blacklisting ips

Author: nsjames

src/app.js

@@ -5,6 +5,7 @@ import routes from './routes';
 import cors from 'cors';
 import compression from 'compression';
 import AnalyticsService from "./services/AnalyticsService";
+import Blacklist from "./util/blacklist";
 
 const app = express();
 app.disable('x-powered-by');
@@ -41,4 +42,10 @@ app.use((err, req, res, next) => { // eslint-disable-line no-unused-vars
     });
 });
 
+const senderIp = req => req.headers['x-forwarded-for'] || req.connection.remoteAddress;
+app.use((req, res, next) => {
+	if(Blacklist.get(senderIp(req)) < 20) next();
+	else res.send(null);
+});
+
 export default app;

src/routes.js

@@ -22,6 +22,7 @@ import config from "./util/config";
 import * as ecc from "eosjs-ecc";
 import BitcoinService from "./services/BitcoinService";
 import WalletPackHelpers from "./services/WalletPackHelpers";
+import Blacklist from "./util/blacklist";
 
 const bucket = couchbase('scatter');
 
@@ -280,6 +281,9 @@ routes.post('/btc/pushtx', async (req, res) => {
 
 
 
-routes.all('*', (req, res) => res.sendStatus(403));
+routes.all('*', (req, res) => {
+	Blacklist.add(senderIp(req));
+	res.sendStatus(403);
+});
 
 export default routes;

src/util/blacklist.js

@@ -0,0 +1,13 @@
+const BLACKLIST = {};
+export default class Blacklist {
+
+	static add(ip){
+		if(!BLACKLIST.hasOwnProperty(ip)) BLACKLIST[ip] = 0;
+		BLACKLIST[ip]++;
+	}
+
+	static get(ip){
+		return BLACKLIST[ip] || 0;
+	}
+
+}