Projects sharing features with GeoLite.mmdb

node-elm is a Node.js and MongoDB backend framework designed for building data-driven applications, specifically e-commerce systems and food delivery management platforms. It provides a foundation for managing product catalogs, shopping carts, and payment workflows. The system includes a dedicated administrative management dashboard for tracking system statistics and managing users and merchants through role-based access control. It also features a digital coupon management system for tracking and exchanging promotional rewards. The framework incorporates geolocation services for IP-based po

Trippy is a network diagnostic tool and terminal user interface that combines ping and traceroute functionality to analyze network paths and performance. It provides a network packet parser and path analyzer to detect packet loss, jitter, and multipath routing through continuous network probing. The project is distinguished by its support for specialized tracing strategies, including Paris and Dublin, to ensure consistent path discovery. It identifies network address translation devices and utilizes heuristic analysis to distinguish genuine packet loss from rate-limiting. Broad capability ar

OpenPanel is a self-hosted product analytics platform designed for tracking user behavior and visualizing product metrics on private infrastructure. It provides a comprehensive system for collecting events across web, mobile, and server environments while ensuring complete ownership of data. The platform distinguishes itself through a privacy-first approach, utilizing cookieless event tracking and regional data residency to simplify regulatory compliance. It integrates large language models via the Model Context Protocol, enabling users to query behavioral data and analyze trends using natura

Dshell is a network forensic analysis framework and traffic processor designed for the deep packet inspection of IPv4 and IPv6 traffic. It functions as an extensible forensic plugin system that captures, inspects, and analyzes network data to identify security anomalies and reconstruct communication streams. The system utilizes a plugin-based processing engine that allows for custom plugin development and plugin chaining. This modular architecture enables the creation of specialized analysis pipelines where network data is passed through a sequence of processing units for multi-step analysis.

Ahoy is a first-party analytics framework for Ruby on Rails applications. It provides tools for capturing user behaviors and page views, allowing developers to maintain full ownership of their analytics data. The system distinguishes itself through relational data analytics, which links visit identifiers directly to application models for deep business object attribution. It includes a privacy-preserving tracking tool that utilizes IP address masking and cookie-less visitor grouping to anonymize user data. The project covers a broad range of analytics capabilities, including custom event tra

PeerBanHelper is a scriptable BitTorrent peer banning system that automatically detects and blocks malicious, leeching, or unwanted peers using configurable rules, GeoIP data, and scriptable detection logic. It integrates with popular BitTorrent clients through their web APIs to enforce blocking rules automatically, and provides a self-hosted WebUI dashboard for monitoring active bans, historical blocks, and peer lists. The system distinguishes itself through collaborative threat intelligence, submitting ban reports and peer population data to a central server for aggregate threat analysis wh

GeoIP2-CN provides curated datasets and binary database files designed to identify network addresses originating from mainland China. It provides a GeoIP2 China database and a routing list formatted as a MaxMind compatible database for use with network tools. The project enables proxy traffic management by distinguishing between domestic and international IP addresses. This allows for regional network routing and the application of decision logic to separate traffic paths based on geographic location. The system implements IP identification through MMDB-based lookups, binary-search range mat

MyIP is a network diagnostics toolbox designed for analyzing public IP addresses, geolocation, and network connectivity performance. It provides utilities for identifying IPv4 and IPv6 addresses and analyzing their associated organization, ASN, and geographic details. The project features specialized privacy and security tools, including a network leak tester to detect DNS and WebRTC leaks used to verify VPN or proxy configurations. It also includes a browser fingerprint analyzer that generates unique client identifiers to audit how device attributes are used for online tracking. The platfor

IPQuality is a specialized diagnostic toolset for analyzing the reputation, risk scores, and connectivity of network addresses. It functions as an IP address quality analyzer and reputation checker that aggregates risk scores and fraud factors from external security databases to identify potentially malicious or high-risk traffic. The project differentiates itself through targeted accessibility validation, including a streaming access validator to check for geographic restrictions on AI and streaming platforms, and an email deliverability tester to evaluate connectivity to global email servic

This is a Ruby toolkit for converting addresses to geographic coordinates and performing reverse geocoding via multiple external API providers. It provides a library for integrating location services into Ruby applications, including an IP geolocation tool to translate IP addresses into coordinates, city names, and country data. The project includes a command line interface for bulk geocoding of database records with integrated rate limiting and a geospatial query engine for calculating distances and performing radius or bounding box searches. It also features a mocking framework that provide

Opentrace is a network diagnostic utility designed to analyze and map network paths. It combines real-time traceroute data with geographic IP resolution to provide a visual traceroute tool for detecting routing issues and network bottlenecks. The project features interactive path visualization and geographic route mapping, transforming raw hop-by-hop data into spatial maps. It includes privacy-focused identity masking to hide initial network hops and supports custom DNS resolution, including DNS-over-HTTPS, and local IP database imports for geographic mapping without relying on remote API ser

freegeoip is a self-hosted geolocation service and API server that maps IP addresses and hostnames to geographic locations. It functions as a MaxMind database reader, parsing binary geolocation databases to provide location data through a REST interface. The project distinguishes itself by providing a private alternative to cloud geolocation providers, managing local database files and automating periodic updates. It includes a reverse proxy IP resolver to extract original client addresses from proxy headers, ensuring accurate mapping behind load balancers. The service incorporates a quota m

Mr.Holmes is an open-source intelligence investigation framework designed to gather public data from phone numbers, usernames, IP addresses, and domains. It functions as a collection of tools for digital footprint analysis and social media reconnaissance. The system integrates several specialized capabilities, including a search engine dorking tool for uncovering hidden public records and a geolocation utility for identifying the physical location and ownership of network addresses. It also includes a social media reconnaissance system that scrapes and links public profiles using usernames an

Th3inspector is a command-line open-source intelligence reconnaissance tool used for gathering public information on websites, phone numbers, and network records. It functions as a central interface for collecting technical metadata and performing various lookups to build profiles of target entities. The project provides specialized verification utilities for validating email addresses, phone numbers, and credit card bank identification numbers. It also includes tools for retrieving domain registration age, ownership records, and identified subdomains from global databases. Additional capabi

echoip is a network utility and API for detecting public IPv4 and IPv6 addresses and retrieving associated metadata. It serves as a client IP detection tool and a geolocation API that maps incoming requests to physical locations and geographic metadata. The project provides network identity analysis by resolving IP addresses to their corresponding autonomous system numbers and owning network organizations. It also includes a connectivity tester to verify if specific ports on a target remote host are open and reachable. The system supports structured data export via JSON and plain text throug

NTrace-core is an open-source network diagnostic toolset that combines traceroute and MTR techniques with geographic IP geolocation, path MTU discovery, and multi-protocol probing. It functions as a command-line utility and a local web server, providing both a terminal-based interface and a browser-based UI for tracing network paths and analyzing hop-by-hop performance. The tool distinguishes itself through a modular architecture that includes a community probe network for executing traceroutes from geographically dispersed agents, a token-gated API for authenticating remote requests, and an

RealiTLScanner is a TLS configuration scanner and network security auditor designed to identify security settings across IP addresses and domains. It functions as a target discovery tool that analyzes TLS configurations to find compatible endpoints and evaluate server security postures. The project distinguishes itself as a geolocation-enhanced network scanner, appending geographic location data and country codes to discovered security configurations using a local location database. This allows for the geographic mapping of servers by combining TLS scan results with GeoIP data. The tool supp

This project is a collection of datasets and repositories providing IP address ranges, geographic mapping lists, and metadata used to identify network traffic from mainland China. It serves as a curated database of IP address ranges for regional identification and network traffic filtering. The project provides capabilities for mapping IP addresses to specific cities and geographic regions within mainland China. It includes resources for retrieving autonomous system numbers and location data to distinguish and route traffic based on its origin. The system also covers broader network intellig

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

Seeker is a social engineering location tool and browser geolocation capture system. It provides a framework for capturing precise GPS coordinates and device metadata by hosting deceptive webpages that prompt users for location permissions. The project includes an HTML phishing template engine for deploying custom or predefined website clones designed to trick users into granting sensitive permissions. It further utilizes a device fingerprinting tool to collect hardware specifications, operating system details, and screen resolution from visiting clients. The system incorporates network reco

Geocoder is a PHP library for converting addresses to geographic coordinates and coordinates back into addresses using various third-party services. It functions as a multi-provider geocoding wrapper and a reverse geocoding engine, providing an abstraction layer to manage multiple geocoding APIs. The project allows for switching between providers or chaining requests for failover to ensure high availability. It also serves as a GeoIP location resolver, translating IP addresses into geographic coordinates and location details through either remote services or local binary databases. The libra

This project is a cloud infrastructure mapping tool and provider identifier. It provides a curated dataset of IP address ranges and network operator data used to distinguish cloud provider traffic from other network infrastructure. The utility focuses on the identification of Cloudflare infrastructure and the analysis of global network operators. It enables the location of specific assets by cross-referencing IP ranges with geographic and provider data. The tool performs targeted IP range scanning and network operator analysis. It utilizes CIDR-based filtering, static range indexing, and geo

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

Fingerprint is a visitor identification and fraud detection platform that generates persistent, unique identifiers by analyzing browser and device attributes. By extracting technical signals from the client environment, it enables reliable user tracking across sessions without relying on traditional cookies. The platform distinguishes itself through its focus on high-accuracy identification and security-first architecture. It employs edge-side proxying to bypass ad-blockers and privacy restrictions, ensuring consistent data collection. To maintain data integrity, it uses cryptographic payload

This project is a terminal-based log analyzer and real-time traffic monitoring system designed for web server environments. It processes raw server access logs to generate structured statistical insights, providing visibility into visitor behavior, bandwidth usage, and request latency. The tool functions as a high-performance utility capable of handling large-scale datasets through multi-threaded parsing and memory-efficient data structures. The software distinguishes itself by offering both an interactive terminal interface and a web-based dashboard that updates in real-time via WebSocket st

This application is a desktop network traffic analyzer that provides real-time monitoring and forensic inspection of data packets. By interfacing directly with low-level system drivers, it captures raw network traffic from physical or virtual adapters to identify communication patterns, track bandwidth usage, and diagnose connectivity issues. The system distinguishes itself through an immediate-mode graphical interface that rebuilds the display state every frame, ensuring high responsiveness during live data updates. It maintains performance by using asynchronous message passing to decouple t