GhostTrack Explained: Track IPs, Phones, and Usernames Easily

Ever wondered how investigators trace a phone number back to its country of origin, or pull location data from a bare IP address?

GhostTrack is one of the freely available Python tools that promises exactly that. The wider open-source intelligence space has grown into a serious industry, with The Business Research Company pegging the global OSINT market at $18.07 billion in 2025.

GhostTrack itself sits firmly in the hobbyist and learner end of that ecosystem. It bundles three reconnaissance modules, IP tracking, phone lookup, and username search, into a single menu-driven script.

In this guide, we walk you through what it does, how it installs, what it gets right, and where it falls short compared to the heavyweights.

What Is GhostTrack?

GhostTrack is a free, open-source Python script that gathers publicly available data about phone numbers, IP addresses, and usernames. Maintained on GitHub by HunxByts, it currently runs on Version 2.2.

The wider OSINT category it belongs to is dominated by cybersecurity end-users, who hold 29.8% of the market according to IMARC Group’s 2025 report.

The script targets two environments specifically: Debian-based Linux distributions and Termux, the popular Android terminal emulator.

That dual focus explains why most tutorials about it sit on Termux blogs. There’s no graphical interface, no API, and no formal release tags. You get one Python file (GhostTR.py) plus a requirements.txt, and that’s the entire toolkit.

So who actually uses it? Mainly students, ethical hacking learners, and Termux enthusiasts experimenting with reconnaissance on their phones. Professional analysts usually pick PhoneInfoga, Maltego, or commercial platforms instead.

You Should Know: GhostTrack consolidates three OSINT functions, IP, phone, and username lookup, into a single interactive Python script. According to its GitHub repository, the project has earned 8.1k stars and 1.1k forks while running on Version 2.2, with development limited to 23 total commits and 2 contributors as of mid-2026.

How Does GhostTrack Work Behind the Menu?

GhostTrack pulls data from public APIs and free lookup services rather than running its own intelligence database. When you enter an IP, it queries geolocation endpoints and returns ISP, country, region, and rough coordinates. The phone module parses country codes and reports the carrier and registration country. The username module checks a small list of social platforms.

[UNIQUE INSIGHT] Here’s something worth flagging: GhostTrack’s “phone tracker” doesn’t track a live phone. It identifies the country and carrier tied to that number’s registration, nothing more. That’s a critical distinction. No script using public APIs alone can pinpoint someone’s real-time location from a phone number. If a tool claims otherwise, treat it as a red flag and walk away.

What about usernames? The script runs lookups against a fixed set of social sites and reports which return a profile. It’s far lighter than Sherlock, which scans 300+ platforms.

Installing GhostTrack on Linux and Termux

Installation takes under two minutes on either platform, assuming Python 3 and Git are already available. The official GitHub README lists the standard apt-get and pkg commands. Most failed installs trace back to one issue: a urllib3 version mismatch on newer Python builds.

Linux (Debian or Ubuntu)

bash

sudo apt-get install git python3
git clone https://github.com/HunxByts/GhostTrack.git
cd GhostTrack
pip3 install -r requirements.txt
python3 GhostTR.py

Termux (Android)

bash

pkg install git python3
git clone https://github.com/HunxByts/GhostTrack.git
cd GhostTrack
pip install -r requirements.txt
python GhostTR.py

In my testing across Termux installs, the first launch frequently breaks because of urllib3 v2 incompatibility.

The fix is one line: pip uninstall urllib3 && pip install "urllib3<2". Re-run the script after that. Storage permissions also need granting via termux-setup-storage if you plan to save outputs to your Android filesystem.

How Does GhostTrack Compare to PhoneInfoga and Sherlock?

GhostTrack is broader but shallower than its single-purpose rivals. PhoneInfoga goes deeper on phones, exposing carrier, line type, and reputation checks. Sherlock outpaces it on usernames, scanning 300+ platforms versus GhostTrack’s smaller built-in list.

Where GhostTrack actually wins is convenience: one script handles three jobs, which matters on a phone running Termux with limited storage.

Feature	GhostTrack	PhoneInfoga	Sherlock
Phone Lookup	Basic	Advanced	No
IP Geolocation	Yes	No	No
Username Search	Limited	No	300+ sites
Active Maintenance	Low (23 commits)	High	Very High

The practical takeaway? Run all three tools against the same target. GhostTrack will usually agree with PhoneInfoga on country and carrier, but PhoneInfoga adds line type and reputation data that GhostTrack simply doesn’t expose.

For usernames, Sherlock’s coverage will almost always surface profiles that GhostTrack misses entirely. Treat GhostTrack as the front door, not the whole investigation.

Also read: Free vs Premium – Is NumLookup’s Paid Tier Actually Worth

Legal and Ethical Considerations for GhostTrack Users

Using GhostTrack on data you own or have authorization to investigate is legal in most jurisdictions. Tracking someone else’s phone, IP, or username without consent crosses into harassment, stalking, or computer misuse depending on local law.

The OSINT field operates on a clear principle: public data is fair game for research, but using it to harm an individual is not.

The IJARCCE peer-reviewed journal published a 2025 paper proposing an “Ethical-by-Design” framework for mobile-number intelligence tools, naming exactly the kind of fragmented, guardrail-free scripts that GhostTrack represents. Treat this software as a learning sandbox, not a surveillance kit.

Practical rules to follow:

• Only scan numbers, IPs, or accounts you own.
• Get written permission before scanning a client’s assets.
• Never publish output without redacting sensitive fields.

Frequently Asked Questions

Wrapping Up!

GhostTrack is a solid first step into hands-on OSINT, especially for learners running Termux on Android. It teaches the rhythm of reconnaissance work: enter a target, choose a module, read the output, repeat. But it’s not a professional tool, and the slowing commit history confirms that gap.

If you need depth, switch to dedicated alternatives. If you’re learning, pair GhostTrack with the wider OSINT framework principles: source verification, data minimization, ethical authorization.

Try installing it on a spare device, run it against your own number and IP first, then compare results with PhoneInfoga and Sherlock on the same inputs.

That side-by-side practice will teach you more than any single tool ever can.