Bitcoin Forum

Other => Off-topic => Topic started by: ingrownpocket on October 27, 2013, 09:36:35 PM

Title: Proxy/VPN/Tor detection
Post by: ingrownpocket on October 27, 2013, 09:36:35 PM

I need a service/website that detects visitors using proxies/vpn/tor.

http://www.blocked.com/ is way too expensive.

Ideas?

Title: Re: Proxy/VPN/Tor detection
Post by: Raoul Duke on October 27, 2013, 09:47:49 PM

http://winmxunlimited.net/apis/proxy-detection-api/

Title: Re: Proxy/VPN/Tor detection
Post by: Raoul Duke on October 27, 2013, 09:56:01 PM

There's also http://botscout.com
and https://apis.secpanel.com/about.php

Title: Re: Proxy/VPN/Tor detection
Post by: Raoul Duke on October 27, 2013, 10:50:59 PM

Quote from: Carlos L. on October 27, 2013, 10:45:15 PM

Quote from: Raoul Duke on October 27, 2013, 09:47:49 PM

http://winmxunlimited.net/apis/proxy-detection-api/

Code:

Fatal error: Call to a member function query() on a non-object in /www/joshglazebrook.com/public_html/api/proxydetection/v1/query/tools/functions.php on line 330

::)

There's always BadBehaviour. And it's way faster that using a remote API.

Title: Re: Proxy/VPN/Tor detection
Post by: balanghai on October 27, 2013, 10:53:00 PM

Do you have a problem with tor users? Or you're just afraid of legal implications?

Title: Re: Proxy/VPN/Tor detection
Post by: Raoul Duke on October 27, 2013, 10:56:12 PM

Quote from: Carlos L. on October 27, 2013, 10:52:24 PM

Quote from: Raoul Duke on October 27, 2013, 09:56:01 PM

There's also http://botscout.com

Tested with a few popular VPNs, didn't detect any of them :-\

VPN's are trickier to block. You're better off just blocking any IP that belongs to a datacenter. There was a list of them IP's at Github.

Title: Re: Proxy/VPN/Tor detection
Post by: BitcoinFX on October 27, 2013, 11:41:36 PM

Quote from: Carlos L. on October 27, 2013, 09:36:35 PM

I need a service/website that detects visitors using proxies/vpn/tor.

http://www.blocked.com/ is way too expensive.

Ideas?

I'm fairly sure that the free version of Blocked.com® blocks Tor exit nodes by 'default' for a certain number of requests per month.

See: http://www.blocked.com/pricing.php

...

iblocklist.com has a Tor node list that you could block with .htaccess

See: https://www.iblocklist.com/lists.php?category=organizations (The Onion Router).

Most main Tor exit nodes don't change IP. You could probably update it around once a month.

Do you want to just block traffic and/or redirect it ?

Title: Re: Proxy/VPN/Tor detection
Post by: BitcoinFX on October 28, 2013, 12:00:35 AM

Quote from: Carlos L. on October 27, 2013, 11:48:34 PM

What difference does it make? I want to block certain IPs from creating new accounts and performing various different tasks on my sites.

Not that much difference really I guess. You can aim to make blocking visitors as user friendly as possible though. :)

I was going to offer to accept your redirects perhaps.

Title: Re: Proxy/VPN/Tor detection
Post by: bitcoindigi on October 28, 2013, 05:45:16 AM

Bitcoin site that blocks TOR? what comes next, ID verification? ::)

Just block free proxies and you're fine I guess

http://ipinfodb.com/ maybe

Title: Re: Proxy/VPN/Tor detection
Post by: rigel on July 27, 2014, 04:16:38 AM

Did you find a good way to block VPN too?

I'm interested too

Title: Re: Proxy/VPN/Tor detection
Post by: BTCmoons on July 27, 2014, 04:38:29 AM

Quote from: Carlos L. on October 27, 2013, 11:06:50 PM

Quote from: balanghai on October 27, 2013, 10:53:00 PM

Do you have a problem with tor users? Or you're just afraid of legal implications?

I have a lot of problems with Tor users.

You could probably just block known TOR exit nodes to solve most of your problems. There are so many proxies and VPNs, and they are always popping up that you will never be able to stop them all.

Title: Re: Proxy/VPN/Tor detection
Post by: RedDiamond on July 27, 2014, 05:03:37 AM

This paper also describes some basic methods for proxy detection: https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943

Title: Re: Proxy/VPN/Tor detection
Post by: 🏰 TradeFortress 🏰 on July 27, 2014, 05:03:57 AM

@Carlos:

Try this demo: http://glados.cc/badipdetect.php

If you're interested, email me for affordable licensing.

Title: Re: Proxy/VPN/Tor detection
Post by: 🏰 TradeFortress 🏰 on July 27, 2014, 05:05:42 AM

Quote from: RedDiamond on July 27, 2014, 05:03:37 AM

This paper also describes some methods for proxy detection: https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943

If you actually read the paper it covers 'Tor', 'PHPProxy', 'Glype', etc. Not VPNs.

Patterns/triggers won't detect VPNs. You need an up to date, curated list for them.

Title: Re: Proxy/VPN/Tor detection
Post by: leahsandes on July 27, 2014, 05:08:10 AM

Quote from: Free hugs! ♥ on July 27, 2014, 05:03:57 AM

@Carlos:

Try this demo: http://glados.cc/badipdetect.php

If you're interested, email me for affordable licensing.

Excellent. Carlos if you buy this script you can just give the BTC direct to the people he owes. No need to waste transaction fees.

Title: Re: Proxy/VPN/Tor detection
Post by: RedDiamond on July 27, 2014, 06:22:05 AM

Quote from: Free hugs! ♥ on July 27, 2014, 05:05:42 AM

Quote from: RedDiamond on July 27, 2014, 05:03:37 AM

This paper also describes some methods for proxy detection: https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943

If you actually read the paper it covers 'Tor', 'PHPProxy', 'Glype', etc. Not VPNs.

Patterns/triggers won't detect VPNs. You need an up to date, curated list for them.

I think IPHub.info has such a list but unfortunately I have no idea how accurate it is.

Title: Re: Proxy/VPN/Tor detection
Post by: roberttan on June 22, 2016, 11:09:43 AM

Can consider of hosting database instead of API.
https://www.ip2location.com/ip2proxy-web-service

Title: Re: Proxy/VPN/Tor detection
Post by: chmanmeow on September 27, 2017, 03:17:11 AM

Another free alternative to try is https://getipintel.net , it uses machine learning and probability theory algorithms to generate a score.

Title: Re: Proxy/VPN/Tor detection
Post by: bitfmx on August 18, 2018, 06:30:07 PM

https://www.voxprox.com/

Simple php example.

Code:

<?php
$apikey = "Your API Key";

$ip = "52.18.43.74";
$url = "https://www.voxprox.com/pmx.php?key=$apikey&ip=$ip";

$response = file_get_contents($url);
$response = json_decode($response, true);

// Return values VPN, Public Proxy, Web Proxy, Tor, BadIP, Bogon, Spam

if (isset($response['VPN'])) {
	echo("VPN detected");
}

Title: Re: Proxy/VPN/Tor detection
Post by: _oh_no_stop_this_ on August 18, 2018, 07:33:03 PM

Would you like to save visitors' digital fingerprints as well?
Then you can track people by their profiles, not just IP address and cookies

Title: Re: Proxy/VPN/Tor detection
Post by: Ferde on August 19, 2018, 03:37:18 AM

Use HMA, cheap and can pay via BTC

Title: Re: Proxy/VPN/Tor detection
Post by: bitfmx on August 19, 2018, 08:10:10 PM

@_oh_no_stop_this_ yeah sure like https://github.com/Valve/fingerprintjs2 library

@Ferde hmm like hidemyass VPN?, all VPNs I know use datacenters so detection is possible.