Project Overview

A self-hosted network & threat-intelligence console that scores whether an IP or host is a VPN, proxy or Tor node — and bundles nine network-recon tools alongside it. Everything runs from one clean console with multi-signal risk scoring and explainable verdicts, no API key required.

Nine self-contained modules — detection, DNS & reputation, web/transport recon and offline calculators — in one keyless, theme-aware console.

Detection

• VPN / Proxy / Tor scoring: multi-signal risk score (0–100) with explainable verdicts (Clean ↔ Critical).
• Live dashboard: risk-score timeline, verdict distribution, top geographies, top flagged networks and a live activity feed.
• Tor exit-node feed integration, a "Check my IP" shortcut and an optional active port probe.

DNS & Reputation

• DNS Resolver over encrypted DNS-over-HTTPS (A / AAAA / MX / NS / TXT / CNAME / SOA).
• Blocklist Reputation against 7 public DNSBLs (Spamhaus, SpamCop, Barracuda, SORBS, UCEPROTECT…).
• RDAP / WHOIS ownership and registration lookups.

Web & Transport

• TLS Certificate inspector: issuer, validity window, expiry countdown, SANs, protocol and cipher.
• HTTP Header Audit for security headers.
• Port Scanner and TCP Latency measurement.

Calculators & Platform

• Subnet Calculator: offline CIDR math — network, mask, wildcard, broadcast, host range and address counts.
• 9 self-contained modules with no API key required.
• Clean console UI with light & dark themes and a REST API (POST /api/tools/*).

DevOps & Delivery

• Containerised with Docker for easy self-hosting.
• CI/CD build → test → deploy.
• Keyless & self-hostable — no external API dependencies to run it.

It's a practical blue-team / DevSecOps toolkit: one console to fingerprint an address, check its reputation, inspect its TLS and crunch the network math behind it.

View Code on GitHub Discuss This Project With Me