Why Choose This Project

With increasing reliance on web applications and APIs, it’s crucial to know whether users are accessing services directly or via proxy servers, VPNs, or anonymizers. Malicious actors often use proxies to bypass security, perform fraud, or scrape content. This project detects access sources in real time, distinguishing between direct connections and proxied traffic, helping organizations enhance security, enforce geo-restrictions, and prevent abuse.

What You Get

• A web-based tool to identify if requests originate from proxies, VPNs, or anonymizers.

• Detection of IP, ISP, and geographical discrepancies.

• Real-time alerts and logging for suspicious proxy access.

• Dashboard to visualize direct vs proxied traffic trends.

• API integration for applications to enforce access policies based on connection type.

Key Features

Technology Stack

Frontend Layer

• HTML, CSS, JavaScript

• Bootstrap for responsive UI

• Optional: React.js for dynamic dashboards

Backend Layer

• Node.js (Express) / Java Spring Boot / Python Flask

• Handles IP lookup, proxy/VPN detection, logging, and alerts

Database Layer

• MongoDB / MySQL / PostgreSQL for storing access logs and detection history

Security Layer

• HTTPS for secure dashboard access

• JWT / OAuth2 for admin authentication

Optional Libraries & APIs

• IP geolocation API (IPinfo, MaxMind GeoIP)

• Proxy detection API or libraries (proxy-checker for Node.js, python-requests + proxy DB)

• Email/SMS API (Nodemailer, Twilio) for alerts

• Cron jobs for scheduled IP validation

Working Flow

1. Incoming Request Detection

   • Capture the client IP, headers, and connection details.

2. Proxy & VPN Analysis

   • Check against known proxy/VPN databases.

   • Inspect headers like X-Forwarded-For, Via, and Client-IP.

3. Geolocation Verification

   • Compare IP-based location with user-declared location or session data.

4. Alert Generation

   • Trigger notifications when proxy, VPN, or anonymizer use is detected.

5. Logging & Dashboard

   • Record all direct and proxied access attempts.

   • Visualize trends and percentages of direct vs proxied traffic.

Main Modules

• Access Capture Module → Detect incoming requests and capture IP/header data

• Proxy/VPN Detection Module → Validate IP against proxy/VPN lists

• Geolocation Module → Map IP to physical location

• Alert Module → Notify admin for suspicious proxy/VPN access

• Dashboard Module → Display trends, logs, and stats

• API Module → Provide detection results for external applications

Security Features

• Admin authentication with JWT/OAuth2

• HTTPS-secured dashboard and API endpoints

• Real-time alerting for suspicious or proxied connections

• Logs stored securely for audit and compliance

• Configurable access rules based on detection (block, warn, or allow)