Proxy/VPN/Tor detection

[ingrownpocket]

I need a service/website that detects visitors using proxies/vpn/tor.

http://www.blocked.com/ is way too expensive.

Ideas?

[Raoul Duke]

http://winmxunlimited.net/apis/proxy-detection-api/

[Raoul Duke]

There's also http://botscout.com
and https://apis.secpanel.com/about.php

[Raoul Duke]

http://winmxunlimited.net/apis/proxy-detection-api/

Code:

Fatal error: Call to a member function query() on a non-object in /www/joshglazebrook.com/public_html/api/proxydetection/v1/query/tools/functions.php on line 330

 

There's always BadBehaviour. And it's way faster that using a remote API.

[balanghai]

Do you have a problem with tor users? Or you're just afraid of legal implications?

[Raoul Duke]

There's also http://botscout.com

Tested with a few popular VPNs, didn't detect any of them  

VPN's are trickier to block. You're better off just blocking any IP that belongs to a datacenter. There was a list of them IP's at Github.

[BitcoinFX]

I need a service/website that detects visitors using proxies/vpn/tor.

http://www.blocked.com/ is way too expensive.

Ideas?

I'm fairly sure that the free version of Blocked.com® blocks Tor exit nodes by 'default' for a certain number of requests per month.

See: http://www.blocked.com/pricing.php

...

iblocklist.com has a Tor node list that you could block with .htaccess

See: https://www.iblocklist.com/lists.php?category=organizations  (The Onion Router).

Most main Tor exit nodes don't change IP. You could probably update it around once a month.

Do you want to just block traffic and/or redirect it ?

[BitcoinFX]

What difference does it make? I want to block certain IPs from creating new accounts and performing various different tasks on my sites.

Not that much difference really I guess. You can aim to make blocking visitors as user friendly as possible though.  

I was going to offer to accept your redirects perhaps.

[bitcoindigi]

Bitcoin site that blocks TOR? what comes next, ID verification?

Just block free proxies and you're fine I guess

http://ipinfodb.com/ maybe

[rigel]

Did you find a good way to block VPN too?

I'm interested  too

[BTCmoons]

Do you have a problem with tor users? Or you're just afraid of legal implications?

I have a lot of problems with Tor users.

You could probably just block known TOR exit nodes to solve most of your problems. There are so many proxies and VPNs, and they are always popping up that you will never be able to stop them all.

[RedDiamond]

This paper also describes some basic methods for proxy detection: https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943

[🏰 TradeFortress 🏰]

@Carlos:

Try this demo: http://glados.cc/badipdetect.php

If you're interested, email me for affordable licensing.

[🏰 TradeFortress 🏰]

This paper also describes some methods for proxy detection: https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943

If you actually read the paper it covers 'Tor', 'PHPProxy', 'Glype', etc. Not VPNs.

Patterns/triggers won't detect VPNs. You need an up to date, curated list for them.

[leahsandes]

@Carlos:

Try this demo: http://glados.cc/badipdetect.php

If you're interested, email me for affordable licensing.

Excellent. Carlos if you buy this script you can just give the BTC direct to the people he owes. No need to waste transaction fees.

[RedDiamond]

This paper also describes some methods for proxy detection: https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943

If you actually read the paper it covers 'Tor', 'PHPProxy', 'Glype', etc. Not VPNs.

Patterns/triggers won't detect VPNs. You need an up to date, curated list for them.

I think IPHub.info has such a list but unfortunately I have no idea how accurate it is.

[roberttan]

Can consider of hosting database instead of API.
https://www.ip2location.com/ip2proxy-web-service

[chmanmeow]

Another free alternative to try is https://getipintel.net , it uses machine learning and probability theory algorithms to generate a score.

[bitfmx]

https://www.voxprox.com/

Simple php example.

Code:

<?php
$apikey = "Your API Key";

$ip = "52.18.43.74";
$url = "https://www.voxprox.com/pmx.php?key=$apikey&ip=$ip";

$response = file_get_contents($url);
$response = json_decode($response, true);

// Return values VPN, Public Proxy, Web Proxy, Tor, BadIP, Bogon, Spam

if (isset($response['VPN'])) {
	echo("VPN detected");
}

[_oh_no_stop_this_]

Would you like to save visitors' digital fingerprints as well?
Then you can track people by their profiles, not just IP address and cookies