Skip to content
View ipanalytics's full-sized avatar

Block or report ipanalytics

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ipanalytics/README.md

ipanalytics

ipanalytics banner

IP intelligence, ASN analytics, GeoIP engineering, and network infrastructure research

Open datasets, MMDB tooling, static dashboards, and enrichment pipelines for VPN infrastructure analysis, crawler visibility, Tor intelligence, ASN attribution, and operational IP telemetry.

Repositories IP Knowledge Layer GeoForge CrawlerScope

Focus Areas

  • IP and ASN enrichment pipelines with provenance and confidence scoring
  • VPN, proxy, Tor, hosting, CDN, and crawler infrastructure analysis
  • GeoIP/MMDB compilation, validation, and consensus-based enrichment
  • Open operational datasets for fraud detection, SIEM enrichment, and network analytics
  • Static dashboards and reproducible GitHub-native publishing workflows

Core Projects

IP Intelligence and Enrichment

Project Area Description
IP-Knowledge-Layer IP enrichment Unified enrichment layer for CIDR, ASN, cloud, CDN, crawler, Tor, and VPN-adjacent infrastructure intelligence.
Blackroute IP reputation Local-first IP reputation database builder for abuse, malware, scanner, proxy, Tor, and high-risk infrastructure signals.
ASN-VPN-Network-Intelligence ASN analytics Lightweight CSV datasets for VPN infrastructure overlap and ASN/provider enrichment workflows.

GeoIP and MMDB Tooling

Project Area Description
GeoForge GeoIP / MMDB Consensus-based GeoIP compiler combining GeoLite2, DB-IP, IP2Location, Sypex Geo, GeoNames, geofeeds, and RIR metadata into reproducible MMDB outputs.

Dashboards and Network Visibility

Project Area Description
CrawlerScope Crawler intelligence Static dashboard and dataset for crawler, AI bot, monitoring probe, and scanner infrastructure visibility.
Tor-Radar Tor intelligence GitHub-native Tor relay analytics dashboard with historical network snapshots and relay metadata.

VPN Infrastructure Research

Project Area Description
vpn-provider-overlap-intelligence VPN analytics Aggregate analysis of VPN provider overlap, hosting concentration, provider clustering, and shared infrastructure signals.

Infrastructure Themes

IP ranges
    -> ASN attribution
    -> cloud / hosting classification
    -> VPN overlap analysis
    -> crawler intelligence
    -> GeoIP enrichment
    -> reputation scoring
    -> operational datasets

Research areas include:

  • VPN infrastructure overlap
  • ASN concentration and hosting dependency
  • crawler and AI fetcher identification
  • GeoIP/MMDB quality engineering
  • CIDR normalization and enrichment
  • Tor relay visibility
  • IP reputation aggregation
  • infrastructure provenance and confidence scoring

Stack

Stack

Data Formats

CSV JSON JSONL Parquet MMDB CIDR

Network Metadata

ASN BGP RIR WHOIS GeoIP GeoFeed

Infrastructure Signals

VPN Proxy Tor Crawler Cloud CDN Hosting Reputation

Current Work

  • Building reproducible IP enrichment pipelines with auditable source attribution
  • Improving VPN infrastructure overlap analysis without publishing raw VPN inventories
  • Expanding crawler, AI bot, and monitoring probe visibility datasets
  • Building local-first reputation and GeoIP MMDB pipelines
  • Publishing operational datasets optimized for SIEM, fraud, and analytics workflows

Design Principles

Principle Description
Reproducibility Deterministic dataset generation and traceable inputs
Operational Utility Lightweight exports suitable for pipelines and local lookups
Source Transparency Preserve provenance and confidence metadata
Static Deployment Prefer GitHub-native publishing and browser-only dashboards
Defensive Focus Infrastructure intelligence for analytical and operational workflows

GitHub Analytics

GitHub profile summary

GitHub streak

Collaboration

Open to:

  • dataset feedback
  • source suggestions
  • enrichment methodology discussion
  • GeoIP/MMDB quality analysis
  • VPN and ASN infrastructure research
  • crawler and bot intelligence collaboration
  • SIEM and fraud enrichment integrations

If you work with IP telemetry, routing metadata, abuse detection, fraud systems, or operational network analytics, feel free to open an issue or discussion in the relevant repository.

License

Individual repositories may use different licenses depending on source constraints and redistribution requirements.

See the license file in each repository for details.

Pinned Loading

  1. ASN-VPN-Network-Intelligence ASN-VPN-Network-Intelligence Public

    This repository publishes two CSV files generated from a VPN infrastructure collector

    1

  2. vpn-provider-overlap-intelligence vpn-provider-overlap-intelligence Public

    Aggregate VPN provider infrastructure overlap analysis: exact-IP overlap, shared /24 prefixes, hosting dependency, and provider relationship clusters. No raw VPN IP lists.

    1

  3. VPN-Infrastructure-Atlas VPN-Infrastructure-Atlas Public

    Interactive VPN infrastructure atlas: aggregate provider footprint by reported endpoint country, ASN, and hosting network. No raw configs or per-IP feed.

    HTML 1

  4. Tor-Radar Tor-Radar Public

    The project collects public Tor relay data once per hour, stores compact snapshots in the repository, and renders an interactive dashboard without a database or backend.

    JavaScript 1

  5. CrawlerScope CrawlerScope Public

    Interactive crawler IP intelligence dashboard for search, AI, and user-triggered fetchers.

    Python 1

  6. IP-Knowledge-Layer IP-Knowledge-Layer Public

    Open IP enrichment knowledge layer: CIDR, ASN, cloud, CDN, crawler, Tor, and VPN-adjacent network context with source provenance and confidence.

    Python 1