Awesome GitHub RepositoriesIP Geolocation

Fingerprint is a visitor identification and fraud detection platform that generates persistent, unique identifiers by analyzing browser and device attributes. By extracting technical signals from the client environment, it enables reliable user tracking across sessions without relying on traditional cookies. The platform distinguishes itself through its focus on high-accuracy identification and security-first architecture. It employs edge-side proxying to bypass ad-blockers and privacy restrictions, ensuring consistent data collection. To maintain data integrity, it uses cryptographic payload

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

This project is a terminal-based log analyzer and real-time traffic monitoring system designed for web server environments. It processes raw server access logs to generate structured statistical insights, providing visibility into visitor behavior, bandwidth usage, and request latency. The tool functions as a high-performance utility capable of handling large-scale datasets through multi-threaded parsing and memory-efficient data structures. The software distinguishes itself by offering both an interactive terminal interface and a web-based dashboard that updates in real-time via WebSocket st

ip2region is an offline IP geolocation library and framework designed to resolve IPv4 and IPv6 addresses to city-level regional information using local binary data files. It functions as a binary IP database compiler and a cross-language search client, allowing for regional lookups without relying on external APIs. The project distinguishes itself through a specialized binary format that supports high-performance query optimization. It employs adjacent-segment IP merging and deduplicated region storage to minimize the database footprint, while utilizing memory-mapped file caching and vector-i

node-elm is a Node.js and MongoDB backend framework designed for building data-driven applications, specifically e-commerce systems and food delivery management platforms. It provides a foundation for managing product catalogs, shopping carts, and payment workflows. The system includes a dedicated administrative management dashboard for tracking system statistics and managing users and merchants through role-based access control. It also features a digital coupon management system for tracking and exchanging promotional rewards. The framework incorporates geolocation services for IP-based po

MyIP is a network diagnostics toolbox designed for analyzing public IP addresses, geolocation, and network connectivity performance. It provides utilities for identifying IPv4 and IPv6 addresses and analyzing their associated organization, ASN, and geographic details. The project features specialized privacy and security tools, including a network leak tester to detect DNS and WebRTC leaks used to verify VPN or proxy configurations. It also includes a browser fingerprint analyzer that generates unique client identifiers to audit how device attributes are used for online tracking. The platfor

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

NTrace-core is an open-source network diagnostic toolset that combines traceroute and MTR techniques with geographic IP geolocation, path MTU discovery, and multi-protocol probing. It functions as a command-line utility and a local web server, providing both a terminal-based interface and a browser-based UI for tracing network paths and analyzing hop-by-hop performance. The tool distinguishes itself through a modular architecture that includes a community probe network for executing traceroutes from geographically dispersed agents, a token-gated API for authenticating remote requests, and an

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

This project is a self-hosted bot protection service and CAPTCHA alternative that verifies human identity without relying on third-party tracking. It utilizes a combination of WebAssembly-based proof-of-work puzzles and browser instrumentation to distinguish humans from automated bots. The system is delivered as dockerized security middleware and a privacy-first verification API that operates without the use of cookies or user fingerprinting. The service differentiates itself by using GPU-resistant time-lock algorithms and instrumentation-based detection to identify headless browsers and auto

Trippy is a network diagnostic tool and terminal user interface that combines ping and traceroute functionality to analyze network paths and performance. It provides a network packet parser and path analyzer to detect packet loss, jitter, and multipath routing through continuous network probing. The project is distinguished by its support for specialized tracing strategies, including Paris and Dublin, to ensure consistent path discovery. It identifies network address translation devices and utilizes heuristic analysis to distinguish genuine packet loss from rate-limiting. Broad capability ar

GhostTrack is an open-source intelligence (OSINT) framework that aggregates geographic, network, and social identity information from public data sources. It functions as a digital footprint analyzer, collecting various pieces of publicly available information to build comprehensive profiles of target individuals. The framework combines multiple investigative capabilities into a single tool, including IP address geolocation, phone number intelligence, and social media username discovery. It distributes queries across external data services to maximize coverage and accuracy, resolving IP addre

Tautulli is a monitoring tool and administration interface for Plex Media Servers. It tracks real-time streaming activity, maintains detailed playback histories, and provides a centralized dashboard for server analytics. The project distinguishes itself through an event-driven notification system that triggers custom scripts and alerts based on server activity. It includes a template-based engine for generating periodic newsletters and utilizes webhooks to dispatch alerts to third-party services. The software covers broad capability areas including media library auditing, usage trend analysi

This is a Ruby toolkit for converting addresses to geographic coordinates and performing reverse geocoding via multiple external API providers. It provides a library for integrating location services into Ruby applications, including an IP geolocation tool to translate IP addresses into coordinates, city names, and country data. The project includes a command line interface for bulk geocoding of database records with integrated rate limiting and a geospatial query engine for calculating distances and performing radius or bounding box searches. It also features a mocking framework that provide

Dshell este un framework de analiză criminalistică a rețelei și procesor de trafic conceput pentru inspecția profundă a pachetelor (DPI) de trafic IPv4 și IPv6. Funcționează ca un sistem extensibil de plugin-uri criminalistice care capturează, inspectează și analizează datele de rețea pentru a identifica anomalii de securitate și a reconstrui fluxurile de comunicare. Sistemul utilizează un motor de procesare bazat pe plugin-uri care permite dezvoltarea de plugin-uri personalizate și înlănțuirea acestora. Această arhitectură modulară permite crearea de pipeline-uri de analiză specializate unde datele de rețea sunt trecute printr-o secvență de unități de procesare pentru analiză în mai mulți pași. Framework-ul acoperă o gamă largă de capabilități criminalistice, inclusiv monitorizarea traficului în timp real, reasamblarea fluxurilor de rețea și maparea geolocației IP prin baze de date de referință externe. Pentru a gestiona volume mari de date, motorul utilizează procesarea paralelă a datelor prin distribuirea sarcinilor între mai multe procese de sistem. Rezultatele analizei procesate pot fi exportate în diverse formate de fișiere structurate prin handler-e de output specializate.

freegeoip este un serviciu de geolocalizare self-hosted și un server API care mapează adresele IP și hostname-urile la locații geografice. Acesta funcționează ca un cititor de baze de date MaxMind, parsând baze de date binare de geolocalizare pentru a oferi date despre locație printr-o interfață REST. Proiectul se distinge prin oferirea unei alternative private la furnizorii de geolocalizare cloud, gestionând fișierele de baze de date locale și automatizând actualizările periodice. Include un resolver IP de tip reverse proxy pentru a extrage adresele clientului original din headerele proxy, asigurând o mapare precisă în spatele load balancerelor. Serviciul încorporează un sistem de gestionare a cotelor pentru a impune limite de cereri per client și își securizează endpoint-urile folosind criptare TLS și politici CORS. De asemenea, dispune de sincronizare automată a bazelor de date cu verificare a versiunii bazată pe checksum și un frontend web opțional pentru efectuarea căutărilor.

Storm-Breaker is a browser-based surveillance toolkit designed to silently capture sensor data from visitors without their knowledge or consent. It combines device fingerprinting, network-based geolocation tracking, and WebRTC exploitation to access a remote device’s camera, microphone, and system information without triggering native permission prompts. The toolkit achieves this by leveraging legacy browser APIs and network-based geolocation (IP, Wi-Fi) that do not require explicit user permission. It abuses WebRTC and media stream APIs to activate camera and microphone streams, while also c

Ahoy este un framework de analiză first-party pentru aplicațiile Ruby on Rails. Acesta oferă instrumente pentru capturarea comportamentelor utilizatorilor și a vizualizărilor de pagini, permițând dezvoltatorilor să mențină proprietatea deplină asupra datelor lor de analiză. Sistemul se distinge prin analiza datelor relaționale, care leagă identificatorii de vizită direct de modelele aplicației pentru o atribuire profundă a obiectelor de business. Include un instrument de urmărire care protejează confidențialitatea, care utilizează mascarea adresei IP și gruparea vizitatorilor fără cookie-uri pentru a anonimiza datele utilizatorilor. Proiectul acoperă o gamă largă de capabilități de analiză, inclusiv urmărirea evenimentelor personalizate, rezoluția locației geografice prin geocodarea IP și analiza funnel-ului utilizatorilor. Gestionează datele prin persistența în baze de date relaționale și utilizează rollup-uri pre-agregate pentru a menține performanța interogărilor pe seturi mari de date. Caracteristicile suplimentare de infrastructură includ rutarea asincronă a mesajelor, filtrarea traficului la nivel de middleware pentru a exclude boții și un API dedicat pentru colectarea datelor de la clienți mobili sau externi.