GeoComply Expands VPN ‘Piracy’ Detection By Blocking Residential IP-Addresses

VPN detection service GeoComply helps rightsholders and streaming platforms ban so-called 'geo pirates', users who bypass geographical restrictions using online tools. Because some VPN providers use residential IP addresses to circumvent such restrictions, GeoComply is now blocking these as well. The company bills it as a revolutionary technology, but there might be a major downside too.

geoguardVPN services are a useful tool to protect internet users’ online privacy. In addition, they can also help to bypass geographical restrictions.

The latter can be helpful if people want to access the content library of a streaming service in another country. While this often goes against the terms of service, some VPNs openly advertise this feature.

Blocking Geo-Pirates
This ‘geo piracy’ issue isn’t new. Netflix famously started blocking VPN users for this very reason seven years ago and other streaming providers have taken similar measures. These countermeasures are effective but far from perfect.

There are various ways VPN services have managed to circumvent these blocking efforts. Most keep the technical details private, but it’s commonly known that some are using residential IP addresses as proxies, to make it look like VPN users are regular ISP subscribers.

These residential IP addresses are used to establish the connection with the streaming service and because they are typically not associated with a VPN, they can effectively bypass traditional blocklists.

GeoComply Blocks Residential IPs
Rightsholders and streaming providers are aware of this trick, but it’s hard to do anything about it. This week, however, cybersecurity and VPN detection service GeoComply offered a solution. The company announced an “industry-first technology” for streaming providers that “tightens the net around pirate viewers.”

“The new technology enhancement to GeoGuard allows streaming providers to block the growing number of VPN users who spoof their location using hijacked residential IP addresses,” the company writes in a press release.

GeoComply uses the term “hijacked” IP addresses, which deserves some nuance. In reality, these addresses often belong to users of free VPNs or proxies who allow their connections to be resold to third parties. This reselling right is often hidden in the fine print of terms of service agreements, which most people don’t read.

“Free VPN providers profit by selling hijacked residential IP addresses to the highest bidder, usually a provider of ‘undetectable’ premium VPN services. These services give subscribers the ability to spoof their location using the hijacked addresses,” GeoComply notes.

For example, users of the free Hola VPN service agree to have their connections used by Bright Data, which offers access to residential IP addresses to third parties. This has been going on for several years already but most users are simply not aware of it.

GeoComply reports that its GeoGuard service can now spot these ‘hijacked’ residential IP addresses, which should make it harder for VPN services to evade blocking measures.

“To combat this problem, we can now accurately detect users accessing streaming services using hijacked residential IP addresses to help uphold the territorial licensing models our customers depend on,” GeoComply’s James Clark says.

Overblocking?
According to GeoComply, an estimated 200 million internet users are the “victim of residential proxy IP abuse.” That implies that there’s a huge market for its new blocking capability but there are also downsides to consider.

Blocking residential IP addresses means that the unknowing ‘victims’ can also find themselves blocked by streaming services, even though they’re not doing anything wrong. This is what we previously saw when Netflix expanded its VPN blocking capability too far.

TorrentFreak reached out to GeoComply to hear the company’s thoughts on this overblocking potential and how this can be ruled out. At the time of publication we’re still waiting for more details.

It’s clear, however, that GeoComply takes VPN blocking very seriously. In addition to rolling out these new blocking capabilities, the company recently petitioned the US Government to make VPN detection tools a mandatory copyright protection measure under the DMCA.