Geo-Recon | An OSINT CLI Tool Desgined To Fast Track IP Reputation And Geo-locaton Look Up For Security Analysts

[*]

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

Setup
This tool is compactible with:

  • Any Linux Operating System (Debian, Ubuntu, CentOS)
  • Termux

Linux Setup

git clone https://github.com/radioactivetobi/geo-recon.gitcd geo-reconchmod +x geo-recon.pypip install -r requirements.txt

Termux Setup

git clone https://github.com/radioactivetobi/geo-recon.gitcd geo-reconchmod +x geo-recon.pypip install -r requirements.txt

Sample Syntax Linux

root@kali:~/geo-recon# python geo-recon.py 138.121.128.19░██████╗░███████╗░█████╗░  ██████╗░███████╗░█████╗░░█████╗░███╗░░██╗██╔════╝░██╔════╝██╔══██╗  ██╔══██╗██╔════╝██╔══██╗██╔══██╗████╗░██║██║░░██╗░█████╗░░██║░░██║  ██████╔╝█████╗░░██║░░╚═╝██║░░██║██╔██╗██║██║░░╚██╗██╔══╝░░██║░░██║  ██╔══██╗██╔══╝░░██║░░██╗██║░░██║██║╚████║╚██████╔╝███████╗╚█████╔╝  ██║░░██║███████╗╚█████╔╝╚█████╔╝██║░╚███║░╚═════╝░╚══════╝░╚════╝░  ╚═╝░░╚═╝╚══════╝░╚════╝░░╚════╝░╚═╝░░╚══╝                            By d3xt3r_182 Github: https://github.com/radioactivetobi | Twitter: @d3xt3r_182            Usage: python geo-recon.py <IPADDRESS>             [*] Running Geo-location Check Against 138.121.128.19Country: BrazilRegion: PiauiCity: TeresinaOrganization: Itech TelecomISP: Itech Telecom[*] Geo-IP Lookup Complete!!![*] Running Reputation Check Against 138.121.128.19Domain: "redeitechtelecom.com.br"Hostname: []Usage Type: "Fixed Line ISP"Confidence of Abuse: 100Number Times of Reported: 982Last Reported: "2020-08-21T16:43:12+00:00"Whitelisted: falseThe IP Address 138.121.128.19 Is Malicious and well known for SSH Bruteforce Attacks[*] IP Reputation Look up Complete!!!

Sample Syntax Termux

$ python2 geo-recon.py 138.121.128.19░██████╗░███████╗░█████╗░  ██████╗░███████╗░█████╗░░█████╗░███╗░░██╗██╔════╝░██╔════╝██╔══██╗  ██╔══██╗██╔════╝██╔══██╗██╔══██╗████╗░██║██║░░██╗░█████╗░░██║░░██║  ██████╔╝█████╗░░██║░░╚═╝██║░░██║██╔██╗██║██║░░╚██╗██╔══╝░░██║░░██║  ██╔══██╗██╔══╝░░██║░░██╗██║░░██║██║╚████║╚██████╔╝███████╗╚█████╔╝  ██║░░██║███████╗╚█████╔╝╚█████╔╝██║░╚███║░╚═════╝░╚══════╝░╚════╝░  ╚═╝░░╚═╝╚══════╝░╚════╝░░╚════╝░╚═╝░░╚══╝                         By d3xt3r_182 Github: https://github.com/radioactivetobi | Twitter: @d3xt3r_182            Usage: python geo-recon.py <IPADDRESS>             [*] Running Geo-location Check Against 138.121.128.19Country: BrazilRegion: PiauiCity: TeresinaOrganization: Itech TelecomISP: Itech Telecom[*] Geo-IP Lookup Complete!!![*] Running Reputation Check Against 138.121.128.19Domain: "redeitechtelecom.com.br"Hostname: []Usage Type: "Fixed Line ISP"Confidence of Abuse: 100Number Times of Reported: 982Last Reported: "2020-08-21T16:43:12+00:00"Whitelisted: falseThe IP Address 138.121.128.19 Is Malicious and well known for SSH Bruteforce Attacks[*] IP Reputation Look up Complete!!!

To Do List

  • Include Longitude & Latitude For Geo-IP Lookup
  • Fix API

GitGub:

2 Likes