A modular Python tool that collects threat intelligence for hosts (IPs, domains, FQDNs) from multiple sources and outputs CSV data.
Hostintel is a modular Python application that collects threat intelligence data for hosts—including IP addresses, domains, and fully qualified domain names (FQDNs)—from multiple security intelligence sources. It automates the process of querying services like VirusTotal, Shodan, and PassiveTotal, outputting the results in CSV format for further analysis. The tool is designed to help security professionals efficiently gather and consolidate host-related data for investigations and threat detection.
Security analysts, threat hunters, and cybersecurity researchers who need to automate the collection of host intelligence from multiple feeds for investigations or monitoring.
Developers choose Hostintel for its modular design, which allows easy integration of new intelligence sources, and its straightforward CSV output that simplifies data import into other tools. It saves significant time compared to manual lookup processes across disparate platforms.
A modular Python application to collect intelligence for malicious hosts.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
New intelligence sources can be easily added via plugins, as emphasized in the README's design for extensibility.
Accepts FQDNs, domains, and IPv4 addresses, allowing flexible host identification for various investigation needs.
Integrates with key sources like VirusTotal, Shodan, and PassiveTotal, providing comprehensive threat data from diverse APIs.
Processes lists of hosts from an input file, automating bulk data collection and saving manual effort.
Explicitly does not support IPv6 addresses, limiting its utility in modern networks with IPv6 adoption.
Can run for very long durations due to dependency on external API rate limits and network I/O, as warned in the README.
Requires configuration of multiple API keys, git for module installation, and may have OS-specific Python issues, adding to initial overhead.