Awesome GitHub RepositoriesIP Geolocation

Fingerprint is a visitor identification and fraud detection platform that generates persistent, unique identifiers by analyzing browser and device attributes. By extracting technical signals from the client environment, it enables reliable user tracking across sessions without relying on traditional cookies. The platform distinguishes itself through its focus on high-accuracy identification and security-first architecture. It employs edge-side proxying to bypass ad-blockers and privacy restrictions, ensuring consistent data collection. To maintain data integrity, it uses cryptographic payload

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

This project is a terminal-based log analyzer and real-time traffic monitoring system designed for web server environments. It processes raw server access logs to generate structured statistical insights, providing visibility into visitor behavior, bandwidth usage, and request latency. The tool functions as a high-performance utility capable of handling large-scale datasets through multi-threaded parsing and memory-efficient data structures. The software distinguishes itself by offering both an interactive terminal interface and a web-based dashboard that updates in real-time via WebSocket st

ip2region is an offline IP geolocation library and framework designed to resolve IPv4 and IPv6 addresses to city-level regional information using local binary data files. It functions as a binary IP database compiler and a cross-language search client, allowing for regional lookups without relying on external APIs. The project distinguishes itself through a specialized binary format that supports high-performance query optimization. It employs adjacent-segment IP merging and deduplicated region storage to minimize the database footprint, while utilizing memory-mapped file caching and vector-i

node-elm is a Node.js and MongoDB backend framework designed for building data-driven applications, specifically e-commerce systems and food delivery management platforms. It provides a foundation for managing product catalogs, shopping carts, and payment workflows. The system includes a dedicated administrative management dashboard for tracking system statistics and managing users and merchants through role-based access control. It also features a digital coupon management system for tracking and exchanging promotional rewards. The framework incorporates geolocation services for IP-based po

MyIP is a network diagnostics toolbox designed for analyzing public IP addresses, geolocation, and network connectivity performance. It provides utilities for identifying IPv4 and IPv6 addresses and analyzing their associated organization, ASN, and geographic details. The project features specialized privacy and security tools, including a network leak tester to detect DNS and WebRTC leaks used to verify VPN or proxy configurations. It also includes a browser fingerprint analyzer that generates unique client identifiers to audit how device attributes are used for online tracking. The platfor

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

NTrace-core is an open-source network diagnostic toolset that combines traceroute and MTR techniques with geographic IP geolocation, path MTU discovery, and multi-protocol probing. It functions as a command-line utility and a local web server, providing both a terminal-based interface and a browser-based UI for tracing network paths and analyzing hop-by-hop performance. The tool distinguishes itself through a modular architecture that includes a community probe network for executing traceroutes from geographically dispersed agents, a token-gated API for authenticating remote requests, and an

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

This project is a self-hosted bot protection service and CAPTCHA alternative that verifies human identity without relying on third-party tracking. It utilizes a combination of WebAssembly-based proof-of-work puzzles and browser instrumentation to distinguish humans from automated bots. The system is delivered as dockerized security middleware and a privacy-first verification API that operates without the use of cookies or user fingerprinting. The service differentiates itself by using GPU-resistant time-lock algorithms and instrumentation-based detection to identify headless browsers and auto

Trippy is a network diagnostic tool and terminal user interface that combines ping and traceroute functionality to analyze network paths and performance. It provides a network packet parser and path analyzer to detect packet loss, jitter, and multipath routing through continuous network probing. The project is distinguished by its support for specialized tracing strategies, including Paris and Dublin, to ensure consistent path discovery. It identifies network address translation devices and utilizes heuristic analysis to distinguish genuine packet loss from rate-limiting. Broad capability ar

GhostTrack is an open-source intelligence (OSINT) framework that aggregates geographic, network, and social identity information from public data sources. It functions as a digital footprint analyzer, collecting various pieces of publicly available information to build comprehensive profiles of target individuals. The framework combines multiple investigative capabilities into a single tool, including IP address geolocation, phone number intelligence, and social media username discovery. It distributes queries across external data services to maximize coverage and accuracy, resolving IP addre

Tautulli is a monitoring tool and administration interface for Plex Media Servers. It tracks real-time streaming activity, maintains detailed playback histories, and provides a centralized dashboard for server analytics. The project distinguishes itself through an event-driven notification system that triggers custom scripts and alerts based on server activity. It includes a template-based engine for generating periodic newsletters and utilizes webhooks to dispatch alerts to third-party services. The software covers broad capability areas including media library auditing, usage trend analysi

This is a Ruby toolkit for converting addresses to geographic coordinates and performing reverse geocoding via multiple external API providers. It provides a library for integrating location services into Ruby applications, including an IP geolocation tool to translate IP addresses into coordinates, city names, and country data. The project includes a command line interface for bulk geocoding of database records with integrated rate limiting and a geospatial query engine for calculating distances and performing radius or bounding box searches. It also features a mocking framework that provide

Dshell es un framework de análisis forense de red y procesador de tráfico diseñado para la inspección profunda de paquetes (DPI) de tráfico IPv4 e IPv6. Funciona como un sistema de plugins forenses extensible que captura, inspecciona y analiza datos de red para identificar anomalías de seguridad y reconstruir flujos de comunicación. El sistema utiliza un motor de procesamiento basado en plugins que permite el desarrollo de plugins personalizados y el encadenamiento de los mismos. Esta arquitectura modular permite la creación de pipelines de análisis especializados donde los datos de red pasan a través de una secuencia de unidades de procesamiento para un análisis de múltiples pasos. El framework cubre una amplia gama de capacidades forenses, incluyendo monitoreo de tráfico en tiempo real, reensamblado de flujos de red y mapeo de geolocalización IP mediante bases de datos de referencia externas. Para manejar grandes volúmenes de datos, el motor emplea procesamiento de datos en paralelo distribuyendo tareas a través de múltiples procesos del sistema. Los resultados del análisis procesado pueden exportarse a varios formatos de archivo estructurados mediante manejadores de salida especializados.

freegeoip es un servicio de geolocalización autohospedado y servidor API que mapea direcciones IP y nombres de host a ubicaciones geográficas. Funciona como un lector de bases de datos MaxMind, analizando bases de datos de geolocalización binarias para proporcionar datos de ubicación a través de una interfaz REST. El proyecto se distingue por proporcionar una alternativa privada a los proveedores de geolocalización en la nube, gestionando archivos de base de datos locales y automatizando actualizaciones periódicas. Incluye un resolvedor de IP de proxy inverso para extraer direcciones de clientes originales de los encabezados de proxy, asegurando un mapeo preciso detrás de balanceadores de carga. El servicio incorpora un sistema de gestión de cuotas para aplicar límites de solicitudes por cliente y asegura sus endpoints utilizando cifrado TLS y políticas CORS. También cuenta con sincronización automatizada de bases de datos con verificación de versión basada en checksum y un frontend web público opcional para realizar búsquedas.

Storm-Breaker is a browser-based surveillance toolkit designed to silently capture sensor data from visitors without their knowledge or consent. It combines device fingerprinting, network-based geolocation tracking, and WebRTC exploitation to access a remote device’s camera, microphone, and system information without triggering native permission prompts. The toolkit achieves this by leveraging legacy browser APIs and network-based geolocation (IP, Wi-Fi) that do not require explicit user permission. It abuses WebRTC and media stream APIs to activate camera and microphone streams, while also c

Ahoy es un framework de análisis de primera parte para aplicaciones Ruby on Rails. Proporciona herramientas para capturar comportamientos de usuario y vistas de página, permitiendo a los desarrolladores mantener la propiedad total de sus datos de análisis. El sistema se distingue por el análisis de datos relacionales, que vincula los identificadores de visita directamente a los modelos de aplicación para una atribución profunda de objetos de negocio. Incluye una herramienta de seguimiento que preserva la privacidad que utiliza enmascaramiento de direcciones IP y agrupación de visitantes sin cookies para anonimizar los datos del usuario. El proyecto cubre una amplia gama de capacidades de análisis, incluyendo seguimiento de eventos personalizados, resolución de ubicación geográfica mediante geocodificación IP y análisis de embudo de usuario. Gestiona los datos a través de la persistencia en bases de datos relacionales y utiliza rollups pre-agregados para mantener el rendimiento de las consultas en grandes datasets. Las características de infraestructura adicionales incluyen enrutamiento de mensajes asíncrono, filtrado de tráfico a nivel de middleware para excluir bots y una API dedicada para recopilar datos de clientes móviles o externos.