Awesome GitHub RepositoriesGeolocation Databases

This application is a desktop network traffic analyzer that provides real-time monitoring and forensic inspection of data packets. By interfacing directly with low-level system drivers, it captures raw network traffic from physical or virtual adapters to identify communication patterns, track bandwidth usage, and diagnose connectivity issues. The system distinguishes itself through an immediate-mode graphical interface that rebuilds the display state every frame, ensuring high responsiveness during live data updates. It maintains performance by using asynchronous message passing to decouple t

Fingerprint is a visitor identification and fraud detection platform that generates persistent, unique identifiers by analyzing browser and device attributes. By extracting technical signals from the client environment, it enables reliable user tracking across sessions without relying on traditional cookies. The platform distinguishes itself through its focus on high-accuracy identification and security-first architecture. It employs edge-side proxying to bypass ad-blockers and privacy restrictions, ensuring consistent data collection. To maintain data integrity, it uses cryptographic payload

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

This project is a terminal-based log analyzer and real-time traffic monitoring system designed for web server environments. It processes raw server access logs to generate structured statistical insights, providing visibility into visitor behavior, bandwidth usage, and request latency. The tool functions as a high-performance utility capable of handling large-scale datasets through multi-threaded parsing and memory-efficient data structures. The software distinguishes itself by offering both an interactive terminal interface and a web-based dashboard that updates in real-time via WebSocket st

ip2region is an offline IP geolocation library and framework designed to resolve IPv4 and IPv6 addresses to city-level regional information using local binary data files. It functions as a binary IP database compiler and a cross-language search client, allowing for regional lookups without relying on external APIs. The project distinguishes itself through a specialized binary format that supports high-performance query optimization. It employs adjacent-segment IP merging and deduplicated region storage to minimize the database footprint, while utilizing memory-mapped file caching and vector-i

node-elm is a Node.js and MongoDB backend framework designed for building data-driven applications, specifically e-commerce systems and food delivery management platforms. It provides a foundation for managing product catalogs, shopping carts, and payment workflows. The system includes a dedicated administrative management dashboard for tracking system statistics and managing users and merchants through role-based access control. It also features a digital coupon management system for tracking and exchanging promotional rewards. The framework incorporates geolocation services for IP-based po

MyIP is a network diagnostics toolbox designed for analyzing public IP addresses, geolocation, and network connectivity performance. It provides utilities for identifying IPv4 and IPv6 addresses and analyzing their associated organization, ASN, and geographic details. The project features specialized privacy and security tools, including a network leak tester to detect DNS and WebRTC leaks used to verify VPN or proxy configurations. It also includes a browser fingerprint analyzer that generates unique client identifiers to audit how device attributes are used for online tracking. The platfor

This project is a collection of bash automation scripts and command-line utilities designed to automate common tasks and retrieve information from web APIs. It serves as a toolkit for developer references, network diagnostics, and media access directly from the terminal. A central component of the suite is a GitHub Gist manager that handles the full lifecycle of code snippets. This includes cloning and syncing Gists into local directories for offline access, organizing content through hashtags, and searching through snippet descriptions and file contents using regular expressions. The toolki

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

NTrace-core is an open-source network diagnostic toolset that combines traceroute and MTR techniques with geographic IP geolocation, path MTU discovery, and multi-protocol probing. It functions as a command-line utility and a local web server, providing both a terminal-based interface and a browser-based UI for tracing network paths and analyzing hop-by-hop performance. The tool distinguishes itself through a modular architecture that includes a community probe network for executing traceroutes from geographically dispersed agents, a token-gated API for authenticating remote requests, and an

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

This project is a self-hosted bot protection service and CAPTCHA alternative that verifies human identity without relying on third-party tracking. It utilizes a combination of WebAssembly-based proof-of-work puzzles and browser instrumentation to distinguish humans from automated bots. The system is delivered as dockerized security middleware and a privacy-first verification API that operates without the use of cookies or user fingerprinting. The service differentiates itself by using GPU-resistant time-lock algorithms and instrumentation-based detection to identify headless browsers and auto

Trippy is a network diagnostic tool and terminal user interface that combines ping and traceroute functionality to analyze network paths and performance. It provides a network packet parser and path analyzer to detect packet loss, jitter, and multipath routing through continuous network probing. The project is distinguished by its support for specialized tracing strategies, including Paris and Dublin, to ensure consistent path discovery. It identifies network address translation devices and utilizes heuristic analysis to distinguish genuine packet loss from rate-limiting. Broad capability ar

GhostTrack is an open-source intelligence (OSINT) framework that aggregates geographic, network, and social identity information from public data sources. It functions as a digital footprint analyzer, collecting various pieces of publicly available information to build comprehensive profiles of target individuals. The framework combines multiple investigative capabilities into a single tool, including IP address geolocation, phone number intelligence, and social media username discovery. It distributes queries across external data services to maximize coverage and accuracy, resolving IP addre

Tautulli is a monitoring tool and administration interface for Plex Media Servers. It tracks real-time streaming activity, maintains detailed playback histories, and provides a centralized dashboard for server analytics. The project distinguishes itself through an event-driven notification system that triggers custom scripts and alerts based on server activity. It includes a template-based engine for generating periodic newsletters and utilizes webhooks to dispatch alerts to third-party services. The software covers broad capability areas including media library auditing, usage trend analysi

This is a Ruby toolkit for converting addresses to geographic coordinates and performing reverse geocoding via multiple external API providers. It provides a library for integrating location services into Ruby applications, including an IP geolocation tool to translate IP addresses into coordinates, city names, and country data. The project includes a command line interface for bulk geocoding of database records with integrated rate limiting and a geospatial query engine for calculating distances and performing radius or bounding box searches. It also features a mocking framework that provide

Dshell ist ein Framework für Netzwerkforensik und Traffic-Prozessor, das für Deep Packet Inspection (DPI) von IPv4- und IPv6-Traffic entwickelt wurde. Es fungiert als erweiterbares forensisches Plugin-System, das Netzwerkdaten erfasst, inspiziert und analysiert, um Sicherheitsanomalien zu identifizieren und Kommunikationsströme zu rekonstruieren. Das System nutzt eine Plugin-basierte Processing-Engine, die die Entwicklung benutzerdefinierter Plugins und das Chaining von Plugins ermöglicht. Diese modulare Architektur erlaubt die Erstellung spezialisierter Analyse-Pipelines, in denen Netzwerkdaten eine Sequenz von Verarbeitungseinheiten für eine mehrstufige Analyse durchlaufen. Das Framework deckt ein breites Spektrum forensischer Fähigkeiten ab, einschließlich Echtzeit-Traffic-Monitoring, Reassembly von Netzwerkströmen und IP-Geolocation-Mapping via externer Referenzdatenbanken. Um große Datenmengen zu bewältigen, nutzt die Engine parallele Datenverarbeitung durch Verteilung von Aufgaben auf mehrere Systemprozesse. Verarbeitete Analyseergebnisse können über spezialisierte Output-Handler in verschiedene strukturierte Dateiformate exportiert werden.

Shlink ist ein selbst gehosteter URL-Shortener, der für das Erstellen und Verwalten verkürzter Webadressen auf eigenen Domains mit voller Datenhoheit entwickelt wurde. Er fungiert als dynamischer URL-Redirector und Multi-Domain-Link-Manager, der es ermöglicht, mit einer einzigen Installation Aliase über mehrere verschiedene Root-Domains hinweg zu organisieren und bereitzustellen. Das System basiert auf einer REST-API für das programmatische Link-Management, wodurch externe Anwendungen die Erstellung, Aktualisierung und Löschung von Kurz-URLs automatisieren können. Es enthält eine dedizierte Traffic-Analyse-Engine, die Besuche aufzeichnet, Bots erkennt und Geodaten bereitstellt, um Interaktionsmuster zu analysieren. Das Projekt bietet ein erweitertes Traffic-Routing, das Besucher basierend auf Gerätetyp, Headern oder benutzerdefinierten Prioritätsregeln an unterschiedliche Ziele weiterleiten kann. Es umfasst weitere Funktionen wie QR-Code-Generierung, verteiltes Shared-Caching und API-Key-Verwaltung mit granularen Berechtigungen. Die Installation wird über ein Command-Line-Interface und interaktive Konfigurationstools für das Deployment auf selbst gehosteter Infrastruktur unterstützt.