Awesome GitHub RepositoriesIP Geolocation

Fingerprint is a visitor identification and fraud detection platform that generates persistent, unique identifiers by analyzing browser and device attributes. By extracting technical signals from the client environment, it enables reliable user tracking across sessions without relying on traditional cookies. The platform distinguishes itself through its focus on high-accuracy identification and security-first architecture. It employs edge-side proxying to bypass ad-blockers and privacy restrictions, ensuring consistent data collection. To maintain data integrity, it uses cryptographic payload

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

This project is a terminal-based log analyzer and real-time traffic monitoring system designed for web server environments. It processes raw server access logs to generate structured statistical insights, providing visibility into visitor behavior, bandwidth usage, and request latency. The tool functions as a high-performance utility capable of handling large-scale datasets through multi-threaded parsing and memory-efficient data structures. The software distinguishes itself by offering both an interactive terminal interface and a web-based dashboard that updates in real-time via WebSocket st

ip2region is an offline IP geolocation library and framework designed to resolve IPv4 and IPv6 addresses to city-level regional information using local binary data files. It functions as a binary IP database compiler and a cross-language search client, allowing for regional lookups without relying on external APIs. The project distinguishes itself through a specialized binary format that supports high-performance query optimization. It employs adjacent-segment IP merging and deduplicated region storage to minimize the database footprint, while utilizing memory-mapped file caching and vector-i

node-elm is a Node.js and MongoDB backend framework designed for building data-driven applications, specifically e-commerce systems and food delivery management platforms. It provides a foundation for managing product catalogs, shopping carts, and payment workflows. The system includes a dedicated administrative management dashboard for tracking system statistics and managing users and merchants through role-based access control. It also features a digital coupon management system for tracking and exchanging promotional rewards. The framework incorporates geolocation services for IP-based po

MyIP is a network diagnostics toolbox designed for analyzing public IP addresses, geolocation, and network connectivity performance. It provides utilities for identifying IPv4 and IPv6 addresses and analyzing their associated organization, ASN, and geographic details. The project features specialized privacy and security tools, including a network leak tester to detect DNS and WebRTC leaks used to verify VPN or proxy configurations. It also includes a browser fingerprint analyzer that generates unique client identifiers to audit how device attributes are used for online tracking. The platfor

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

NTrace-core is an open-source network diagnostic toolset that combines traceroute and MTR techniques with geographic IP geolocation, path MTU discovery, and multi-protocol probing. It functions as a command-line utility and a local web server, providing both a terminal-based interface and a browser-based UI for tracing network paths and analyzing hop-by-hop performance. The tool distinguishes itself through a modular architecture that includes a community probe network for executing traceroutes from geographically dispersed agents, a token-gated API for authenticating remote requests, and an

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

This project is a self-hosted bot protection service and CAPTCHA alternative that verifies human identity without relying on third-party tracking. It utilizes a combination of WebAssembly-based proof-of-work puzzles and browser instrumentation to distinguish humans from automated bots. The system is delivered as dockerized security middleware and a privacy-first verification API that operates without the use of cookies or user fingerprinting. The service differentiates itself by using GPU-resistant time-lock algorithms and instrumentation-based detection to identify headless browsers and auto

Trippy is a network diagnostic tool and terminal user interface that combines ping and traceroute functionality to analyze network paths and performance. It provides a network packet parser and path analyzer to detect packet loss, jitter, and multipath routing through continuous network probing. The project is distinguished by its support for specialized tracing strategies, including Paris and Dublin, to ensure consistent path discovery. It identifies network address translation devices and utilizes heuristic analysis to distinguish genuine packet loss from rate-limiting. Broad capability ar

GhostTrack is an open-source intelligence (OSINT) framework that aggregates geographic, network, and social identity information from public data sources. It functions as a digital footprint analyzer, collecting various pieces of publicly available information to build comprehensive profiles of target individuals. The framework combines multiple investigative capabilities into a single tool, including IP address geolocation, phone number intelligence, and social media username discovery. It distributes queries across external data services to maximize coverage and accuracy, resolving IP addre

Tautulli is a monitoring tool and administration interface for Plex Media Servers. It tracks real-time streaming activity, maintains detailed playback histories, and provides a centralized dashboard for server analytics. The project distinguishes itself through an event-driven notification system that triggers custom scripts and alerts based on server activity. It includes a template-based engine for generating periodic newsletters and utilizes webhooks to dispatch alerts to third-party services. The software covers broad capability areas including media library auditing, usage trend analysi

This is a Ruby toolkit for converting addresses to geographic coordinates and performing reverse geocoding via multiple external API providers. It provides a library for integrating location services into Ruby applications, including an IP geolocation tool to translate IP addresses into coordinates, city names, and country data. The project includes a command line interface for bulk geocoding of database records with integrated rate limiting and a geospatial query engine for calculating distances and performing radius or bounding box searches. It also features a mocking framework that provide

Dshell ist ein Framework für Netzwerkforensik und Traffic-Prozessor, das für Deep Packet Inspection (DPI) von IPv4- und IPv6-Traffic entwickelt wurde. Es fungiert als erweiterbares forensisches Plugin-System, das Netzwerkdaten erfasst, inspiziert und analysiert, um Sicherheitsanomalien zu identifizieren und Kommunikationsströme zu rekonstruieren. Das System nutzt eine Plugin-basierte Processing-Engine, die die Entwicklung benutzerdefinierter Plugins und das Chaining von Plugins ermöglicht. Diese modulare Architektur erlaubt die Erstellung spezialisierter Analyse-Pipelines, in denen Netzwerkdaten eine Sequenz von Verarbeitungseinheiten für eine mehrstufige Analyse durchlaufen. Das Framework deckt ein breites Spektrum forensischer Fähigkeiten ab, einschließlich Echtzeit-Traffic-Monitoring, Reassembly von Netzwerkströmen und IP-Geolocation-Mapping via externer Referenzdatenbanken. Um große Datenmengen zu bewältigen, nutzt die Engine parallele Datenverarbeitung durch Verteilung von Aufgaben auf mehrere Systemprozesse. Verarbeitete Analyseergebnisse können über spezialisierte Output-Handler in verschiedene strukturierte Dateiformate exportiert werden.

freegeoip ist ein selbstgehosteter Geolokalisierungsdienst und API-Server, der IP-Adressen und Hostnamen geografischen Standorten zuordnet. Er fungiert als MaxMind-Datenbankleser, der binäre Geolokalisierungsdatenbanken parst, um Standortdaten über eine REST-Schnittstelle bereitzustellen. Das Projekt zeichnet sich dadurch aus, dass es eine private Alternative zu Cloud-Geolokalisierungsanbietern bietet, lokale Datenbankdateien verwaltet und regelmäßige Updates automatisiert. Es enthält einen Reverse-Proxy-IP-Resolver, um ursprüngliche Client-Adressen aus Proxy-Headern zu extrahieren und so eine genaue Zuordnung hinter Load Balancern sicherzustellen. Der Dienst integriert ein Kontingentverwaltungssystem, um Anfragelimits pro Client durchzusetzen, und sichert seine Endpunkte mittels TLS-Verschlüsselung und CORS-Richtlinien. Er bietet zudem eine automatisierte Datenbank-Synchronisierung mit prüfsummenbasierter Versionsverifizierung und ein optionales öffentliches Web-Frontend für die Durchführung von Abfragen.

Storm-Breaker is a browser-based surveillance toolkit designed to silently capture sensor data from visitors without their knowledge or consent. It combines device fingerprinting, network-based geolocation tracking, and WebRTC exploitation to access a remote device’s camera, microphone, and system information without triggering native permission prompts. The toolkit achieves this by leveraging legacy browser APIs and network-based geolocation (IP, Wi-Fi) that do not require explicit user permission. It abuses WebRTC and media stream APIs to activate camera and microphone streams, while also c

Ahoy ist ein First-Party-Analytics-Framework für Ruby-on-Rails-Anwendungen. Es bietet Tools zur Erfassung von Benutzerverhalten und Seitenaufrufen, wodurch Entwickler die volle Kontrolle über ihre Analysedaten behalten. Das System zeichnet sich durch relationale Datenanalyse aus, die Besuchsidentifikatoren direkt mit Anwendungsmodellen für eine tiefgehende Zuordnung von Geschäftsobjekten verknüpft. Es enthält ein datenschutzfreundliches Tracking-Tool, das IP-Adressmaskierung und Cookie-loses Gruppieren von Besuchern nutzt, um Benutzerdaten zu anonymisieren. Das Projekt deckt ein breites Spektrum an Analysefunktionen ab, einschließlich benutzerdefiniertem Event-Tracking, geografischer Standortauflösung via IP-Geocoding und User-Funnel-Analyse. Es verwaltet Daten durch relationale Datenbankpersistenz und nutzt voraggregierte Rollups, um die Abfrage-Performance bei großen Datensätzen zu wahren. Zusätzliche Infrastrukturfunktionen umfassen asynchrones Message-Routing, Middleware-Level-Traffic-Filterung zum Ausschluss von Bots und eine dedizierte API zum Sammeln von Daten von mobilen oder externen Clients.