In recent years, the advances in digitalisation have also adversely contributed to the significant rise in cybercrimes. Hence, building the threat intelligence to shield against rising cybercrimes has become a fundamental requisite. Internet Protocol (IP) addresses play a crucial role in the threat intelligence and prevention of cyber crimes. However, we have noticed the lack of one-stop, free, and open-source tools that can analyse IP addresses. Hence, this work introduces a comprehensive web tool for advanced IP address characterisation. Our tool offers a wide range of features, including geolocation, blocklist check, VPN detection, proxy detection, bot detection, Tor detection, port scan, and accurate domain statistics that include the details about the name servers and registrar information. In addition, our tool calculates a confidence score based on a weighted sum of publicly accessible online results from different reliable sources to give users a dependable measure of accuracy. Further, to improve performance, our tool also incorporates a local database for caching the results, to enable fast content retrieval with minimal external Web API calls. Our tool supports domain names and IPv4 addresses, making it a multi-functional and powerful IP analyser tool for threat intelligence. Our tool is available at www.ipanalyzer.in
翻译:近年来,数字化进程的推进也导致了网络犯罪的显著增加。因此,构建威胁情报以抵御日益增长的网络犯罪已成为基本需求。互联网协议(IP)地址在威胁情报和网络犯罪预防中发挥着关键作用。然而,我们注意到目前缺乏能够分析IP地址的一站式、免费且开源的工具。为此,本研究引入了一个用于高级IP地址特征分析的综合性Web工具。我们的工具提供广泛的功能,包括地理位置定位、黑名单检查、VPN检测、代理检测、机器人检测、Tor网络检测、端口扫描,以及包含名称服务器和注册商信息的精确域名统计。此外,我们的工具基于来自不同可靠源的公开在线结果,通过加权计算得出置信度评分,为用户提供可靠的可信度度量。为进一步提升性能,我们的工具还集成了本地数据库用于缓存结果,以实现快速内容检索并最大限度减少外部Web API调用。我们的工具支持域名和IPv4地址,使其成为适用于威胁情报的多功能强大IP分析工具。该工具可通过www.ipanalyzer.in访问。