# Associated-Threat-Analyzer | Detects Malicious IPv4 Addresses And Domain Names **URL:** \ **Category:** Tools & Scripts\ **Tags:** hacking, hosting\ **Created:** [September 6, 2023, 9:36pm UTC](https://onehack.st/t/associated-threat-analyzer-detects-malicious-ipv4-addresses-and-domain-names/255211 "2023-09-06T21:36:49Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Post date:** [September 6, 2023, 9:36pm UTC](https://onehack.st/t/associated-threat-analyzer-detects-malicious-ipv4-addresses-and-domain-names/255211/1 "2023-09-06T21:36:49Z")
[![Logo](https://github.com/OsmanKandemir/associated-threat-analyzer/raw/main/imglogo.png)](https://github.com/OsmanKandemir/associated-threat-analyzer/blob/main/imglogo.png) [![Threat-Analyzer](https://camo.githubusercontent.com/5c285ca0d5973c95edfb604b74c8a00d8db302db0f3c07ded114fff2d68c3097/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5468726561742d416e616c797a65722d726564)](https://www.github.com/OsmanKandemir/associated-threat-analyzer) [![Version](https://camo.githubusercontent.com/237df49a2d3c5e2224c4209f4601a74766f0a46fe4636fa4aaa9e633ea5595b3/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f76657273696f6e2d312e302d626c75652e737667)](https://github.com/OsmanKandemir/associated-threat-analyzer) [![License](https://camo.githubusercontent.com/7103aac93bdd986fc611b056f45e698a286a3e604d195ec7a4f4cd1674448076/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d47504c2d626c75652e737667)](https://github.com/OsmanKandemir/static-threat-analyzer/blob/main/LICENSE) [![Python Version](https://camo.githubusercontent.com/5507484da1f64c90d0092df9bf42fe157503da1d6aad92319544fe87da76ce90/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f707974686f6e2d332e372b2d677265656e)](https://www.python.org/) [![Docker](https://camo.githubusercontent.com/51664147f473a4a797bbc6d4dade0b8b232f8b28ca8492c70844771c7099ba76/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f646f636b65722d6275696c642d696d706f7274616e742e7376673f6c6f676f3d446f636b6572)](https://www.docker.com/) # Associated-Threat-Analyzer #### NOTE : What do privacy laws say about sharing malicious domains and IPs ? Please See; [USAGE\_POLICY.md](https://github.com/OsmanKandemir/associated-threat-analyzer/blob/main/USAGE_POLICY.md) [LICENSE](https://github.com/OsmanKandemir/associated-threat-analyzer/blob/main/LICENSE) ## Description Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious domain and IPv4 lists. ## ScreenShot [![Screenshot](https://github.com/OsmanKandemir/associated-threat-analyzer/raw/main/screenshot.png)](https://github.com/OsmanKandemir/associated-threat-analyzer/blob/main/screenshot.png) ## Installation ### From Git ```auto git clone https://github.com/OsmanKandemir/associated-threat-analyzer.git cd associated-threat-analyzer && pip3 install -r requirements.txt python3 analyzer.py -d target-web.com ``` ### From Dockerfile You can run this application on a container after build a Dockerfile. ###### Warning : If you want to run a Docker container, associated threat analyzer recommends to use your malicious IPs and domains lists, because maintainer may not be update a default malicious IP and domain lists on docker image. ```auto docker build -t osmankandemir/threatanalyzer . docker run osmankandemir/threatanalyzer -d target-web.com ``` ### From DockerHub ```auto docker pull osmankandemir/threatanalyzer docker run osmankandemir/threatanalyzer -d target-web.com ``` ## Usage ```auto -d DOMAIN , --domain DOMAIN Input Target. --domain target-web1.com -t DOMAINSFILE, --DomainsFile Malicious Domains List to Compare. -t SampleMaliciousDomains.txt -i IPSFILE, --IPsFile Malicious IPs List to Compare. -i SampleMaliciousIPs.txt -o JSON, --json JSON JSON output. --json ``` ## DONE - First-level depth scan your domain address. ## TODO list - Third-level or the more depth static files scanning for target web application. ##### Other linked github project. You can take a look. ###### Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence v1.1.1 collects static files > **[GitHub - OsmanKandemir/indicator-intelligence: Finds related domains and IPv4 addresses to do...](https://github.com/OsmanKandemir/indicator-intelligence)** > > Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence collects static files. ## Default Malicious IPs and Domains Sources > **[GitHub - stamparm/blackbook: Blackbook of malware domains](https://github.com/stamparm/blackbook)** > > Blackbook of malware domains > **[GitHub - stamparm/ipsum: Daily feed of bad IPs (with blacklist hit scores)](https://github.com/stamparm/ipsum)** > > Daily feed of bad IPs (with blacklist hit scores) ## Development and Contribution #### See; [CONTRIBUTING.md](https://github.com/OsmanKandemir/associated-threat-analyzer/blob/main/CONTRIBUTING.md) ## License Copyright (c) 2023 Osman Kandemir Licensed under the GPL-3.0 License. ## Donations If you like Associated Threat Analyzer and would like to show support, you can use **Buy A Coffee** or **Github Sponsors** feature for the developer using the button below. Or Sponsor me : [https://github.com/sponsors/OsmanKandemir](https://github.com/sponsors/OsmanKandemir) 😊 [![Buy Me A Coffee](https://camo.githubusercontent.com/3ba8042b343d12b84b85d2e6563376af4150f9cd09e72428349c1656083c8b5a/68747470733a2f2f63646e2e6275796d6561636f666665652e636f6d2f627574746f6e732f64656661756c742d6f72616e67652e706e67)](https://www.buymeacoffee.com/OsmanKandemir) Your support will be much appreciated😊 ## GitHub: > **[GitHub - OsmanKandemir/associated-threat-analyzer: Associated-Threat-Analyzer detects malicious IPv4...](https://github.com/OsmanKandemir/associated-threat-analyzer)** > > Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious domain and IPv4 lists.