-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
7 changed files
with
183 additions
and
440 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,160 @@ | ||
| using System.Net; | ||
|
|
||
| using Darkages.Models; | ||
|
|
||
| using Microsoft.Extensions.Logging; | ||
|
|
||
| using Newtonsoft.Json; | ||
|
|
||
| using RestSharp; | ||
|
|
||
| using ServiceStack; | ||
|
|
||
| namespace Darkages.Network.Server; | ||
|
|
||
| public static class BadActor | ||
| { | ||
| private const string InternalIP = "192.168.50.1"; // Cannot use ServerConfig due to value needing to be constant | ||
|
|
||
| public static bool ClientOnBlackList(string remoteIp) | ||
| { | ||
| if (remoteIp.IsNullOrEmpty() || !IPAddress.TryParse(remoteIp, out _)) return true; | ||
| if (remoteIp is "127.0.0.1" or InternalIP) return false; | ||
|
|
||
| try | ||
| { | ||
| var keyCode = ServerSetup.Instance.KeyCode; | ||
| if (keyCode is null || keyCode.Length == 0) | ||
| { | ||
| ServerSetup.ConnectionLogger("Keycode not valid or not set within ServerConfig.json"); | ||
| return false; | ||
| } | ||
|
|
||
| // BLACKLIST check | ||
| var request = new RestRequest("", Method.Get); | ||
| request.AddHeader("Key", keyCode); | ||
| request.AddHeader("Accept", "application/json"); | ||
| request.AddParameter("ipAddress", remoteIp); | ||
| request.AddParameter("maxAgeInDays", "90"); | ||
| request.AddParameter("verbose", ""); | ||
| var response = ExecuteWithRetry(() => ServerSetup.Instance.RestClient.Execute<Ipdb>(request)); | ||
|
|
||
| if (response?.IsSuccessful == true) | ||
| { | ||
| var ipdb = JsonConvert.DeserializeObject<Ipdb>(response.Content!); | ||
| var abuseConfidenceScore = ipdb?.Data?.AbuseConfidenceScore; | ||
| var tor = ipdb?.Data?.IsTor; | ||
| var usageType = ipdb?.Data?.UsageType; | ||
|
|
||
| if (tor == true) | ||
| { | ||
| LogBadActor(remoteIp, "using tor"); | ||
| return true; | ||
| } | ||
|
|
||
| // Block if known malicious usage type | ||
| if (IsMaliciousUsageType(usageType)) | ||
| { | ||
| LogBadActor(remoteIp, $"using {usageType}"); | ||
| return true; | ||
| } | ||
|
|
||
| // Block based on abuse confidence score | ||
| if (abuseConfidenceScore >= 5) | ||
| { | ||
| LogBadActor(remoteIp, $"high risk score of {abuseConfidenceScore}"); | ||
| return true; | ||
| } | ||
| } | ||
| else | ||
| { | ||
| ServerSetup.ConnectionLogger($"{remoteIp} - API Issue or Failed response"); | ||
| } | ||
| } | ||
| catch (Exception ex) | ||
| { | ||
| ServerSetup.ConnectionLogger($"Error checking blacklist for {remoteIp}: {ex.Message}", LogLevel.Warning); | ||
| SentrySdk.CaptureException(ex); | ||
| } | ||
|
|
||
| return true; | ||
| } | ||
|
|
||
| private static T ExecuteWithRetry<T>(Func<T> operation, int maxRetries = 3) | ||
| { | ||
| var attempt = 0; | ||
|
|
||
| while (attempt < maxRetries) | ||
| { | ||
| try | ||
| { | ||
| return operation(); | ||
| } | ||
| catch (Exception ex) | ||
| { | ||
| attempt++; | ||
| if (attempt >= maxRetries) | ||
| { | ||
| ServerSetup.ConnectionLogger($"Max retries reached. Operation failed: {ex.Message}", LogLevel.Warning); | ||
| SentrySdk.CaptureException(ex); | ||
| return default(T); | ||
| } | ||
|
|
||
| // Wait before retrying | ||
| Thread.Sleep(1000); // Retry delay | ||
| } | ||
| } | ||
|
|
||
| return default(T); | ||
| } | ||
|
|
||
| private static void LogBadActor(string remoteIp, string reason) | ||
| { | ||
| ServerSetup.ConnectionLogger($"Blocking {remoteIp} - Reason: {reason}", LogLevel.Warning); | ||
| SentrySdk.CaptureMessage($"{remoteIp} blocked due to {reason}"); | ||
| ReportEndpoint(remoteIp, $"Blocked due to {reason}"); | ||
| } | ||
|
|
||
| private static bool IsMaliciousUsageType(string usageType) | ||
| { | ||
| return usageType switch | ||
| { | ||
| "Commercial" or "Organization" or "Government" or "Military" or "Content Delivery Network" or "Data Center/Web Hosting/Transit" => true, | ||
| _ => false | ||
| }; | ||
| } | ||
|
|
||
| public static void ReportEndpoint(string remoteIp, string comment) | ||
| { | ||
| var keyCode = ServerSetup.Instance.KeyCode; | ||
| if (keyCode is null || keyCode.Length == 0) | ||
| { | ||
| ServerSetup.ConnectionLogger("Keycode not valid or not set within ServerConfig.json"); | ||
| return; | ||
| } | ||
|
|
||
| try | ||
| { | ||
| var request = new RestRequest("", Method.Post); | ||
| request.AddHeader("Key", keyCode); | ||
| request.AddHeader("Accept", "application/json"); | ||
| request.AddParameter("ip", remoteIp); | ||
| request.AddParameter("categories", "14, 15, 16, 21"); | ||
| request.AddParameter("comment", comment); | ||
| var response = ExecuteWithRetry(() => ServerSetup.Instance.RestReport.Execute(request)); | ||
|
|
||
| if (response?.IsSuccessful == true) | ||
| { | ||
| return; | ||
| } | ||
|
|
||
| ServerSetup.ConnectionLogger($"Error reporting {remoteIp} : {comment}"); | ||
| SentrySdk.CaptureMessage($"Error reporting {remoteIp} : {comment}"); | ||
| } | ||
| catch (Exception ex) | ||
| { | ||
| ServerSetup.ConnectionLogger($"Exception while reporting {remoteIp}: {ex.Message}", LogLevel.Warning); | ||
| SentrySdk.CaptureException(ex); | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.