{"id":50181986,"url":"https://github.com/ipanalytics/ipanalytics","last_synced_at":"2026-05-25T07:05:03.430Z","repository":{"id":358828636,"uuid":"1242274703","full_name":"ipanalytics/ipanalytics","owner":"ipanalytics","description":"I work with IP data, ASN, VPN detection, and network analytics.","archived":false,"fork":false,"pushed_at":"2026-05-18T09:32:25.000Z","size":2,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-19T09:57:29.581Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ipanalytics.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-05-18T09:25:05.000Z","updated_at":"2026-05-18T09:32:29.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/ipanalytics/ipanalytics","commit_stats":null,"previous_names":["ipanalytics/ipanalytics"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/ipanalytics/ipanalytics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ipanalytics%2Fipanalytics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ipanalytics%2Fipanalytics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ipanalytics%2Fipanalytics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ipanalytics%2Fipanalytics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ipanalytics","download_url":"https://codeload.github.com/ipanalytics/ipanalytics/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ipanalytics%2Fipanalytics/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33464014,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-25T06:32:55.349Z","status":"ssl_error","status_checked_at":"2026-05-25T06:32:35.322Z","response_time":57,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-05-25T07:04:30.328Z","updated_at":"2026-05-25T07:05:03.419Z","avatar_url":"https://github.com/ipanalytics.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"\n\u003cdiv align=\"center\"\u003e\n\n# IP Analytics\n\n\u003cp\u003e\n  \u003cimg src=\"./assets/banner.png\" alt=\"IP Analytics banner\" width=\"100%\"\u003e\n\u003c/p\u003e\n\n**IP intelligence, ASN analytics, routing security, GeoIP/MMDB engineering, and infrastructure research**\n\nOpen datasets, static dashboards, routing-security tooling, enrichment pipelines, GeoIP/MMDB workflows, and operational network intelligence systems.\n\n\n\n\u003c/div\u003e\n\n---\n\n# Focus Areas\n\n- IP and ASN enrichment with provenance and confidence scoring\n- VPN, proxy, Tor, crawler, cloud, CDN, and hosting infrastructure analysis\n- BGP, RPKI, ROA, and routing-security visibility\n- GeoIP/MMDB compilation, validation, diffing, and operational tooling\n- Geofeed discovery and routing-aware geolocation enrichment\n- Static dashboards, APIs, and GitHub-native publishing workflows\n- Operational datasets for SIEM, fraud detection, OSINT, and network analytics\n\n---\n\n# Infrastructure Ecosystem\n\n## Infrastructure Intelligence\n\n| Project | Description |\n|---|---|\n| [IP-Knowledge-Layer](https://github.com/ipanalytics/IP-Knowledge-Layer) | Open enrichment layer for CIDR, ASN, cloud, CDN, crawler, Tor, VPN, and infrastructure intelligence with provenance and confidence scoring. |\n| [ASN-Signal-Graph](https://github.com/ipanalytics/ASN-Signal-Graph) | ASN-level infrastructure signal aggregation for VPN overlap, Tor visibility, public-feed exposure, and defensive analytics. |\n| [blackroute](https://github.com/ipanalytics/blackroute) | Local-first hostile infrastructure and reputation intelligence pipeline with MMDB and CSV outputs. |\n| [ASN-VPN-Network-Intelligence](https://github.com/ipanalytics/ASN-VPN-Network-Intelligence) | VPN infrastructure overlap and ASN/provider enrichment datasets. |\n\n---\n\n## VPN Infrastructure Research\n\n| Project | Description |\n|---|---|\n| [VPN-Infrastructure-Intelligence-Lab](https://github.com/ipanalytics/VPN-Infrastructure-Intelligence-Lab) | Aggregate VPN infrastructure intelligence dashboard for provider, ASN, country, and hosting dependency analysis. |\n| [vpn-provider-overlap-intelligence](https://github.com/ipanalytics/vpn-provider-overlap-intelligence) | Shared infrastructure and provider overlap analysis across ASNs, prefixes, and hosting networks. |\n\n---\n\n## Routing Security and Internet Measurements\n\n| Project | Description |\n|---|---|\n| [RouteSentinel](https://github.com/ipanalytics/RouteSentinel) | Daily route-security snapshot analyzer for BGP RIB dumps and RPKI VRP datasets. |\n| [GeoFeed-Harvester](https://github.com/ipanalytics/GeoFeed-Harvester) | RFC 8805 geofeed discovery, validation, provenance tracking, and routing-aware geolocation analysis from public RIR data. |\n\n---\n\n## Dashboards and Visibility\n\n| Project | Description |\n|---|---|\n| [CrawlerScope](https://github.com/ipanalytics/CrawlerScope) | Interactive crawler intelligence dashboard for AI crawlers, search bots, scanners, and monitoring probes. |\n| [Tor-Radar](https://github.com/ipanalytics/Tor-Radar) | Browser-only Tor relay intelligence dashboard with compact snapshots and relay metadata. |\n\n---\n\n## GeoIP and MMDB Tooling\n\n| Project | Description |\n|---|---|\n| [GeoForge](https://github.com/ipanalytics/GeoForge) | Consensus-based GeoIP compiler combining GeoLite2, DB-IP, IP2Location, geofeeds, RIR, and WHOIS signals. |\n| [MMDBForge](https://github.com/ipanalytics/MMDBForge) | Toolkit for inspecting, validating, diffing, and analyzing MaxMind DB and custom MMDB datasets. |\n| [MMDB-WatchTower](https://github.com/ipanalytics/MMDB-WatchTower) | Production-safe MMDB updater with validation, rollback, atomic swaps, smoke tests, and Prometheus metrics. |\n\n---\n\n## Privacy and Security Tooling\n\n| Project | Description |\n|---|---|\n| [PrefixCloak](https://github.com/ipanalytics/PrefixCloak) | Prefix-preserving IPv4/IPv6 sanitizer for logs, telemetry, SIEM exports, and subnet-safe anonymization workflows. |\n\n---\n\n# Infrastructure Model\n\n```text\nIP ranges\n  -\u003e CIDR normalization\n  -\u003e ASN attribution\n  -\u003e BGP and RPKI validation\n  -\u003e geofeed discovery\n  -\u003e hosting and cloud classification\n  -\u003e VPN / proxy / Tor / crawler signals\n  -\u003e GeoIP and MMDB enrichment\n  -\u003e reputation and abuse context\n  -\u003e dashboards, CSV exports, static APIs, and lookup databases\n````\n\n---\n\n# Stack\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://skillicons.dev/icons?i=python,go,js,html,linux,docker,git,githubactions\u0026perline=10\" alt=\"Stack\"\u003e\n\u003c/p\u003e\n\n### Formats\n\n`CSV` `JSON` `JSONL` `Parquet` `MMDB` `CIDR`\n\n### Network Metadata\n\n`ASN` `BGP` `RPKI` `ROA` `RIR` `WHOIS` `GeoIP` `GeoFeed`\n\n### Infrastructure Signals\n\n`VPN` `Proxy` `Tor` `Crawler` `Cloud` `CDN` `Hosting` `Scanner` `Reputation`\n\n---\n\n# Current Work\n\n* Expanding ASN-level infrastructure signal aggregation\n* Building routing-security visibility around BGP and RPKI validation\n* Developing geofeed discovery and provenance pipelines\n* Improving VPN overlap analysis without publishing raw endpoint inventories\n* Building local-first GeoIP, MMDB, and reputation tooling\n* Publishing compact operational datasets for SIEM and analytics workflows\n\n---\n\n# Design Principles\n\n| Principle           | Description                                            |\n| ------------------- | ------------------------------------------------------ |\n| Reproducibility     | Deterministic dataset generation with auditable inputs |\n| Source Transparency | Preserve provenance and confidence metadata            |\n| Operational Utility | Lightweight exports for pipelines and local lookups    |\n| Static Deployment   | Prefer GitHub-native dashboards and APIs               |\n| Defensive Focus     | Infrastructure intelligence for analytical workflows   |\n\n---\n\n# Project Map\n\n| Project                             | Focus                                               |\n| ----------------------------------- | --------------------------------------------------- |\n| RouteSentinel                       | BGP · RPKI · MRT · VRP · route security             |\n| GeoFeed-Harvester                   | RFC8805 · GeoIP · geofeeds · RIR · BGP              |\n| ASN-Signal-Graph                    | ASN · CIDR · infrastructure signals · Tor · VPN     |\n| IP-Knowledge-Layer                  | ASN · enrichment · bot detection · VPN intelligence |\n| GeoForge                            | GeoIP · MMDB · geolocation consensus · WHOIS        |\n| MMDBForge                           | MaxMind DB · diffing · validation · tooling         |\n| MMDB-WatchTower                     | MMDB operations · rollback · observability          |\n| CrawlerScope                        | AI crawlers · scanners · monitoring probes          |\n| Tor-Radar                           | Tor relay intelligence · Onionoo · dashboards       |\n| PrefixCloak                         | privacy · anonymization · SIEM · telemetry          |\n| blackroute                          | hostile infrastructure · reputation · MMDB          |\n| VPN-Infrastructure-Intelligence-Lab | VPN infrastructure analytics · ASN visibility       |\n\n---\n\n# Collaboration\n\nOpen to collaboration around:\n\n* IP intelligence datasets\n* ASN and routing analytics\n* VPN and Tor infrastructure research\n* crawler and AI fetcher visibility\n* GeoIP/MMDB quality engineering\n* RPKI and BGP measurements\n* fraud detection and SIEM enrichment\n\n---\n\n# Licensing\n\nLicensing varies by repository depending on source constraints and redistribution requirements.\n\nMost repositories use:\n\n* Apache-2.0 or MIT for code\n* CC0-1.0 for generated datasets\n\nSee repository license files for details.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fipanalytics%2Fipanalytics","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fipanalytics%2Fipanalytics","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fipanalytics%2Fipanalytics/lists"}