Skip to content
View ipanalytics's full-sized avatar

Block or report ipanalytics

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ipanalytics/README.md

ipanalytics

ipanalytics banner

IP intelligence, ASN analytics, GeoIP engineering, and infrastructure research

Open datasets, MMDB tooling, enrichment pipelines, and static dashboards for VPN infrastructure analysis, crawler visibility, Tor intelligence, ASN attribution, and operational network telemetry.

Repositories IP Knowledge Layer GeoForge CrawlerScope

Focus

  • IP and ASN enrichment pipelines with source provenance and confidence scoring
  • VPN, proxy, Tor, crawler, cloud, CDN, and hosting infrastructure analysis
  • GeoIP/MMDB compilation, validation, and consensus-based enrichment
  • Static dashboards and GitHub-native publishing workflows
  • Operational datasets for fraud detection, SIEM enrichment, and network analytics

Infrastructure Ecosystem

Intelligence and Enrichment

Project Area Description
IP-Knowledge-Layer IP enrichment Unified enrichment layer for CIDR, ASN, cloud, CDN, crawler, Tor, and VPN-adjacent infrastructure intelligence.
ASN-Signal-Graph ASN intelligence Public ASN infrastructure signal aggregation for VPN overlap, Tor visibility, public feed exposure, and defensive analytics.
blackroute IP reputation Local-first pipeline for aggregating hostile IP infrastructure, abuse feeds, anonymizers, and attack telemetry into runtime lookup databases.
ASN-VPN-Network-Intelligence ASN analytics Lightweight CSV datasets for VPN infrastructure overlap and ASN/provider enrichment workflows.

GeoIP and MMDB Tooling

Project Area Description
GeoForge GeoIP / MMDB Consensus-based GeoIP compiler combining GeoLite2, DB-IP, IP2Location, Sypex Geo, GeoNames, geofeeds, and RIR metadata into reproducible MMDB outputs.
MMDBForge MMDB tooling Toolkit for inspecting, validating, diffing, and analyzing MaxMind DB files and custom MMDB datasets.
MMDB-WatchTower MMDB operations Production-safe MMDB updater with validation, atomic swaps, rollback support, smoke tests, and Prometheus metrics.

Dashboards and Visibility

Project Area Description
CrawlerScope Crawler intelligence Static dashboard and dataset for crawler, AI bot, monitoring probe, and scanner infrastructure visibility.
Tor-Radar Tor intelligence GitHub-native Tor relay analytics dashboard with historical network snapshots and relay metadata.
VPN-Infrastructure-Atlas VPN atlas Interactive VPN infrastructure atlas showing aggregate provider footprint by country, ASN, and hosting network.

VPN Infrastructure Research

Project Area Description
vpn-provider-overlap-intelligence VPN analytics Aggregate analysis of VPN provider overlap, hosting concentration, provider clustering, and shared infrastructure signals.

Infrastructure Themes

IP ranges
    -> ASN attribution
    -> infrastructure classification
    -> VPN overlap analysis
    -> crawler visibility
    -> Tor intelligence
    -> GeoIP enrichment
    -> reputation signals
    -> operational datasets

Research areas include:

  • VPN infrastructure overlap
  • ASN concentration and hosting dependency
  • crawler and AI fetcher identification
  • GeoIP/MMDB quality engineering
  • CIDR normalization and enrichment
  • infrastructure provenance and confidence scoring
  • public signal aggregation and enrichment

Stack

Stack

Formats

CSV JSON JSONL Parquet MMDB CIDR

Network Metadata

ASN BGP RIR WHOIS GeoIP GeoFeed

Infrastructure Signals

VPN Proxy Tor Crawler Cloud CDN Hosting Reputation

Current Work

  • Building reproducible enrichment pipelines with auditable source attribution
  • Expanding ASN-level infrastructure signal aggregation
  • Improving VPN overlap analysis without publishing raw VPN inventories
  • Building local-first GeoIP, reputation, and MMDB operations tooling
  • Publishing compact operational datasets optimized for SIEM, fraud, and analytics workflows

Design Principles

Principle Description
Reproducibility Deterministic dataset generation and traceable inputs
Operational Utility Lightweight exports for pipelines and local lookups
Source Transparency Preserve provenance and confidence metadata
Static Deployment Prefer GitHub-native publishing and browser-only dashboards
Defensive Focus Infrastructure intelligence for analytical and operational workflows

GitHub Analytics

GitHub profile summary

GitHub streak

Collaboration

Open to:

  • dataset feedback
  • enrichment methodology discussion
  • GeoIP/MMDB quality analysis
  • ASN and VPN infrastructure research
  • crawler and bot intelligence collaboration
  • SIEM and fraud enrichment integrations

If you work with IP telemetry, routing metadata, fraud systems, abuse detection, or operational network analytics, feel free to open an issue or discussion in the relevant repository.

Licensing

Licensing varies by repository depending on source constraints and redistribution requirements.

Most repositories use:

  • Apache-2.0 for code
  • CC0-1.0 for generated datasets

See the license files in each repository for details.

Pinned Loading

  1. ASN-VPN-Network-Intelligence ASN-VPN-Network-Intelligence Public

    This repository publishes two CSV files generated from a VPN infrastructure collector

    1

  2. vpn-provider-overlap-intelligence vpn-provider-overlap-intelligence Public

    Aggregate VPN provider infrastructure overlap analysis: exact-IP overlap, shared /24 prefixes, hosting dependency, and provider relationship clusters. No raw VPN IP lists.

    1

  3. VPN-Infrastructure-Atlas VPN-Infrastructure-Atlas Public

    Interactive VPN infrastructure atlas: aggregate provider footprint by reported endpoint country, ASN, and hosting network. No raw configs or per-IP feed.

    HTML 1

  4. Tor-Radar Tor-Radar Public

    The project collects public Tor relay data once per hour, stores compact snapshots in the repository, and renders an interactive dashboard without a database or backend.

    JavaScript 1

  5. CrawlerScope CrawlerScope Public

    Interactive crawler IP intelligence dashboard for search, AI, and user-triggered fetchers.

    Python 1

  6. IP-Knowledge-Layer IP-Knowledge-Layer Public

    Open IP enrichment knowledge layer: CIDR, ASN, cloud, CDN, crawler, Tor, and VPN-adjacent network context with source provenance and confidence.

    Python 1