RiskProtocol / core-protocol

2 stars 0 forks source link

Research: How to rull out people with VPN connection? #60

Open mz7mz7mz7 opened 1 year ago

mz7mz7mz7 commented 1 year ago

In our future app, we will not allow people to use VPN and hide their actual country of residency.

Task: find libraries and SaaS products and other ideas on how we could tell if users use VPN and those who don't.

mz7mz7mz7 commented 1 year ago

Here i spot one DB of VPN/TORs etc etc https://www.ip2location.com

Tunji17 commented 1 year ago

So I spent some time looking at potential solutions for this problem I have a list of them here with short descriptions explaining how they will work

  1. IP Quality Score: This works as a service that provides APIs we can integrate with, They maintain a database or IPs that belong to VPN providers and return a response telling you how likely a user is using a VPN
  2. MaxMind: This is an IP metadata database, we can implement an API on top of this, but unlike the IP Quality score in No 1 we will have to maintain it ourselves
  3. IPHub: This also offers APIs we can use to look up the likelihood of a user using a VPN
  4. IP2 Location: This also offer paid APIs to check ip lookup information

So while most of these are managed services that keep updated information about IP addresses that belong to VPN providers and inform you it’s not foolproof because VPN providers can sell more private IPs to users for a higher price

mz7mz7mz7 commented 1 year ago

As we spoke, please find the providers from whom we can purchase the DB of IPs that are known proxies and VPNs. If we have that IP on our end we can be much more reliable, no external point of failure.

Tunji17 commented 1 year ago

So an update on this, i have not been able to find others with the DB purchase model except from IP2Proxy and Maxmind, but i found this https://proxycheck.io/pricing/ it seems to be a solid product with documentation built around it.