ip proxy server detection

FirehawkCash · 02-03-2010, 11:41 PM

I created a paid to click website, and users are only allowed to have one account per household. I blocked it where users can't have more than one account on the same ip. Now my question is, how do I prevent a user from using a proxy server to cheat the system? Any information would be helpful... thanks!

saschakimmel · 02-04-2010, 05:31 AM

You could check the remote ip against a list of open proxies you can find on the internet or actually try to connect to the remote ip on port 3128, 8080 or even 80 (common proxy ports) and check if you can retrieve a URL through the server although this is not a good practice because if the remote IP is NOT a proxy their firewall will either block the access or warn them that your site tried to "attack" you.

I'd favor the first suggestion although it's not 100% safe depending on the proxy list you're using.

Or you could use this service - although it's not cheap:
IP2Proxy IP-Country Database [PX1]

customertools · 02-04-2010, 03:45 PM

I've got a friend who ran a site like yours, the only way he was able to make sure that multiple people where not using the site was to force them to install an internet explorer toolbar which got the windows product ID, mac address, and CPU information (if not turned off). And check against others information. but that was not 100% safe either. And by doing this he limited his customers to Windows users and users of IE, but he keep his fraud level down using this.

-Brad

FirehawkCash · 02-04-2010, 10:16 PM

Quote:

Originally Posted by saschakimmel

You could check the remote ip against a list of open proxies you can find on the internet

Could you please explain on how to do this? Thanks

saschakimmel · 02-05-2010, 04:57 AM

Just search for "open proxy list" on Google

open proxy list - Google Search

DanPE · 02-05-2010, 05:24 AM

Quote:

Originally Posted by FirehawkCash

I created a paid to click website, and users are only allowed to have one account per household. I blocked it where users can't have more than one account on the same ip.

Logic flaw here. One IP <> One household. Most ISPs have dynamic IP allocation, if you tie the account to IP your user will not be able to log in after he reconnects.

lisag · 02-05-2010, 11:39 PM

Quote:

Originally Posted by FirehawkCash

I created a paid to click website, and users are only allowed to have one account per household. I blocked it where users can't have more than one account on the same ip. Now my question is, how do I prevent a user from using a proxy server to cheat the system? Any information would be helpful... thanks!

Not 100% foolproof, but read up on this: Geolocation by IP Address

Compare the return values against known user data, add a bit of fuzzy logic, and take it from there.

FirehawkCash · 02-06-2010, 05:30 PM

Quote:

Originally Posted by DanPE

Logic flaw here. One IP <> One household. Most ISPs have dynamic IP allocation, if you tie the account to IP your user will not be able to log in after he reconnects.

This is only on registration

jamespitt · 02-06-2010, 09:39 PM

Why don't you do a phone registration as well - force them to use a phone number to register. It'd be easy to hook into an asterisk box to do that & it's a bit more painful to get a new phone number than a new ip.

DanPE · 02-09-2010, 09:40 AM

Quote:

Originally Posted by jamespitt

Why don't you do a phone registration as well - force them to use a phone number to register. It'd be easy to hook into an asterisk box to do that & it's a bit more painful to get a new phone number than a new ip.

It would be kind of weird to have to call halfway around the world to register on a site, wouldn't it?

FirehawkCash · 02-14-2010, 04:30 AM

nobody would sign up if you had to verify by phone.

mywebwork · 02-14-2010, 09:06 AM

Of course a flaw in the logic here is that the statement 1 residence = 1 IP Address isn't necessarily true.

One IP Address in a corporate environment can be shared among hundreds of users. And in a DSL or dial-up situation the same IP address may get recycled among different users. In both cases using an IP Address to limit sign-ups could block legitimate users from using your service.

Not really sure what the best solution here is, schemes that involve using a cookie to identify legitimate users aren't foolproof and even MAC address doesn't get around the issue of one household having multiple computers.

Bill

elenana · 02-24-2010, 03:34 AM

Why don't you try to use the proxy detection to detect the IP addresses?

You can take a look at the free web service from Ip2Proxy | FraudLabs Credit Card Fraud Prevention - Live Demo .

I used it for online fraud checking purpose. I hope it works for yours.

02-03-2010, 11:41 PM	#1
FirehawkCash FirehawkCash Join Date: Sep 2009 Posts: 15 Thanks: 0 Thanked 0 Times in 0 Posts Social Networking	ip proxy server detection I created a paid to click website, and users are only allowed to have one account per household. I blocked it where users can't have more than one account on the same ip. Now my question is, how do I prevent a user from using a proxy server to cheat the system? Any information would be helpful... thanks!
	Guaranteed Visitors

02-04-2010, 05:31 AM	#2
saschakimmel Crazy Internet Marketer War Room Member Join Date: Jan 2010 Location: Germany Posts: 101 Thanks: 0 Thanked 15 Times in 12 Posts Social Networking Contact Info	Re: ip proxy server detection You could check the remote ip against a list of open proxies you can find on the internet or actually try to connect to the remote ip on port 3128, 8080 or even 80 (common proxy ports) and check if you can retrieve a URL through the server although this is not a good practice because if the remote IP is NOT a proxy their firewall will either block the access or warn them that your site tried to "attack" you. I'd favor the first suggestion although it's not 100% safe depending on the proxy list you're using. Or you could use this service - although it's not cheap: IP2Proxy IP-Country Database [PX1]
	Get my ViralListMachine software now for free and build your own list virally by giving away free stuff @ http://www.virallistmachinegiveaway.com

02-04-2010, 03:45 PM	#3
customertools Customer Tools War Room Member Join Date: Dec 2009 Location: Texas Posts: 96 Thanks: 0 Thanked 7 Times in 7 Posts Social Networking	Re: ip proxy server detection I've got a friend who ran a site like yours, the only way he was able to make sure that multiple people where not using the site was to force them to install an internet explorer toolbar which got the windows product ID, mac address, and CPU information (if not turned off). And check against others information. but that was not 100% safe either. And by doing this he limited his customers to Windows users and users of IE, but he keep his fraud level down using this. -Brad
	Ultimate Keyword Tool - Create HUGE Targeted Keyword Lists In Minutes Not Hours Or Days. $7 seven day trial.

02-05-2010, 04:57 AM	#5
saschakimmel Crazy Internet Marketer War Room Member Join Date: Jan 2010 Location: Germany Posts: 101 Thanks: 0 Thanked 15 Times in 12 Posts Social Networking Contact Info	Re: ip proxy server detection Just search for "open proxy list" on Google open proxy list - Google Search
	Get my ViralListMachine software now for free and build your own list virally by giving away free stuff @ http://www.virallistmachinegiveaway.com

02-06-2010, 09:39 PM	#9
jamespitt HyperActive Warrior War Room Member Join Date: Sep 2009 Location: London, England Posts: 251 Thanks: 29 Thanked 32 Times in 27 Posts Social Networking Contact Info	Re: ip proxy server detection Why don't you do a phone registration as well - force them to use a phone number to register. It'd be easy to hook into an asterisk box to do that & it's a bit more painful to get a new phone number than a new ip.

02-14-2010, 04:30 AM	#11
FirehawkCash FirehawkCash Join Date: Sep 2009 Posts: 15 Thanks: 0 Thanked 0 Times in 0 Posts Social Networking	Re: ip proxy server detection nobody would sign up if you had to verify by phone.
	Guaranteed Visitors

02-14-2010, 09:06 AM	#12
mywebwork Senior Warrior Member War Room Member Join Date: Sep 2008 Location: Honolulu, Hawaii, USA & Montreal Canada Posts: 2,218 Blog Entries: 1 Thanks: 759 Thanked 724 Times in 505 Posts	Re: ip proxy server detection Of course a flaw in the logic here is that the statement 1 residence = 1 IP Address isn't necessarily true. One IP Address in a corporate environment can be shared among hundreds of users. And in a DSL or dial-up situation the same IP address may get recycled among different users. In both cases using an IP Address to limit sign-ups could block legitimate users from using your service. Not really sure what the best solution here is, schemes that involve using a cookie to identify legitimate users aren't foolproof and even MAC address doesn't get around the issue of one household having multiple computers. Bill

02-24-2010, 03:34 AM	#13
elenana Warrior Member Join Date: Apr 2009 Posts: 15 Thanks: 0 Thanked 0 Times in 0 Posts	Re: ip proxy server detection Why don't you try to use the proxy detection to detect the IP addresses? You can take a look at the free web service from Ip2Proxy \| FraudLabs Credit Card Fraud Prevention - Live Demo . I used it for online fraud checking purpose. I hope it works for yours.