分享一个苹果风控反向检测代理 IP 是否是家庭宽带 ISP

[applephper]

原理大概就是用户访问请求头语言含有中文，但是代理 IP 又是他确定的美国家庭 IP ，就会 503 拦截，改成英文返回 302 就正常。

curl -s -D - -o NUL "https://idmsa.apple.com/appleauth/auth/federate?isRememberMeEnabled=true" -H "Accept-Language: zh-CN,zh;q=0.9"

curl -s -D - -o NUL "https://idmsa.apple.com/appleauth/auth/federate?isRememberMeEnabled=true" -H "Accept-Language: en-US,en;q=0.9"

[zhouu]

试了没区别，ATT 的宽带，都是 302

[dingdangnao]

@zhouu +1 没区别
用了好几台机器试了，都没区别。

[pingdog]

pot@us-lax-node21:~$ curl -s -D - -o NUL "https://idmsa.apple.com/appleauth/auth/federate?isRememberMeEnabled=true" -H "Accept-Language: zh-CN,zh;q=0.9"
HTTP/1.1 302
Server: Apple
Date: Thu, 21 May 2026 05:08:50 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 0
Connection: keep-alive



pot@us-lax-node21:~$ curl -s -D - -o NUL "https://idmsa.apple.com/appleauth/auth/federate?isRememberMeEnabled=true" -H "Accept-Language: en-US,en;q=0.9"
HTTP/1.1 302
Server: Apple
Date: Thu, 21 May 2026 05:09:08 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 0
Connection: keep-alive


机房 ip