mirror of
https://github.com/CHOMPStation2/CHOMPStation2.git
synced 2025-12-10 10:12:45 +00:00
100 lines
3.0 KiB
Plaintext
100 lines
3.0 KiB
Plaintext
//Uses a couple different services
|
|
/client/update_ip_reputation()
|
|
var/scores[] = list("GII" = ipr_getipintel(), "IPQS" = ipr_ipqualityscore())
|
|
|
|
var/log_output = "IP Reputation [key] from [address]"
|
|
var/worst = 0
|
|
|
|
for(var/service in scores)
|
|
var/score = scores[service]
|
|
if(score > worst)
|
|
worst = score
|
|
log_output += " - [service] ([num2text(score)])"
|
|
|
|
log_admin(log_output)
|
|
ip_reputation = worst
|
|
return TRUE
|
|
|
|
//Service returns a single float in html body
|
|
/client/proc/ipr_getipintel()
|
|
if(!config.ipr_email)
|
|
return -1
|
|
|
|
var/request = "http://check.getipintel.net/check.php?ip=[address]&contact=[config.ipr_email]"
|
|
var/http[] = world.Export(request)
|
|
|
|
if(!http || !islist(http)) //If we couldn't check, the service might be down, fail-safe.
|
|
log_admin("Couldn't connect to getipintel.net to check [address] for [key]")
|
|
return -1
|
|
|
|
//429 is rate limit exceeded
|
|
if(text2num(http["STATUS"]) == 429)
|
|
log_and_message_admins("getipintel.net reports HTTP status 429. IP reputation checking is now disabled. If you see this, let a developer know.")
|
|
config.ip_reputation = FALSE
|
|
return -1
|
|
|
|
var/content = file2text(http["CONTENT"]) //world.Export actually returns a file object in CONTENT
|
|
var/score = text2num(content)
|
|
if(isnull(score))
|
|
return -1
|
|
|
|
//Error handling
|
|
if(score < 0)
|
|
var/fatal = TRUE
|
|
var/ipr_error = "getipintel.net IP reputation check error while checking [address] for [key]: "
|
|
switch(score)
|
|
if(-1)
|
|
ipr_error += "No input provided"
|
|
if(-2)
|
|
fatal = FALSE
|
|
ipr_error += "Invalid IP provided"
|
|
if(-3)
|
|
fatal = FALSE
|
|
ipr_error += "Unroutable/private IP (spoofing?)"
|
|
if(-4)
|
|
fatal = FALSE
|
|
ipr_error += "Unable to reach database"
|
|
if(-5)
|
|
ipr_error += "Our IP is banned or otherwise forbidden"
|
|
if(-6)
|
|
ipr_error += "Missing contact info"
|
|
|
|
log_and_message_admins(ipr_error)
|
|
if(fatal)
|
|
config.ip_reputation = FALSE
|
|
log_and_message_admins("With this error, IP reputation checking is disabled for this shift. Let a developer know.")
|
|
return -1
|
|
|
|
//Went fine
|
|
else
|
|
return score
|
|
|
|
//Service returns JSON in html body
|
|
/client/proc/ipr_ipqualityscore()
|
|
if(!config.ipqualityscore_apikey)
|
|
return -1
|
|
|
|
var/request = "http://www.ipqualityscore.com/api/json/ip/[config.ipqualityscore_apikey]/[address]?strictness=1&fast=true&byond_key=[key]"
|
|
var/http[] = world.Export(request)
|
|
|
|
if(!http || !islist(http)) //If we couldn't check, the service might be down, fail-safe.
|
|
log_admin("Couldn't connect to ipqualityscore.com to check [address] for [key]")
|
|
return -1
|
|
|
|
var/content = file2text(http["CONTENT"]) //world.Export actually returns a file object in CONTENT
|
|
var/response = json_decode(content)
|
|
if(isnull(response))
|
|
return -1
|
|
|
|
//Error handling
|
|
if(!response["success"])
|
|
log_admin("IPQualityscore.com returned an error while processing [key] from [address]: " + response["message"])
|
|
return -1
|
|
|
|
var/score = 0
|
|
if(response["proxy"])
|
|
score = 100
|
|
else
|
|
score = response["fraud_score"]
|
|
|
|
return score/100 //To normalize with the 0.0 to 1.0 scores. |