Awesome GitHub RepositoriesIP Geolocation

Fingerprint is a visitor identification and fraud detection platform that generates persistent, unique identifiers by analyzing browser and device attributes. By extracting technical signals from the client environment, it enables reliable user tracking across sessions without relying on traditional cookies. The platform distinguishes itself through its focus on high-accuracy identification and security-first architecture. It employs edge-side proxying to bypass ad-blockers and privacy restrictions, ensuring consistent data collection. To maintain data integrity, it uses cryptographic payload

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

This project is a terminal-based log analyzer and real-time traffic monitoring system designed for web server environments. It processes raw server access logs to generate structured statistical insights, providing visibility into visitor behavior, bandwidth usage, and request latency. The tool functions as a high-performance utility capable of handling large-scale datasets through multi-threaded parsing and memory-efficient data structures. The software distinguishes itself by offering both an interactive terminal interface and a web-based dashboard that updates in real-time via WebSocket st

ip2region is an offline IP geolocation library and framework designed to resolve IPv4 and IPv6 addresses to city-level regional information using local binary data files. It functions as a binary IP database compiler and a cross-language search client, allowing for regional lookups without relying on external APIs. The project distinguishes itself through a specialized binary format that supports high-performance query optimization. It employs adjacent-segment IP merging and deduplicated region storage to minimize the database footprint, while utilizing memory-mapped file caching and vector-i

node-elm is a Node.js and MongoDB backend framework designed for building data-driven applications, specifically e-commerce systems and food delivery management platforms. It provides a foundation for managing product catalogs, shopping carts, and payment workflows. The system includes a dedicated administrative management dashboard for tracking system statistics and managing users and merchants through role-based access control. It also features a digital coupon management system for tracking and exchanging promotional rewards. The framework incorporates geolocation services for IP-based po

MyIP is a network diagnostics toolbox designed for analyzing public IP addresses, geolocation, and network connectivity performance. It provides utilities for identifying IPv4 and IPv6 addresses and analyzing their associated organization, ASN, and geographic details. The project features specialized privacy and security tools, including a network leak tester to detect DNS and WebRTC leaks used to verify VPN or proxy configurations. It also includes a browser fingerprint analyzer that generates unique client identifiers to audit how device attributes are used for online tracking. The platfor

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

NTrace-core is an open-source network diagnostic toolset that combines traceroute and MTR techniques with geographic IP geolocation, path MTU discovery, and multi-protocol probing. It functions as a command-line utility and a local web server, providing both a terminal-based interface and a browser-based UI for tracing network paths and analyzing hop-by-hop performance. The tool distinguishes itself through a modular architecture that includes a community probe network for executing traceroutes from geographically dispersed agents, a token-gated API for authenticating remote requests, and an

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

This project is a self-hosted bot protection service and CAPTCHA alternative that verifies human identity without relying on third-party tracking. It utilizes a combination of WebAssembly-based proof-of-work puzzles and browser instrumentation to distinguish humans from automated bots. The system is delivered as dockerized security middleware and a privacy-first verification API that operates without the use of cookies or user fingerprinting. The service differentiates itself by using GPU-resistant time-lock algorithms and instrumentation-based detection to identify headless browsers and auto

Trippy is a network diagnostic tool and terminal user interface that combines ping and traceroute functionality to analyze network paths and performance. It provides a network packet parser and path analyzer to detect packet loss, jitter, and multipath routing through continuous network probing. The project is distinguished by its support for specialized tracing strategies, including Paris and Dublin, to ensure consistent path discovery. It identifies network address translation devices and utilizes heuristic analysis to distinguish genuine packet loss from rate-limiting. Broad capability ar

GhostTrack is an open-source intelligence (OSINT) framework that aggregates geographic, network, and social identity information from public data sources. It functions as a digital footprint analyzer, collecting various pieces of publicly available information to build comprehensive profiles of target individuals. The framework combines multiple investigative capabilities into a single tool, including IP address geolocation, phone number intelligence, and social media username discovery. It distributes queries across external data services to maximize coverage and accuracy, resolving IP addre

Tautulli is a monitoring tool and administration interface for Plex Media Servers. It tracks real-time streaming activity, maintains detailed playback histories, and provides a centralized dashboard for server analytics. The project distinguishes itself through an event-driven notification system that triggers custom scripts and alerts based on server activity. It includes a template-based engine for generating periodic newsletters and utilizes webhooks to dispatch alerts to third-party services. The software covers broad capability areas including media library auditing, usage trend analysi

This is a Ruby toolkit for converting addresses to geographic coordinates and performing reverse geocoding via multiple external API providers. It provides a library for integrating location services into Ruby applications, including an IP geolocation tool to translate IP addresses into coordinates, city names, and country data. The project includes a command line interface for bulk geocoding of database records with integrated rate limiting and a geospatial query engine for calculating distances and performing radius or bounding box searches. It also features a mocking framework that provide

Dshell is a network forensic analysis framework and traffic processor designed for the deep packet inspection of IPv4 and IPv6 traffic. It functions as an extensible forensic plugin system that captures, inspects, and analyzes network data to identify security anomalies and reconstruct communication streams. The system utilizes a plugin-based processing engine that allows for custom plugin development and plugin chaining. This modular architecture enables the creation of specialized analysis pipelines where network data is passed through a sequence of processing units for multi-step analysis.

freegeoip هي خدمة تحديد الموقع الجغرافي ذاتية الاستضافة وخادم API يقوم بربط عناوين IP وأسماء المضيفين بالمواقع الجغرافية. تعمل كقارئ لقاعدة بيانات MaxMind، حيث تحلل قواعد بيانات الموقع الجغرافي الثنائية لتوفير بيانات الموقع من خلال واجهة REST. يتميز المشروع بتوفير بديل خاص لمزودي تحديد الموقع الجغرافي السحابي، وإدارة ملفات قاعدة البيانات المحلية وأتمتة التحديثات الدورية. يتضمن محلل IP للوكيل العكسي لاستخراج عناوين العميل الأصلية من رؤوس الوكيل، مما يضمن تعيينًا دقيقًا خلف موازنات الحمل. تدمج الخدمة نظامًا لإدارة الحصص لفرض حدود الطلبات لكل عميل وتأمين نقاط النهاية الخاصة بها باستخدام تشفير TLS وسياسات CORS. كما تتميز بمزامنة تلقائية لقاعدة البيانات مع التحقق من الإصدار القائم على المجموع الاختباري (checksum) وواجهة ويب عامة اختيارية لإجراء عمليات البحث.

Storm-Breaker is a browser-based surveillance toolkit designed to silently capture sensor data from visitors without their knowledge or consent. It combines device fingerprinting, network-based geolocation tracking, and WebRTC exploitation to access a remote device’s camera, microphone, and system information without triggering native permission prompts. The toolkit achieves this by leveraging legacy browser APIs and network-based geolocation (IP, Wi-Fi) that do not require explicit user permission. It abuses WebRTC and media stream APIs to activate camera and microphone streams, while also c

Ahoy هو إطار عمل تحليلات طرف أول لتطبيقات Ruby on Rails. يوفر أدوات لالتقاط سلوكيات المستخدم وعرض الصفحات، مما يسمح للمطورين بالحفاظ على الملكية الكاملة لبيانات التحليلات الخاصة بهم. يتميز النظام من خلال تحليلات البيانات العلائقية، التي تربط معرفات الزيارة مباشرة بنماذج التطبيق لنسبة كائن الأعمال العميق. ويتضمن أداة تتبع تحافظ على الخصوصية تستخدم إخفاء عنوان IP وتجميع الزوار بدون ملفات تعريف ارتباط لإخفاء هوية بيانات المستخدم. يغطي المشروع مجموعة واسعة من قدرات التحليلات، بما في ذلك تتبع الأحداث المخصصة، ودقة الموقع الجغرافي عبر تحديد الموقع الجغرافي لـ IP، وتحليل قمع المستخدم. ويدير البيانات من خلال استمرارية قاعدة البيانات العلائقية ويستخدم التجميعات المسبقة للحفاظ على أداء الاستعلام على مجموعات البيانات الكبيرة. تشمل ميزات البنية التحتية الإضافية توجيه الرسائل غير المتزامن، وتصفية حركة المرور على مستوى البرمجيات الوسيطة لاستبعاد الروبوتات، وAPI مخصص لجمع البيانات من الجوال أو العملاء الخارجيين.