@_oh_no_stop_this_ yeah sure like https://github.com/Valve/fingerprintjs2 library
@Ferde hmm like hidemyass VPN?, all VPNs I know use datacenters so detection is possible.
Topic: Proxy/VPN/Tor detection (Read 13194 times)
Use HMA, cheap and can pay via BTC
Would you like to save visitors' digital fingerprints as well?
Then you can track people by their profiles, not just IP address and cookies
Then you can track people by their profiles, not just IP address and cookies
https://www.voxprox.com/
Simple php example.
Simple php example.
Code:
$apikey = "Your API Key";
$ip = "52.18.43.74";
$url = "https://www.voxprox.com/pmx.php?key=$apikey&ip=$ip";
$response = file_get_contents($url);
$response = json_decode($response, true);
// Return values VPN, Public Proxy, Web Proxy, Tor, BadIP, Bogon, Spam
if (isset($response['VPN'])) {
echo("VPN detected");
}
Another free alternative to try is https://getipintel.net , it uses machine learning and probability theory algorithms to generate a score.
Can consider of hosting database instead of API.
https://www.ip2location.com/ip2proxy-web-service
https://www.ip2location.com/ip2proxy-web-service
This paper also describes some methods for proxy detection: https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943
If you actually read the paper it covers 'Tor', 'PHPProxy', 'Glype', etc. Not VPNs.
Patterns/triggers won't detect VPNs. You need an up to date, curated list for them.
I think IPHub.info has such a list but unfortunately I have no idea how accurate it is.
@Carlos:
Try this demo: http://glados.cc/badipdetect.php
If you're interested, email me for affordable licensing.
Try this demo: http://glados.cc/badipdetect.php
If you're interested, email me for affordable licensing.
Excellent. Carlos if you buy this script you can just give the BTC direct to the people he owes. No need to waste transaction fees.
This paper also describes some methods for proxy detection: https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943
If you actually read the paper it covers 'Tor', 'PHPProxy', 'Glype', etc. Not VPNs.
Patterns/triggers won't detect VPNs. You need an up to date, curated list for them.
@Carlos:
Try this demo: http://glados.cc/badipdetect.php
If you're interested, email me for affordable licensing.
Try this demo: http://glados.cc/badipdetect.php
If you're interested, email me for affordable licensing.
This paper also describes some basic methods for proxy detection: https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943
Do you have a problem with tor users? Or you're just afraid of legal implications?
I have a lot of problems with Tor users.
Did you find a good way to block VPN too?
I'm interested too
I'm interested too
Bitcoin site that blocks TOR? what comes next, ID verification? 
Just block free proxies and you're fine I guess
http://ipinfodb.com/ maybe
Just block free proxies and you're fine I guess
http://ipinfodb.com/ maybe
What difference does it make? I want to block certain IPs from creating new accounts and performing various different tasks on my sites.
Not that much difference really I guess. You can aim to make blocking visitors as user friendly as possible though.
I was going to offer to accept your redirects perhaps.
I need a service/website that detects visitors using proxies/vpn/tor.
http://www.blocked.com/ is way too expensive.
Ideas?
http://www.blocked.com/ is way too expensive.
Ideas?
I'm fairly sure that the free version of Blocked.com® blocks Tor exit nodes by 'default' for a certain number of requests per month.
See: http://www.blocked.com/pricing.php
...
iblocklist.com has a Tor node list that you could block with .htaccess
See: https://www.iblocklist.com/lists.php?category=organizations (The Onion Router).
Most main Tor exit nodes don't change IP. You could probably update it around once a month.
Do you want to just block traffic and/or redirect it ?
VPN's are trickier to block. You're better off just blocking any IP that belongs to a datacenter. There was a list of them IP's at Github.
Do you have a problem with tor users? Or you're just afraid of legal implications?
Code:
Fatal error: Call to a member function query() on a non-object in /www/joshglazebrook.com/public_html/api/proxydetection/v1/query/tools/functions.php on line 330
There's always BadBehaviour. And it's way faster that using a remote API.
Jump to: