VPN und Proxy Detection

[theoth]

Interessanter Artikel:
https://medium.com/@ValdikSS/detect...d-proxy-users-on-the-server-side-1bcc59742413

Aber das erwähnte W.I.T.C.H - tool ( http://witch.valdikss.org.ru/ ) ist nicht sehr zuverlässig:
vpn + squid New-York:

[COLOR=rgb(0, 0, 0)]First seen    = 2016/01/15 21:35:17
Last update   = 2016/01/15 21:35:17
Total flows   = 1
Detected OS   = Linux 3.1-3.10
HTTP software = ???
MTU           = 1500
Network link  = Ethernet or modem
Language      = English
Distance      = 15
Uptime        = 32 days 1 hrs 43 min (modulo 49 days)

PTR test      = Probably home user
Fingerprint and OS match. No proxy detected (this test does not include headers detection).
No OpenVPN detected.[/COLOR]

nur vpn Düsseldorf:

[COLOR=rgb(0, 0, 0)]First seen    = 2016/01/15 21:33:36
Last update   = 2016/01/15 21:39:52
Total flows   = 4
Detected OS   = Linux 3.11 and newer
HTTP software = Epiphany  (ID is fake)
MTU           = 1194
Network link  = ???
Language      = English
Distance      = 14
IP sharing    = 2016/01/15 21:33:39
Sys change    = 2016/01/15 21:39:52
Uptime        = 10 days 5 hrs 22 min (modulo 198 days)

PTR test      = Probably home user
Your fingerprint is fake. This is probably a false positive.
No OpenVPN detected.[/COLOR]

Übrigens können nicht alle PP-proxies die org.ru auflösen - sehr merkwürdig...
proxy Düsseldorf:
The following error was encountered while trying to retrieve the URL: http://witch.valdikss.org.ru/

Unable to determine IP address from host name witch.valdikss.org.ru​

The DNS server returned:

Refused: The name server refuses to perform the specified operation.​

This means that the cache was not able to resolve the hostname presented in the URL. Check if the address is correct.
Your cache administrator is webmaster.


Generated Fri, 15 Jan 2016 18:43:52 GMT by Duesseldorf.perfect-privacy.com (squid/3.4.8)