A comprehensive, feature-rich CLI tool for network professionals, cybersecurity specialists, and penetration testers. NetworkPhantom provides geolocation lookups, subnet analysis, network scanning, and advanced IP intelligence all in one powerful tool.
- IP Geolocation Lookup - Get comprehensive location data (country, city, coordinates, timezone)
- Security Detection - Identify proxies, VPNs, data centers, and mobile connections
- WHOIS Lookup - Retrieve ISP, organization, and AS number information
- DNS Lookup - Resolve domain names to IP addresses
- Reverse DNS - Find hostnames from IP addresses
- MAC Address Lookup - Identify device vendors from MAC addresses
- IP Reputation - Check if IP is blacklisted or suspicious
- Subnet Calculator - Calculate subnets from CIDR notation or netmask
- Decimal Conversion - Convert between subnet masks, CIDR, binary, and hex
- IP Range Generator - Generate all usable IPs in a CIDR block
- Wildcard Mask Calculator - Perfect for ACL and firewall rules
- Network Requirements - Calculate optimal subnet size based on host count
- Subnet Breakdown - Divide large networks into smaller subnets
- Supernet Calculation - Combine multiple subnets
- Ping Test - Test host reachability and response times
- Port Scanner - Scan common ports (SSH, HTTP, HTTPS, MySQL, etc.)
- Traceroute - Trace the network path to a destination
- DNS Resolution - Check DNS propagation and resolution
- Export Reports - Save analysis to JSON or CSV format
- Batch Analysis - Analyze multiple IPs at once
- Colorized Output - Beautiful, easy-to-read terminal UI
- Animated Transitions - Smooth screen animations
- Advanced ASCII Art - Professional banner and styling
- Color-coded Information - Easy to scan results
- Interactive Menus - Intuitive navigation
- Clear Screen Animations - Smooth visual feedback
- Python 3.7+
- requests library
- Internet connection (for geolocation and WHOIS lookups)
git clone https://github.com/xdrew87/NetSentinel.git
cd NetSentinel
pip3 install -r requirements.txt
python3 main.pyrequests- HTTP library for API calls- Standard library:
socket,subprocess,json,csv, etc.
Option 1 → Lookup IP & Geolocation Analysis
Enter IP: 8.8.8.8
Displays complete geolocation, ISP, security status, and more.
Option 3 → Advanced Network Tools → Subnet Breakdown Calculator
Current CIDR: /16
Target CIDR: /24
Shows how to divide a /16 network into /24 subnets.
Option 4 → Utility Tools → IP Range Generator
IP: 192.168.1.0
CIDR: /24
Generates all usable IPs in the network (192.168.1.1 - 192.168.1.254).
Option 5 → Network Connectivity → Port Scanner
IP: 192.168.1.1
Scans common ports and displays open services.
Option 6 → Advanced IP Intelligence → Export IP Report
IP: 50.80.72.174
Format: JSON
Saves complete analysis to a timestamped JSON file.
This tool is designed for authorized security testing and network administration only. Ensure you have permission before:
- Scanning networks you don't own
- Performing port scans on external systems
- Accessing WHOIS information
Always comply with applicable laws and regulations.
NetSentinel Main Menu
├─ 1. 🌐 Lookup IP & Geolocation Analysis
├─ 2. 🔢 Convert Subnet to Decimal Representation
├─ 3. 📊 Advanced Network Tools
│ ├─ Subnet Breakdown Calculator
│ └─ More tools...
├─ 4. 🛠️ Utility Tools & Generators
│ ├─ IP Range Generator
│ ├─ Wildcard Mask Calculator
│ └─ Network Requirements Calculator
├─ 5. 📡 Network Connectivity & Scanning
│ ├─ Ping Host
│ ├─ Port Scanner
│ ├─ DNS Lookup
│ └─ Reverse DNS Lookup
├─ 6. 🔍 Advanced IP Intelligence
│ ├─ WHOIS Lookup
│ ├─ MAC Address Lookup
│ └─ Export IP Report
└─ 7. ❌ Exit
| Category | Count | Features |
|---|---|---|
| IP Intelligence | 7 | Geolocation, WHOIS, DNS, Reverse DNS, MAC Lookup, IP Rep, Security Detection |
| Subnet Tools | 7 | Subnet Calc, Decimal Conv, IP Range Gen, Wildcard Mask, Net Req, Breakdown, Supernet |
| Scanning | 4 | Ping, Port Scan, DNS, Traceroute |
| Utilities | 3 | Export, Batch Analysis, MAC Lookup |
| Total | 21+ | Comprehensive Network Analysis |
- Network Administration - Plan and manage network subnets
- Penetration Testing - Scan networks and gather intelligence
- SOC Operations - Quickly analyze suspicious IPs
- Incident Response - Trace IP origins and determine threats
- Security Research - Investigate IP reputation and hosting
- Network Documentation - Generate reports for compliance
- Country, Region, City, District, ZIP Code
- Latitude, Longitude, Timezone
- ISP, Organization, AS Number
- Connection Type, Reverse DNS
- Currency and UTC Offset
- Proxy/VPN Detection
- Data Center Detection
- Mobile Connection Detection
- Network/Broadcast addresses
- Usable host ranges
- Binary and hex representations
- CIDR notation
- Number of networks/hosts
- Subnet breakdown calculations
- Identify IP → Use IP Geolocation Lookup
- Check Threat Level → Review security detection results
- Scan Ports → Run port scanner on the IP
- Analyze Network → Use subnet tools to understand the network
- Export Report → Save findings to JSON/CSV
- JSON - Complete structured data export
- CSV - Spreadsheet-compatible format
- TXT - Plain text IP lists
- Console - Beautiful colored terminal output
The tool uses the free ip-api.com API for geolocation (limited to 45 requests/minute). For production use, consider:
- Setting up API rate limiting
- Using premium APIs for higher limits
- Implementing caching for repeated lookups
Contributions are welcome! Areas for enhancement:
- IPv6 support
- Additional APIs for IP reputation
- Advanced reporting templates
- Performance optimizations
- More port scanner options
MIT License - Free for personal and commercial use
- Geolocation lookups: ~1-2 seconds
- Port scans: ~10 seconds (10 ports)
- DNS lookups: ~1 second
- Subnet calculations: Instant
- IP range generation: <1 second for typical ranges
API Rate Limited?
- Wait a few minutes or use a smaller batch
- Consider purchasing API credits
Port Scan Slow?
- Reduce number of ports scanned
- Increase timeout threshold
DNS Lookup Failed?
- Check internet connection
- Verify domain name spelling
- Try reverse DNS instead
For issues, questions, or feature requests, please open an issue on GitHub.
- ip-api.com for geolocation data
- Python community for excellent libraries
- Security researchers and network professionals
Made with ❤️ for network professionals
Visit the project: GitHub Repository