Workflows / HALO
HALO
Host & Asset Lookout Operations
See what the outside world can see. Know what's connected inside your network.
Only assess networks you own or have explicit permission to examine. This page provides curated links to third-party discovery tools. OSINT Command does not scan, probe or store any network data.
HALO Outside
What can the internet see?
An external network exposure lookup can reveal publicly observable services associated with a public IP address. Use your current public IP address to investigate what these services have observed about your internet-facing network. Results may be incomplete, outdated or associated with a previous user of the IP address.
First, find your public IP address.
Your public IP address identifies your internet connection to outside services. Find it using the resource below, then use Shodan or Censys to investigate what may be visible.
WhatIsMyIP
View the public IP address of your current internet connection. Copy it to use with the research tools below.
If you're checking another location, such as a family member's home, you'll need the public IP address of that location instead.
Shodan
Explore previously observed internet-facing devices, open ports and exposed services.
Censys
Research internet-facing hosts, services and certificates.
HALO Inside
What's connected to your network?
Internal network discovery requires a device connected to the network being examined. Internal discovery cannot be performed from a public IP lookup alone. Run a local discovery tool while connected to the network you own or are authorized to assess.
Fing
fing.comDiscover connected devices, identify unfamiliar equipment and inspect local network information.
- Download the Fing app on a device connected to your network.
- Run a network scan to enumerate connected devices.
- Review unfamiliar devices and note their MAC addresses and manufacturers.
Router Device Inventory
Most routers include a built-in connected-device list accessible from the admin interface. Platforms such as UniFi provide detailed device inventories, traffic visibility and network segmentation controls.
Understanding the Difference
Outside
Shows what internet-facing discovery services have observed about your public IP address and the services visible from the internet.
Inside
Shows devices and services accessible from within the local network, visible only to devices already connected to it.
Neither view alone establishes whether a network is secure. An exposed service is not necessarily vulnerable, and a clean external search does not guarantee that a network is protected.
HALO is a curated discovery workflow. OSINT Command does not scan networks, store IP addresses or generate security assessments.