CarderPlanet
Professional
- Messages
- 2,552
- Reaction score
- 712
- Points
- 83
Hello! In this article, we will look at the IP address parameters that affect the anti-fraud systems of various services.
Chapter 1 - IP SCORE, FRAUD SCORE, RISK SCORE and other names
IP SCORE, FRAUD SCORE, RISK SCORE and other names - this is a conditional example parameter that evaluates the" contamination " of the IP address for anti-fraud systems of various services. The higher, the greater the probability of failure.
The difference in the names is that this parameter is measured by special services with different scoring methods. In order to understand better, I will tell you about the services and their methods below.
IP SCORE
service - https://getipintel.net/
The service provides api access for online store sites to its constantly updated databases of "ip purity" to check customers for signs of fraud. Other services provide similar services.
You can check the IP address on the site one by one, or use the free, lightweight API to automate checking multiple IP addresses and so on.
it shows a score from 0 to 1 to 4 digits (0.5423), but in fact the value is only up to hundredths, respectively, the best value for bypassing anti-fraud systems is 0.
IP addresses with a score of up to 0.40 are also considered relevant, and I recommend up to 0.35. Although it really all depends on what you want to use them for, up to 0.7 or more are suitable for some tasks. In each case, you need to understand and have an idea of which service to select the ip and to what value you are suitable.
Here is what this service offers to its users and, accordingly, is taken into account when calculating points for an ip address:
This is a translation from the site https://getipintel.net/. Made using google. translate. you can read the original in English on the website, as well as get acquainted with more detailed information.
This service is suitable for checking IP addresses, which are used for so-called "stuffing" into most popular systems and stores.
FRAUD SCORE
сервис https://www.ipqualityscore.com
Servez, like the previous one, provides access to its databases.
You can check your IP address by registering on the site 5,000 times for free, either in your merchant profile or using the api.
The service checks for the following parameters:
From all this, the FRAUD SCORE is calculated. Separately, by selecting the check mark, you can check what FRAUD SCORE will be when using this ip from a mobile device.
FRAUD SCORE can be from 0 to 100 points, similar to the previous service - the less, the better. Although the service itself says that 75+ is suspicious, 85+ is high risk
There is also a service https://www.maxmind.com/ it has a trial registration, so it is not particularly used for checking the IP address under "driving in". I'll add more about this service later.
If you know any other systems worthy of attention, please write to me!
Chapter 2 - Two-way Ping, DNS, WebRTC, Time zone, Open Ports
Double-ping the time it takes for the client to receive a response from the server and vice versa.The higher the ping, the more likely it is that a proxy/vpn is used. The standard ping for a direct connection is about 40 ms, anything higher is considered a sign of the likely use of proxy / vpn in many verification services, such as https://whatleaks.com/
In almost all cases of using proxy/vpn, two-way ping cannot be avoided.
Also, two-way ping may be high due to the low speed of the Internet connection. And when the proxy / vpn server is connected to the Internet through the provider's gateway with a gray ip.
DNS
DNS servers must be at least in the country that the IP address belongs to. It is best to use the DNS server of the provider to which the ip address belongs.
In openvpn configs, usually the necessary DNS servers are forwarded automatically, but if this does not happen, then there is a lot of information on how to configure DNS servers on the Internet.(You can also use our instructions).
WebRTC
WebRTC technology makes video communication possible through the browser window, so you only need to click on the link to the corresponding web page to join the call.
WebRTC uses two audio codecs, G. 711 and Opus, as well as VP8 and H. 264 video codecs.
The VPN server does not always correctly forward the WebRTC ip.
You can find out how to disable or change WebRTC on the Internet. In the near future, all relevant methods will be available in our instructions.
TimeZone Time zone.
Time based on the location of the ip address. The time and time zone on your local machine must match the time zone.
Open ports
Chapter 1 - IP SCORE, FRAUD SCORE, RISK SCORE and other names
IP SCORE, FRAUD SCORE, RISK SCORE and other names - this is a conditional example parameter that evaluates the" contamination " of the IP address for anti-fraud systems of various services. The higher, the greater the probability of failure.
The difference in the names is that this parameter is measured by special services with different scoring methods. In order to understand better, I will tell you about the services and their methods below.
IP SCORE
service - https://getipintel.net/
The service provides api access for online store sites to its constantly updated databases of "ip purity" to check customers for signs of fraud. Other services provide similar services.
You can check the IP address on the site one by one, or use the free, lightweight API to automate checking multiple IP addresses and so on.
it shows a score from 0 to 1 to 4 digits (0.5423), but in fact the value is only up to hundredths, respectively, the best value for bypassing anti-fraud systems is 0.
IP addresses with a score of up to 0.40 are also considered relevant, and I recommend up to 0.35. Although it really all depends on what you want to use them for, up to 0.7 or more are suitable for some tasks. In each case, you need to understand and have an idea of which service to select the ip and to what value you are suitable.
Here is what this service offers to its users and, accordingly, is taken into account when calculating points for an ip address:
Bot, proxy, and VPN traffic detection.
Significantly reduce fraud on e-commerce sites (anti-fraud)
Protect your site from automated hacking attempts such as XSS, SQLi, brute-force attacks, app scans, and many others.
Protect your site from crawlers who steal your content.
Prevent users from abusing advertising offers / multiple registrations / abusing the affiliate program.
Don't let bots scrape your content or spam your site.
Serve traffic / content to real users, not bots.
Reduce fake pageviews, clicks, and activity that lead to click fraud and browsing fraud (anti-bot detection)
Prevent trolls / people who try to circumvent the ban
Configure your system to restrict access (for example, prevent them from changing their password, email address, etc.) and prevent account hacking.
Since the system returns a real value and there are various options for flags, you can configure the protection level for a certain period of time and adjust it accordingly.
Use it together with another fraud prevention service to make it even better. Some fraud prevention services don't explicitly look for proxies / VPNs / bad IP addresses
This is a translation from the site https://getipintel.net/. Made using google. translate. you can read the original in English on the website, as well as get acquainted with more detailed information.
This service is suitable for checking IP addresses, which are used for so-called "stuffing" into most popular systems and stores.
FRAUD SCORE
сервис https://www.ipqualityscore.com
Servez, like the previous one, provides access to its databases.
You can check your IP address by registering on the site 5,000 times for free, either in your merchant profile or using the api.
The service checks for the following parameters:
- A country
- City
- Region
- Host Name
- Provider
- Organization that the provider belongs to
- ASN (for more information, see wikipedia)
- Proxy / VPN detector
- VPN
- TOR
From all this, the FRAUD SCORE is calculated. Separately, by selecting the check mark, you can check what FRAUD SCORE will be when using this ip from a mobile device.
FRAUD SCORE can be from 0 to 100 points, similar to the previous service - the less, the better. Although the service itself says that 75+ is suspicious, 85+ is high risk
There is also a service https://www.maxmind.com/ it has a trial registration, so it is not particularly used for checking the IP address under "driving in". I'll add more about this service later.
If you know any other systems worthy of attention, please write to me!
Chapter 2 - Two-way Ping, DNS, WebRTC, Time zone, Open Ports
Double-ping the time it takes for the client to receive a response from the server and vice versa.The higher the ping, the more likely it is that a proxy/vpn is used. The standard ping for a direct connection is about 40 ms, anything higher is considered a sign of the likely use of proxy / vpn in many verification services, such as https://whatleaks.com/
In almost all cases of using proxy/vpn, two-way ping cannot be avoided.
Also, two-way ping may be high due to the low speed of the Internet connection. And when the proxy / vpn server is connected to the Internet through the provider's gateway with a gray ip.
DNS
DNS servers must be at least in the country that the IP address belongs to. It is best to use the DNS server of the provider to which the ip address belongs.
In openvpn configs, usually the necessary DNS servers are forwarded automatically, but if this does not happen, then there is a lot of information on how to configure DNS servers on the Internet.(You can also use our instructions).
WebRTC
WebRTC technology makes video communication possible through the browser window, so you only need to click on the link to the corresponding web page to join the call.
WebRTC uses two audio codecs, G. 711 and Opus, as well as VP8 and H. 264 video codecs.
The VPN server does not always correctly forward the WebRTC ip.
You can find out how to disable or change WebRTC on the Internet. In the near future, all relevant methods will be available in our instructions.
TimeZone Time zone.
Time based on the location of the ip address. The time and time zone on your local machine must match the time zone.
Open ports
***temporarily taken from some forum (forgot) I will soon rewrite* * * open ports (8080, 8081, 3128, 80, 81 and so on) - this is not always a negative parameter, since this is really a common misconception. I would say that this is more of a neutral parameter than a negative one.
Some sites check anonymity, scan the IP and consider that if a certain port is open, then the IP is a proxy and lower its anonymity.
BUT I want to say that this is not the case, most of these IP addresses are just "web admin panel of the router". If it were possible to make proxies so easily through such "admins", they would be made in millions, if desired, you can check it yourself.***