PDA

View Full Version : How to block torpark?


GordonH
09-22-06, 12:10 AM
In the past I have blocked specific countries from visiting our sites. This worked because people would browse using their normal connection and then switch to a slower proxy server when they went to place the fraudulent order. Now they are all using Torpark and browsing straight from that.
Our number of fraudulent ordrs has gone up by five or six times as a result.
I have some of the IP's used by the torpark servers, but does anyone know if a full list exists?

As I see it they use various dedicated hosting companies so if I could even find a full list of companies I could block their entire ranges (as normally you would not be getting orders from a dedicaterd server).

Any ideas?

I did check the browser type to see if I could filter on that but it just announces itself as Mozilla (as its based on firefox portable).

GordonH
09-22-06, 06:28 AM
I have found a list of tor exit nodes but obviously they change all the time

http://serifos.eecs.harvard.edu/cgi-bin/exit.pl?sortbw=1

Kybo_Ren
08-13-07, 04:45 PM
Sorry for the bump, but I was googling for pre-made solutions for this exact problem and found this thread.
I've never found a pre-made solution for this problem, but as I am a programmer, I made a utility that, in combination with some creative PHP scripting, will allow you to detect whether or not a user is using the Tor network.

It's a private utility that I made for a corporation's message boards that I administer, so I'm reluctant to release it publicly, but if you PM me I will give you more details, etc.

Let me know if I can help :)
-K

bjorno43
12-23-08, 12:47 PM
Better late then never:

<?php

$Array = explode('UTC #', file_get_contents('https://check.torproject.org/cgi-bin/Tor****ExitList.py?ip=X.X.X.X'), 2);
$aIPLijst = explode(chr(13), $Array[1]);

if(isset($aIPLijst[$_SERVER['REMOTE_ADDR']]))
{
die("We do not allow access to Torpark users.");
}
else
{

//Here script of entire webpage

}
?>

Replace X.X.X.X with your servers IP address. This to allow Torproject to check which Nodes are able to connect to your server and build the list upon it. Otherwise the list will be incredible large.

Basicly Torproject builds a realtime list of all Tor nodes and this script compares your users IP with the ones in the list.

Good luck with it ;)

PS: Wordfilter **** = B u l k