nowfound

Life & fun · alternatives · 2026

24 alternatives to List of IPs making illegal auth attempts and users used doing so

🔒 Lists of IPs making illegal auth attempts and users used doing so - ctrlaltdev/illegal-auth-attempts

This GitHub repository maintains a crowdsourced compilation of IP addresses associated with illegal authentication attempts and the usernames involved in such attacks. Created in 2019, the project serves as a reference… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. List of IPs making illegal auth attempts and users used doing so launched in 2019; newer entries below may have overtaken it.

  1. 1US

    Author here. This site lets you put in a username and get the users with the most similar writing style to that user. It confirmed several users who I suspected were alts and after informally asking around has identified abandoned accounts of people I know from many years ago. I made this site mostly to show how easy this is and how it can erode online privacy. If some guy with a little bit of Python, and $8 to rent a decent dedicated server for a day can make this, imagine what a company with millions of dollars and a couple dozen PhD linguists could do. Here's Paul Graham:…

    2022 · stylometry.net · its alternatives →

  2. 2

    Hey all, wanted to share my recent weekend hack project. I wanted to improve upon the existing space for looking up information about IP addresses and ASNs. The backend is written in Rust and pulls BGP data every 8 hours from the RIPE RIS project to build up a routing table and also adds geolocation information. The frontend is using React and Tailwind. Would love any feedback or suggestions on what to improve.

    2023 · ip.guide · its alternatives →

  3. 3

    Open-source Auth0/Clerk alternative

    2024 · hexclave.com · its alternatives →

  4. 4

    Discover the best penetration testing tools, security resources, and ethical hacking content. Community-driven platform for cybersecurity professionals.

    2024 · pentestlist.com · its alternatives →

  5. 5

    IP address anonymizer module for nginx. Contribute to masonicboom/ipscrub development by creating an account on GitHub.

    2018 · github.com · its alternatives →

  6. 6

    Demo: https://diafygi.github.io/webrtc-ips/. Contribute to diafygi/webrtc-ips development by creating an account on GitHub.

    2015 · github.com · its alternatives →

  7. 7

    Hi HN! I've been fed up with search results so much that I decided to make a giant blocklist to remove garbage links by using uBlacklist. I browsed other blocklists and wasn't very satisfied from what exists now; the goal of this one is to be super organized and transparent, explaining why each site was blocked via issues. Contributions welcome! Even though around 100 domains are blocked so far, I already noticed a big improvement in casual searches. You'd be surprised how some AI generated websites can dominate the #1 page on DuckDuckGo.

    2025 · github.com · its alternatives →

  8. 8

    Bot, reputation and live probe of IP addresses for threats

    2023 · wafris.org · its alternatives →

  9. 9

    IPDetective collects data from about 60+ different sources such as official cloud provider endpoints and public VPN/Proxy/Tor/Bot net lists. Then aggregates this data into a fast and easy to use API that can be integrated into applications or scripts easily. IPDetective started as a hobby project for my other hobby projects :) and I decided to wrap a simple website around and offer it as a service. Let me know what your thoughts, if you find value in this service or if you have any feature requests.

    2022 · ipdetective.io · its alternatives →

  10. 10

    A collection of rare and inactive GitHub usernames - terror/usernames

    2020 · github.com · its alternatives →

  11. 11

    This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…

    2025 · github.com · its alternatives →

  12. 12

    a fail2ban GUI powered by fail2rest. Contribute to Sean-Der/fail2web development by creating an account on GitHub.

    2014 · github.com · its alternatives →

  13. 13AB

    Most other IP lookup tools I've found are mostly just trying to push you to signup for their API, which is fine but less useful if you're just trying to figure out which IP addresses in your log files are from sketchy locations and likely to do bad things to your application. I merged together a bunch of APIs and some of our own honeypot collected data to make something I hope devs and security folks find useful. If you want to try out a "bad" IP, try this one: https://wafris.org/ip-lookup/104.244.72.115

    2023 · wafris.org · its alternatives →

  14. 14SI

    We recently launched a free tool that shows a summary of the top cities, countries, asns, routes and much of the other context that we (IPinfo) have for any IP addresses you paste into it. Sample results: https://ipinfo.io/summarize-ips/result?id=239e90aa-88b8-4476-84c7-bfd10ed2de3f You can paste any arbitrary text into the tool at https://ipinfo.io/summarize-ips and we'll extract the IPs. It can be useful for getting a quick summary of a set of IPs (eg. click on first google result for "public proxies", copy and paste the results into the tool, and see…

    2021 · its alternatives →

  15. 15AM

    I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!

    2025 · prompt-injector.blueprintlab.io · its alternatives →

  16. 16

    Stop vpn portal attacks in 10 minutes ip threat intelligence

    Oct 2025 · threatlistpro.com · its alternatives →

  17. 17LD

    Find information, resources and relevant links for iplist.cc. This domain may be for sale.

    2019 · iplist.cc · its alternatives →

  18. 18

    Proves vulnerabilities before reporting them.

    Aug 2026 · dashboard-seven-self-13.vercel.app · its alternatives →

  19. 19NM

    Every product that allows usernames eventually ships the same broken solution. Someone adds a blacklist. Then a regex. Then another regex copied from StackOverflow. It works just long enough to ship, and then `admin`, `support`, city names, brand impersonation, and obvious slurs start leaking through anyway. Everyone knows it’s fragile, but it gets ignored because "it’s just usernames". I’ve had to rebuild this logic across multiple products, and I got tired of pretending it’s a solved problem. So I built *username.dev*, an API that answers a more useful question than "is this taken?" — it…

    Dec 2025 · username.dev · its alternatives →

  20. 20

    Examples for SlashID Gate. Contribute to slashid/gate-examples development by creating an account on GitHub.

    2023 · github.com · its alternatives →

  21. 21

    A repository to showcase some of the popular web attacks. - siddharthgoel88/web-attacks

    2016 · github.com · its alternatives →

  22. 22

    We've created a more comprehensive demo for Passkeys showing how you can use it at sign in, or embed into other parts of your flow

    2023 · demo.authsignal.com · its alternatives →

  23. 23

    I've published an open specification for a detection method I'm calling RQ4 (Request Context Fingerprinting). It analyzes whether HTTP request headers are logically consistent with real browser behavior - not just what headers are present, but whether they make sense together given the request context.

    Mar 2026 · github.com · its alternatives →

  24. 24

    auth-proxy is a minimal HTTP reverse proxy that shows login pages on protected pages, and passes user information in headers. My goal was to build something that’s as flexible as possible and can add auth to any existing infrastructure. It’s pretty straightforward to use, after setting up Stack Auth (which this is based on) you can use the Docker container to proxy port 3000 to 3001: docker run -it \ -e NEXT_PUBLIC_STACK_PROJECT_ID= \ -e NEXT_PUBLIC_STACK_PUBLISHABLE_CLIENT_KEY= \ -e STACK_SECRET_SERVER_KEY= \ -e SERVER_PORT=3000 \ -e PROXY_PORT=3001 \ -p 3001:3001 \…

    2024 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →