detect if my users are using proxy servers to mask their identity?
It's a web project, I know I could try to detect the forwarded for headers, or even through webrtc, but those two can be spoofed, is there any reliable way to do this or should I rely on the detection systems from third part tools? Afaik those tools does not analyze the connection but they do analyze the IP itself against several databases to check if has been reports, etc, is this the better approach?
set a captcha if system time and location mismatch?
proxies are open to the internet , so you may use a port scan to detect that
How does that detect a proxy?
No, the IP I get from the user is the one the proxy is pointing to, that one has no open income ports
anoother thing is that ..
There is a lot of APIs that can detect if someone is using a Proxy or VPN, this is one example. https://vpnapi.io/ But, it's really hard to get the real IP.
comparing the time reported by the user's device with the time of the location associated with the IP address of the user's request. If the time reported by the user's device does not match the time of the location associated with the user's IP address, it could indicate that the user is using a VPN or proxy to access your system
That's spoofeable too
fine. although blocking some ips by this method wouldnt hurt
I know there's a lot of third part checkers but none of them are 100% accurate or realiable, so I stopped this and I'm just considering KYC
Yeah but scammers won't stop and they will buy more and more proxies
why not make an extention related to ur website
Обсуждают сегодня