radioactivetobi / geo-recon

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

Geo-Recon

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

Pre-requirements for Linux

• Python3 bash sudo apt install python3
• Pip3 bash sudo apt install python3-pip

If you don't use Debian or Ubuntu, search for their respective platforms (like yum and pacman)

Setup

This tool is compactible with:

• Any Linux Operating System (Debian, Ubuntu, CentOS)
• Termux

Linux Setup

git clone https://github.com/radioactivetobi/geo-recon.git
cd geo-recon
chmod +x geo-recon.py
sudo apt install python3-pip
pip3 install -r requirements.txt

Termux Setup

Link about python and pip on Termux that comes with the pkg python

git clone https://github.com/radioactivetobi/geo-recon.git
cd geo-recon
chmod +x geo-recon.py
pip3 install -r requirements.txt

Sample Syntax Linux and Termux

root@kali:~/geo-recon# python3 geo-recon.py 138.121.128.19

░██████╗░███████╗░█████╗░  ██████╗░███████╗░█████╗░░█████╗░███╗░░██╗
██╔════╝░██╔════╝██╔══██╗  ██╔══██╗██╔════╝██╔══██╗██╔══██╗████╗░██║
██║░░██╗░█████╗░░██║░░██║  ██████╔╝█████╗░░██║░░╚═╝██║░░██║██╔██╗██║
██║░░╚██╗██╔══╝░░██║░░██║  ██╔══██╗██╔══╝░░██║░░██╗██║░░██║██║╚████║
╚██████╔╝███████╗╚█████╔╝  ██║░░██║███████╗╚█████╔╝╚█████╔╝██║░╚███║
░╚═════╝░╚══════╝░╚════╝░  ╚═╝░░╚═╝╚══════╝░╚════╝░░╚════╝░╚═╝░░╚══╝

                         By d3xt3r_182, @Hautly_idk
 Github: https://github.com/radioactivetobi | Twitter: @d3xt3r_182, @Hautly_idk
            Usage: python3 geo-recon.py <IPADDRESS> <OPTION>
            
            Use python3 geo-recon.py -h too see the options
            


[*] Running Geo-location Check Against 138.121.128.19

Country: Brazil
Region: Piaui
City: Teresina
Organization: Itech Telecom
ISP: Itech Telecom

[*] Geo-IP Lookup Complete!!!


[*] Running Reputation Check Against 138.121.128.19

Domain: "redeitechtelecom.com.br"
Hostname: []
Usage Type: "Fixed Line ISP"
Confidence of Abuse: 100
Number Times of Reported: 982
Last Reported: "2020-08-21T16:43:12+00:00"
Whitelisted: false

The IP Address 138.121.128.19 Is Malicious and well known for SSH Bruteforce Attacks

[*] IP Reputation Look up Complete!!!

Things added by Hautly (SrJam):

• Support for python3 and pip3.
• Now Geo-Recon no longer supports python below version 3.0 because it is deprecated, sorry.
• NMAP support with the --nmap or -n option after the IP number.
• Longitudinal latitude correction.
• Organization for the creation of new modules and separate and organized APIs.
• Add API MyIP for self consult, use: python3 geo-recon.py localhost (With -n or --nmap works too)

To Do List

• [ OK ] Include Longitude & Latitude For Geo-IP Lookup
• [ OK ] Fix API