Inspiration

Every security researcher or student doing recon has the same problem: everything is scattered. You go from VirusTotal to AbuseIPDB to DNS lookups, and by the end you’re still unsure if the IP is actually dangerous.

We wanted to make that process simple and fast — a tool that feels like a “one-click security check.” Our goal was to build something any student or analyst could use to quickly assess threats without needing enterprise software.

What it does

Type in an IP address or domain, and IntellPort does the rest: Pulls data from 7+ threat sources like VirusTotal, AbuseIPDB, and Cloudflare DNS. Runs network recon (port scanning and subdomain discovery). Generates an AI-based risk score (0–10) with severity levels from Minimal to Critical. Displays everything visually — badges for open ports, color-coded risk meter, and scrollable subdomain list. Gives actionable insights like “open SSH port,” “abuse reports found,” or “proxy detected.” It’s basically a one-stop dashboard for quick, smart IP analysis.

How we built it

Backend: Built with Node.js + Express to handle all API calls and security logic. Data from multiple sources is fetched in parallel to keep scans under 5 seconds. AI Engine: A lightweight Python service aggregates all results and generates the final score using heuristic rules and context (abuse reports, ports, country, etc.). Frontend: Developed in React + Vite with a focus on clarity and speed. The dashboard includes a live risk meter, interactive cards, and a responsive layout. APIs: VirusTotal, AbuseIPDB, ip-api, rdap, crt.sh, and Cloudflare DNS-over-HTTPS.

We kept it lightweight — no paid services, no exposed keys, and all free-tier APIs.

Challenges we ran into

Getting seven APIs to work together under rate limits was rough. We also had to handle errors gracefully so missing data wouldn’t break the dashboard. Designing the UI to show a lot of info without clutter was another big challenge, but after a few redesigns, it finally clicked.

Accomplishments that we're proud of

We plan to add: Batch IP scanning and PDF report exports Historical risk tracking Real-time alerts when new threats appear Interactive map view for IP locations

We want IntellPort to become a free, student-friendly threat-intel tool anyone can use to learn, explore, and protect their network.

What we learned

We learned how to manage multiple APIs efficiently, handle errors cleanly, and keep performance fast under real-time conditions. Designing a simple UI for complex data taught us that clarity matters just as much as accuracy.

What's next for InteliPort

We plan to add batch IP scanning, real-time alerts, and exportable reports. We also want to build map-based threat visualization and make IntellPort open-source so other students can learn from and improve it.

Built With

Share this project:

Updates