Ask HN: Someone is proxy-mirroring my website, can I do anything?

• firehol

  8 1,461 1.6 Shell

  A firewall for humans...

  

http://iplists.firehol.org/ looks free and very comprehensive. It has whole bunch of sub-lists of IPs that are likely to be sources of abuse, including datacenters and VPNs, and it gets updated frequently. Github: https://github.com/firehol/firehol

• blocklist-ipsets

  39 2,954 2.7 Shell

  ipsets dynamically updated with firehol's update-ipsets.sh script

  

http://iplists.firehol.org/ looks free and very comprehensive. It has whole bunch of sub-lists of IPs that are likely to be sources of abuse, including datacenters and VPNs, and it gets updated frequently. Github: https://github.com/firehol/firehol

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• javascript-obfuscator

  45 12,823 4.0 TypeScript

  A powerful obfuscator for JavaScript and Node.js

  

• nrich

  6 - -

1. Grab the list of IPs that you've already identified and feed them through shodan.io or nrich (https://gitlab.com/shodan-public/nrich): "nrich bad-ips.txt"

2. See if all of the offending IPs share a common open port/ service/ provider/ hostname/ etc. Your regular visitors probably connect from IPs that don't have any open ports exposed to the Internet (or just 7547).

3. If the IPs share a fingerprint then you could lazily enrich client IPs using https://internetdb.shodan.io and block them in near real-time. You could also do the IP enrichment before returning content but then you're adding some latency (<40ms) to every page load which isn't ideal.

Suggest a related project