utilvo-edge-shield 1.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 78a483ac9d1d3ac64d44ef05734ba87e50579b3cf4ee90eb13e69316c45937ae
+  data.tar.gz: b868a75c32e5326b2793c1f09ded6f899bbb1aee83dabee26de43b3f06799279
+SHA512:
+  metadata.gz: bac2d2239144591c803258920ffd0611c6b571a5a6cfc0860b0f5cdb7b8605e7ce03d13cb9a0b32c4febce59b963c34a04f317cf9a4c412f6203b149c9a4e391
+  data.tar.gz: d0118c5318bcc06b3e7a2d926d36d9e98bc23aba8813d60d49deab07f804d64871af3942ff64cc1977629b8edfbc5376919734ae25aebff005c240cbcaefc6be

data/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Utilvo
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,95 @@
+# utilvo-edge-shield
+
+**Utilvo EdgeShield** (`v1.1.0`) is a zero-dependency, multi-language server firewall rule generator, CIDR/ASN threat intelligence library, Safe-Harbor bot classifier, and Google Analytics 4 (`gtag.js`) headless browser detector developed by **[Utilvo](https://utilvo.com/edge-shield)**.
+
+- **Official Documentation, Interactive `access.log` Scanner & Rule Builder:** [https://utilvo.com/edge-shield](https://utilvo.com/edge-shield)
+- **Self-Updating Live Threat Intelligence API (JSON):** [https://utilvo.com/api/edge-shield/threats](https://utilvo.com/api/edge-shield/threats)
+- **Live CIDR Blocklist Feed (Fail2Ban / CrowdSec / UFW):** [https://utilvo.com/api/edge-shield/threats?format=cidr](https://utilvo.com/api/edge-shield/threats?format=cidr)
+- **Zero-Conflict Nginx `http {}` Map Config:** [https://utilvo.com/edge-shield/nginx-bot-shield.conf](https://utilvo.com/edge-shield/nginx-bot-shield.conf)
+- **Safe 1-Line Linux Nginx Installer (Auto-Backup & Daily Sync):** [https://utilvo.com/edge-shield/install.sh](https://utilvo.com/edge-shield/install.sh)
+- **Client-Side GA4 WebGL Bot Guard:** [https://utilvo.com/edge-shield/ga4-bot-guard.min.js](https://utilvo.com/edge-shield/ga4-bot-guard.min.js)
+
+---
+
+## Overview
+
+Modern headless Chromium scrapers hosted on **Tencent Cloud (`AS132203`)**, **Alibaba Cloud (`AS45102`)**, and **Huawei Cloud (`AS136907`)** rotate outbound IPv4 addresses across `/10` and `/16` CIDR blocks (`43.128.0.0/10`, `47.74.0.0/16`, `101.32.0.0/15`) on every HTTP request, spoof legacy mobile User-Agents (`CPU iPhone OS 13_2_3`), hammer Next.js `? _rsc=` payloads, and pollute Google Analytics 4 with synthetic sessions.
+
+`utilvo-edge-shield` provides programmatic request inspection, CIDR/ASN matching, and WAF rule generation while strictly whitelisting verified search engine crawlers (`Googlebot`, `Bingbot`, `Applebot`, `DuckDuckBot`, `YandexBot`).
+
+---
+
+## Installation
+
+### Python (PyPI)
+```bash
+pip install utilvo-edge-shield
+```
+
+### Deno / TypeScript (JSR)
+```bash
+deno add jsr:@utilvo/edge-shield
+```
+
+### Rust (Crates.io)
+```bash
+cargo add utilvo-edge-shield
+```
+
+### Ruby (RubyGems)
+```bash
+gem install utilvo-edge-shield
+```
+
+### Elixir (Hex.pm)
+```elixir
+{:utilvo_edge_shield, "~> 1.1.0"}
+```
+
+### Dart / Flutter (Pub.dev)
+```bash
+dart pub add utilvo_edge_shield
+```
+
+### Lua / OpenResty / Nginx (LuaRocks)
+```bash
+luarocks install utilvo-edge-shield
+```
+
+### Go
+```bash
+go get github.com/utilvo/utilvo-edge-shield@v1.1.0
+```
+
+### 1-Line Linux / Nginx Automated Deployment
+```bash
+curl -sSL https://utilvo.com/edge-shield/install.sh | sudo bash
+```
+
+---
+
+## Quick Start
+
+### Python
+```python
+from utilvo_edge_shield import inspect_request, generate_cloudflare_waf_expression, EDGE_SHIELD_FEEDS
+
+verdict = inspect_request(
+    ip="43.173.182.197",
+    user_agent="Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X)"
+)
+print(verdict)
+# {'is_bot': True, 'is_seo_crawler': False, 'reasons': ['CLOUD_SCRAPER_SUBNET', 'ROGUE_SCRAPER_USER_AGENT']}
+```
+
+### TypeScript / JavaScript
+```ts
+import { inspectServerRequest, generateCloudflareWafExpression, EDGE_SHIELD_FEEDS } from "jsr:@utilvo/edge-shield";
+
+const res = inspectServerRequest("43.173.182.197", "HeadlessChrome/120.0");
+console.log(res.isBot, res.reasons);
+```
+
+## License
+
+MIT © [Utilvo](https://utilvo.com/edge-shield)

data/lib/utilvo_edge_shield.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module UtilvoEdgeShield
+  VERSION = "1.1.0"
+  DOCS_URL = "https://utilvo.com/edge-shield"
+  THREAT_API_URL = "https://utilvo.com/api/edge-shield/threats"
+  CIDR_FEED_URL = "https://utilvo.com/edge-shield/ai-scrapers-cidr.txt"
+
+  SEO_BOT_RE = /(Googlebot|Google-InspectionTool|bingbot|adidxbot|MicrosoftPreview|Applebot|DuckDuckBot|YandexBot)/i
+  SUBNET_RE_1 = /^43\.(119|12[89]|1[3-6][0-9]|17[0-5])\./
+  SUBNET_RE_2 = /^(47\.(74|8[289])|8\.21[79]|101\.3[23]|119\.28|124\.156|129\.226|150\.109|170\.106|149\.232|159\.138|46\.250)\./
+  BAD_UA_RE = /(CPU iPhone OS 13_2_3|TokenFoundryBot|QlyzeBot|Bytespider|PetalBot|ClaudeBot|CCBot|GPTBot|HeadlessChrome)/i
+
+  def self.inspect_request(ip, user_agent)
+    ua = user_agent.to_s
+    return { is_bot: false, is_seo_crawler: true, reasons: [] } if ua.match?(SEO_BOT_RE)
+
+    clean_ip = ip.to_s.split(",").first.to_s.strip
+    reasons = []
+    reasons << "CLOUD_SCRAPER_SUBNET" if clean_ip.match?(SUBNET_RE_1) || clean_ip.match?(SUBNET_RE_2)
+    reasons << "ROGUE_SCRAPER_USER_AGENT" if ua.match?(BAD_UA_RE)
+
+    {
+      is_bot: !reasons.empty?,
+      is_seo_crawler: false,
+      reasons: reasons
+    }
+  end
+
+  def self.generate_cloudflare_waf_expression
+    '(not cf.client.bot and (ip.src.asnum in {132203 45090 45102 37963 136907} or http.user_agent contains "CPU iPhone OS 13_2_3" or http.user_agent contains "TokenFoundryBot" or http.user_agent contains "QlyzeBot"))'
+  end
+end

metadata

@@ -0,0 +1,49 @@
+--- !ruby/object:Gem::Specification
+name: utilvo-edge-shield
+version: !ruby/object:Gem::Version
+  version: 1.1.0
+platform: ruby
+authors:
+- Utilvo
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2026-10-20 00:00:00.000000000 Z
+dependencies: []
+description: Open-source server firewall generator, CIDR/ASN threat intelligence feed (AS132203, AS45102, AS136907), Safe-Harbor bot classifier, and GA4 headless bot detector.
+email: utilvo.com@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/utilvo_edge_shield.rb
+- README.md
+- LICENSE
+homepage: https://utilvo.com/edge-shield
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://utilvo.com/edge-shield
+  documentation_uri: https://utilvo.com/edge-shield
+  source_code_uri: https://github.com/utilvo/utilvo-edge-shield
+  bug_tracker_uri: https://github.com/utilvo/utilvo-edge-shield/issues
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.7.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.4.20
+signing_key: 
+specification_version: 4
+summary: Server firewall generator, CIDR/ASN threat intelligence feed, and GA4 bot detector.
+test_files: []