20 {{ upvoteCount | shortNum }}
20 {{ upvoteCount | shortNum }}

ip proxy server detection

by FirehawkCash
12 replies
I created a paid to click website, and users are only allowed to have one account per household. I blocked it where users can't have more than one account on the same ip. Now my question is, how do I prevent a user from using a proxy server to cheat the system? Any information would be helpful... thanks!
#detection #proxy #server
  • Profile picture of the author saschakimmel
    You could check the remote ip against a list of open proxies you can find on the internet or actually try to connect to the remote ip on port 3128, 8080 or even 80 (common proxy ports) and check if you can retrieve a URL through the server although this is not a good practice because if the remote IP is NOT a proxy their firewall will either block the access or warn them that your site tried to "attack" you.

    I'd favor the first suggestion although it's not 100% safe depending on the proxy list you're using.

    Or you could use this service - although it's not cheap:
    IP2Proxy IP-Country Database [PX1]
    Signature

    ** Get my ViralListMachine software now for free and build your own list virally by giving away free stuff @ http://www.virallistmachinegiveaway.com **

    {{ DiscussionBoard.errors[1709051].message }}
    • Profile picture of the author customertools
      I've got a friend who ran a site like yours, the only way he was able to make sure that multiple people where not using the site was to force them to install an internet explorer toolbar which got the windows product ID, mac address, and CPU information (if not turned off). And check against others information. but that was not 100% safe either. And by doing this he limited his customers to Windows users and users of IE, but he keep his fraud level down using this.


      -Brad
      {{ DiscussionBoard.errors[1711189].message }}
    • Profile picture of the author FirehawkCash
      Originally Posted by saschakimmel View Post

      You could check the remote ip against a list of open proxies you can find on the internet
      Could you please explain on how to do this? Thanks
      Signature
      Guaranteed Visitors
      {{ DiscussionBoard.errors[1712349].message }}
  • Profile picture of the author saschakimmel
    Just search for "open proxy list" on Google
    open proxy list - Google Search
    Signature

    ** Get my ViralListMachine software now for free and build your own list virally by giving away free stuff @ http://www.virallistmachinegiveaway.com **

    {{ DiscussionBoard.errors[1713331].message }}
  • Profile picture of the author DanPE
    Originally Posted by FirehawkCash View Post

    I created a paid to click website, and users are only allowed to have one account per household. I blocked it where users can't have more than one account on the same ip.
    Logic flaw here. One IP <> One household. Most ISPs have dynamic IP allocation, if you tie the account to IP your user will not be able to log in after he reconnects.
    {{ DiscussionBoard.errors[1713387].message }}
    • Profile picture of the author FirehawkCash
      Originally Posted by DanPE View Post

      Logic flaw here. One IP <> One household. Most ISPs have dynamic IP allocation, if you tie the account to IP your user will not be able to log in after he reconnects.
      This is only on registration
      Signature
      Guaranteed Visitors
      {{ DiscussionBoard.errors[1719728].message }}
  • Profile picture of the author lisag
    Originally Posted by FirehawkCash View Post

    I created a paid to click website, and users are only allowed to have one account per household. I blocked it where users can't have more than one account on the same ip. Now my question is, how do I prevent a user from using a proxy server to cheat the system? Any information would be helpful... thanks!
    Not 100% foolproof, but read up on this: Geolocation by IP Address

    Compare the return values against known user data, add a bit of fuzzy logic, and take it from there.
    Signature

    -- Lisa G

    {{ DiscussionBoard.errors[1716853].message }}
  • Profile picture of the author jamespitt
    Why don't you do a phone registration as well - force them to use a phone number to register. It'd be easy to hook into an asterisk box to do that & it's a bit more painful to get a new phone number than a new ip.
    Signature

    Get your totally free outsourcing guide here..

    Send me a PM if you want to hire top-calibre outsourced staff.

    {{ DiscussionBoard.errors[1720430].message }}
    • Profile picture of the author DanPE
      Originally Posted by jamespitt View Post

      Why don't you do a phone registration as well - force them to use a phone number to register. It'd be easy to hook into an asterisk box to do that & it's a bit more painful to get a new phone number than a new ip.
      It would be kind of weird to have to call halfway around the world to register on a site, wouldn't it?
      {{ DiscussionBoard.errors[1730659].message }}
  • Profile picture of the author mywebwork
    Of course a flaw in the logic here is that the statement 1 residence = 1 IP Address isn't necessarily true.

    One IP Address in a corporate environment can be shared among hundreds of users. And in a DSL or dial-up situation the same IP address may get recycled among different users. In both cases using an IP Address to limit sign-ups could block legitimate users from using your service.

    Not really sure what the best solution here is, schemes that involve using a cookie to identify legitimate users aren't foolproof and even MAC address doesn't get around the issue of one household having multiple computers.

    Bill
    {{ DiscussionBoard.errors[1750826].message }}
  • Profile picture of the author elenana
    Why don't you try to use the proxy detection to detect the IP addresses?

    You can take a look at the free web service from Ip2Proxy | FraudLabs Credit Card Fraud Prevention - Live Demo .

    I used it for online fraud checking purpose. I hope it works for yours.
    {{ DiscussionBoard.errors[1790830].message }}

Trending Topics