https://github.com/snpranav/pangea-bot-detection-demo
https://github.com/snpranav/pangea-bot-detection-demo
Last synced: about 1 month ago
JSON representation
- Host: GitHub
- URL: https://github.com/snpranav/pangea-bot-detection-demo
- Owner: snpranav
- Created: 2023-08-11T23:31:31.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2023-08-11T23:55:53.000Z (almost 2 years ago)
- Last Synced: 2025-02-14T04:53:38.384Z (3 months ago)
- Language: TypeScript
- Size: 62.5 KB
- Stars: 0
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Botnet Detection using Pangea's IP Reputation API Demo
Using Panagea's IP reputation APIs you can detect and block bots from running critical operations such as registrations, logins, payments on your platform.
## Why not use Cloudflare or a WAF?
Well, Cloudflare let's you block most DDOS attacks; however, botnets can't really be stopped by WAFs due to the nature of their IP origins. Attacks such as [Astroturfing](https://en.wikipedia.org/wiki/Astroturfing) allows botnets to spam various APIs and functions in your app and it's hard to prevent without obtaining botnet IP datasets that Pangea offers in partnership with Team Cymru.
## Usage
It's extermely simple to implement the API. In this example it's been created as a util file; however, it can be converted into a middleware to protect a large set of APIs in your application.
The API call to Pangea services occurs in the [src/utils/botDetector.ts](./src/utils/botDetector.ts) and this function is called by 2 APIs `/api/check-current-ip`, `/api/check-given-ip`
To play with the API routes you need to deploy it on Vercel:
[](https://vercel.com/new/clone?repository-url=https%3A%2F%2Fgithub.com%2Fsnpranav%2Fpangea-bot-detection-demo&env=PANGEA_TOKEN,PANGEA_DOMAIN&envDescription=API%20Keys%20can%20be%20obtained%20from%20pangea.cloud%20and%20will%20be%20used%20to%20call%20the%20IP%20intel%20API&envLink=https%3A%2F%2Fconsole.pangea.cloud%2Fservice%2Fip-intel&project-name=with-pangea-bot-detection-demo&repository-name=with-pangea-bot-detection-demo)
Once deployed visit routes:
- `/api/check-current-ip` - will tell your IP is a bot or not
- `/api/check-given-ip?ip=100.12.162.73` - will show that this is a bot IP since `100.12.162.73` is the IP part of a botnet
Based on whether it's a bot or not you can add logic in your application to either show a captcha challenge to your user or just block their request.
A good example to see how this has been implemented would be in the [src/pages/api/check-current-ip.ts](./src/pages/api/check-current-ip.ts)