Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I'm looking for something like a known proxy servers IP list (text, comma seperated or database based). Do you happen to know if anything like that exists? Free would be nice. I doubt it because these things change every day, but as various websites contain big lists of available proxy servers I think it could be a possiblity. I know for example that MaxMind uses something like that for their fraud checking, but I'm not sure if they compare the IP against a database or use HTTP headers instead. I'm trying to do the former. Any info would be helpful, thanks.

share|improve this question

2 Answers 2

In terms of building a free list of proxy servers, there is a tool called Charon that uses Google to search for proxy lists and then verifies them. YAPH is a commonly used tool for finding proxies.

If you are trying to detect if someone is using a proxy, the x-forwarded-for won't work with "anonymous proxies", however you could test each new ip address with YAPH to see if they are running a proxy server on a common port. Of course if they are using a proxy server on a strange port this method won't work.

In terms of "real security" I think this is complete and total waste of time. IP addresses are basically free, and its trivial to bypass IP based blocking/delays for brute force protection. The counter argument is that IP based blocking is better than nothing, and I suppose thats true just don't depend on it.

share|improve this answer
    
Thanks, what I need that for is for a security-related visualization tool I'm writing. It would be nice to have some stats about the logged IPs addresses, ie whether they might had connected through a proxy or not. I'm writing this in PHP and the data are stored in MySQL, so I guess that even if those are nice tools, it won't really help me. –  Ion Dec 21 '11 at 22:35
    
@Ion You are not being very imaginative. First of all you can call any program on the commandline but YAPH is simple enough to implement in PHP as long as you aren't afraid of layer 7. Charon can build you a free database of proxy servers and you can do a simple sql lookup, although any list of proxy servers will be out of date within a few hours. Nothing is spoon fed. –  Rook Dec 22 '11 at 0:02
    
Yes, thanks Rook, but I guess this is a bit complicated for the simple goal I have in mind. Time spent on it would be better invested in other aspects of the same hobby project :) –  Ion Dec 22 '11 at 3:44

I don't know something exactly as you want, I think that it doesn't exists.

But as you said, there are sites that publish fresh proxy IP lists every day, you can collect IP addresses and ports from there and generate yourself your database. You can do even more, but this could be a good start.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.