observation times.
- Provides export, bulk and notification functions through the API.
- Supports additional active Ondemand queries by IP, port, domain or hostname.
Categories
- Technical Infrastructure
- Internet scanning
- DNS
Coverage
Geographical coverage
Internet-wide
Dataset
A provider index from internet mapping and passive DNS observations; IPv4, IPv6, TCP and UDP. The provider lists weekly scans of 5,000 ports.
Access
Requirements
Limited public search without an account. Free View requires registration for basic functions and API access; extended fields depend on the plan.
Export
JSON and download functions, plus export and bulk APIs, are offered.
Provider
ONYPHE SAS
Country of establishment
France
Interfaces
API
Available. An API for search, export, discovery, notifications, summaries and bulk queries. Also a CLI and active Ondemand functions.
MCP
Not documented. Not specified on the captured product and API pages.
AI agents
Not documented. Not specified on the captured product and API pages.
Legal note
Limitations
- Historical data coverage and extended result fields depend on the plan.
- The listed CTI plans allow an average of one API request per second.
Guides and practical reports
Unknown