IP OSINT Tool
IP OSINT Research Tool
Network Intelligence and Analysis Application
This Python-based desktop application provides a comprehensive set of tools for IP address analysis and network reconnaissance, featuring a clean, simplistic tabbed interface with the following capabilities:
Core Features:
-
Basic IP Analysis: Hostname resolution, IP classification (A/B/C class), type detection (public/private/special purpose), and reverse DNS pattern analysis
-
Geolocation Mapping: IP location data including country, region, city, coordinates, ISP details, and organization info with interactive map visualization using Folium
-
Network Traceroute: Visual hop-by-hop analysis with response time graphs and automated ASN information for each network hop
-
WHOIS Lookup: Comprehensive registration data with organization details, abuse contact discovery, and raw WHOIS results
-
Port Scanner: Configurable port scanning for common services or custom ranges with service detection, visualization by category, and OS fingerprinting based on open port patterns
-
Domain Analysis: DNS record lookups (A, AAAA, MX, NS, TXT, CNAME, SOA), website metadata collection, and subdomain discovery for common prefixes
-
SSL/TLS Inspection: Certificate details, validity checking, cipher information, and security assessment with vulnerability flagging
-
Threat Intelligence: IP reputation checking via AbuseIPDB and VirusTotal APIs (when available), common blocklist checks (Spamhaus, Barracuda), and links to additional security resources
Utility Tools:
-
Batch Analysis: Process multiple IPs simultaneously with configurable analysis options
-
IP Comparison: Side-by-side comparison of two IP addresses with network relationship detection and geographic distance calculation
-
CIDR Range Scanner: Scan entire IP ranges with active host detection and basic profiling
-
DNS Lookup Tool: Specialized DNS record querying interface
Technical Features:
-
Export Options: Save results in multiple formats (TXT, HTML, JSON, CSV)
-
UI Enhancements: Dark/light theme support, progress tracking for long operations
-
History Management: Track and recall previously analyzed IPs
Technical Requirements:
- Python 3.x
- Required libraries: tkinter, socket, requests, matplotlib, folium, datetime
- Optional libraries for enhanced functionality: dns.resolver, whois, cryptography
Note on Usage:
This tool is designed for network administrators, security researchers, and IT professionals, if they like, but it's more intended for folks who need something more hands on, but not too difficult.
