Git Product home page Git Product logo

geo-recon's Introduction

Geo-Recon

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

GitHub Logo

Pre-requirements for Linux

  • Python3 bash sudo apt install python3
  • Pip3 bash sudo apt install python3-pip

If you don't use Debian or Ubuntu, search for their respective platforms (like yum and pacman)

Setup

This tool is compactible with:

  • Any Linux Operating System (Debian, Ubuntu, CentOS)
  • Termux

Linux Setup

git clone https://github.com/radioactivetobi/geo-recon.git
cd geo-recon
chmod +x geo-recon.py
sudo apt install python3-pip
pip3 install -r requirements.txt

Termux Setup

Link about python and pip on Termux that comes with the pkg python

git clone https://github.com/radioactivetobi/geo-recon.git
cd geo-recon
chmod +x geo-recon.py
pip3 install -r requirements.txt

Sample Syntax Linux and Termux

root@kali:~/geo-recon# python3 geo-recon.py 138.121.128.19

░██████╗░███████╗░█████╗░  ██████╗░███████╗░█████╗░░█████╗░███╗░░██╗
██╔════╝░██╔════╝██╔══██╗  ██╔══██╗██╔════╝██╔══██╗██╔══██╗████╗░██║
██║░░██╗░█████╗░░██║░░██║  ██████╔╝█████╗░░██║░░╚═╝██║░░██║██╔██╗██║
██║░░╚██╗██╔══╝░░██║░░██║  ██╔══██╗██╔══╝░░██║░░██╗██║░░██║██║╚████║
╚██████╔╝███████╗╚█████╔╝  ██║░░██║███████╗╚█████╔╝╚█████╔╝██║░╚███║
░╚═════╝░╚══════╝░╚════╝░  ╚═╝░░╚═╝╚══════╝░╚════╝░░╚════╝░╚═╝░░╚══╝

                         By d3xt3r_182, @Hautly_idk
 Github: https://github.com/radioactivetobi | Twitter: @d3xt3r_182, @Hautly_idk
            Usage: python3 geo-recon.py <IPADDRESS> <OPTION>
            
            Use python3 geo-recon.py -h too see the options
            


[*] Running Geo-location Check Against 138.121.128.19

Country: Brazil
Region: Piaui
City: Teresina
Organization: Itech Telecom
ISP: Itech Telecom

[*] Geo-IP Lookup Complete!!!


[*] Running Reputation Check Against 138.121.128.19

Domain: "redeitechtelecom.com.br"
Hostname: []
Usage Type: "Fixed Line ISP"
Confidence of Abuse: 100
Number Times of Reported: 982
Last Reported: "2020-08-21T16:43:12+00:00"
Whitelisted: false

The IP Address 138.121.128.19 Is Malicious and well known for SSH Bruteforce Attacks

[*] IP Reputation Look up Complete!!!

Things added by Hautly (SrJam):

  • Support for python3 and pip3.
  • Now Geo-Recon no longer supports python below version 3.0 because it is deprecated, sorry.
  • NMAP support with the --nmap or -n option after the IP number.
  • Longitudinal latitude correction.
  • Organization for the creation of new modules and separate and organized APIs.
  • Add API MyIP for self consult, use: python3 geo-recon.py localhost (With -n or --nmap works too)

To Do List

  • [ OK ] Include Longitude & Latitude For Geo-IP Lookup
  • [ OK ] Fix API

geo-recon's People

Contributors

fabianpastor avatar radioactivetobi avatar srjam avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

geo-recon's Issues

[Feature Request] Integration of IPinfo's API

I am the DevRel of IPinfo.io. If it would be possible, please consider IPinfo's API service for the project. The features of IPinfo's API service:

  • 1,000 requests/day without a token.
  • 50,000 requests/month with a free tier access token.
  • SSL / HTTPS support even for non-token access.
  • Provides nearly identical JSON payload to the existing API service, so migration would not be too difficult.
  • Greater accuracy of location information backed by IPinfo's probe network infrastructure.
  • Dedicated community open source projects and IP data.

Integrating IPinfo's API will allow users to make a higher amount of requests and get more precise geolocation information. Also the existing provider does not support HTTPS/SSL Encryption on the free tier, while we do.

IPinfo's API

🔗 Documentation: https://ipinfo.io/developers

Without token → 1,000 Requests/Day

curl ipinfo.io/67.59.111.80
{
  "ip": "67.59.111.80",
  "hostname": "067-059-111-080.arctic.net",
  "city": "Madrid",
  "region": "Madrid",
  "country": "ES",
  "loc": "40.4165,-3.7026",
  "org": "AS40760 TelAlaska",
  "postal": "28004",
  "timezone": "Europe/Madrid",
  "readme": "https://ipinfo.io/missingauth"
}

With free tier token → 50,000 requests/month

curl ipinfo.io/170.156.138.52?token=<YOUR_TOKEN>
{
  "ip": "170.156.138.52",
  "city": "West Sacramento",
  "region": "California",
  "country": "US",
  "loc": "38.5927,-121.5325",
  "postal": "95605",
  "timezone": "America/Los_Angeles"
}

More accurate geolocation information

Consider the IP address: 67.59.111.80 (IPinfo.io)

As of writing the post, based on ping information, the IP address is located in Madrid, Spain.

image

However, your existing API service provider locates it in Alaska, which is 8,073.7 kilometers away.

Please let us know what you think. If you would like, we can write the PR.

nmap is not nmap

Hi,

I noticed that this project has a dependency on nmap in requirements.txt. It was brought to my attention that people mistakenly install this in belief it's the well-known port scanning tool, which it's not. I've since removed the single release of my nmap library from PyPI, and so wanted to inform you that installation is likely to break until you remove this dependency (which I assume was incorrectly added to begin with).

Sorry for any inconvenience caused by this.

checkip.py loop logic issue

checkIP.py loop at the end of the code block does not allow for abuseConfidenceScore == 20. If it is exactly 20 it will fall through the if statements and return no result. Suggest changing the third elif statement to:

elif json.dumps(decodedResponse ["data"]["abuseConfidenceScore"]) <= "20":

error

I ran the tool today, which i've used many times with success but today I got this:

[*] Geo-IP Lookup Complete!!!

[*] Running Reputation Check Against

Traceback (most recent call last):
File "/usr/share/geo-recon/geo-recon.py", line 69, in
check(syA1)
File "/usr/share/geo-recon/modules/checkIp.py", line 26, in check
print ( Fore.WHITE + "Domain: " + json.dumps(decodedResponse ["data"]["domain"]))
KeyError: 'data'

any help would be appreciated

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.