Kevink
Kevink

Reputation: 65

Is there a solid way to get a user's IP, despite them being behind a proxy or similar?

I've searched for this quite a lot but the answers are not always clear.

Is there a solid way to get a user's IP address despite them being behind a proxy, tor, etc? Preferably using ASP.NET

I just cannot imagine "big sites" like Google, Hotmail/Outlook not having some relatively reliable way of bypassing these things, especially since they (atleast hotmail/outlook) require you to use Javascript.

Upvotes: 1

Views: 1549

Answers (2)

Blender
Blender

Reputation: 298156

If there was a way to get a user's real IP address when they were using a good proxy or Tor, what would be the point of using either?

  • You can detect Tor users by checking if their IP address is that of an exit node. There aren't that many. You cannot get their actual IP address without exploiting some browser bug or hoping they use Flash or Java. Most Tor users don't use any browser plugins and disable JavaScript.

  • Some proxies send X-Forwarded-For headers, so you can catch users using bad proxies. Good ones are indistinguishable from regular users, as they don't send any extra information.

If you are trying to prevent bots, remember that most bots just send and receive HTTP requests. They aren't browsers. Your best bet is detecting bot-like behavior.

Upvotes: 3

7thLetter
7thLetter

Reputation: 26

It's not possible to unmask someone's IP behind a proxy unless you have some relationship with the proxy.

However sometimes HTTP proxies add a header line "X-Forwarded" which identifies the real source IP address.

Hope this helps.

Upvotes: 1

Related Questions