FAQ

What input formats does SeekOSINT accept?

SeekOSINT automatically detects and normalises:

• IPv4: plain dotted-decimal, e.g. 1.1.1.1
• IPv6: full or compressed notation, e.g. 2606:4700:4700::1111
• Domain: with or without http://, trailing slashes stripped
• ASN: AS15169 or plain 15169

How many sources does SeekOSINT query?

Up to 15, depending on query type. All sources are queried in parallel — the page renders results as each source responds rather than waiting for all to finish.

Does SeekOSINT actively scan targets?

No. SeekOSINT is entirely passive. It only queries existing public databases and APIs. No packets are sent to the target host.

Are my queries logged?

SeekOSINT stores only anonymous recent-search query strings (not IPs) for the homepage recent-searches widget. No user identity is tracked. Upstream APIs may log queries on their end per their own privacy policies.

Why do some sources show "unavailable"?

A source may be unavailable for several reasons:

• The source timed out (20 second limit)
• The source's circuit breaker tripped after repeated failures — it auto-recovers in 15 minutes
• The source does not support the queried type (e.g. some sources are IP-only)

What are the rate limits?

500 requests per hour per IP on a rolling window. If you hit the limit you'll receive a 429 response. Self-hosting with your own API keys removes this constraint.

Can I look up private / RFC-1918 addresses?

Private ranges (10.x, 172.16–31.x, 192.168.x) are rejected at validation. They have no meaningful public intelligence data.

Is SeekOSINT open source?

Yes. The source is available on GitHub under the project license. Contributions, bug reports, and source suggestions are welcome.

Is it legal to use SeekOSINT?

SeekOSINT only queries public data sources — there is no active probing. However, you are responsible for complying with the terms of service of each underlying source and the laws of your jurisdiction. Only investigate hosts you own or have explicit authorisation to investigate.

How current is the data?

Each source has its own data freshness — from live DNS resolution to 12-hour certificate caches to 24-hour BGP snapshots. Results are KV-cached at the edge for performance; hit the refresh button to bypass the cache and fetch live data.

Can I use SeekOSINT programmatically?

The worker exposes a JSON API at /api/lookup?q=<target>. Self-host your own instance for higher throughput and direct API access without rate limits.

How do I self-host SeekOSINT?

• Clone the repo from GitHub
• Copy .env.example → .env and fill in your API keys
• Run npm install then npm run dev for local dev
• Deploy with npm run deploy (Cloudflare Pages via OpenNext)