Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
Rasbora
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
7 ms
·
1.
▲
Residential proxies scraping your site? Drain their bandwidth
(layer3intel.com)
19 points
by
Rasbora
25d ago
|
1 comments
2.
▲
Measuring the NetNut takedown: 28% of its IPs are still reachable on Bright Data
(layer3intel.com)
2 points
by
Rasbora
2mo ago
|
0 comments
3.
▲
by
Rasbora
3mo ago
Solutions exist specifically for detecting residential proxy traffic: https://layer3intel.com/tripwire You can also check if your network is running a residential proxy exit node here: https://layer3intel.com
4.
▲
by
Rasbora
6mo ago
TLS fingerprinting is not sufficient to stop residential proxies, the proxy acts as a transparent pass-through at the TLS layer making it trivial to use something like curl_cffi to mimic a real browser TLS fingerprint. However residential p
5.
▲
by
Rasbora
8mo ago
I've helped multiple people remove residential proxy malware that was turning their network into a brightdata exit node and they had no idea / did not consent to it. Why is google selectively targeting one provider while letting o
6.
▲
by
Rasbora
9mo ago
This is the core concept of how proxies are detected via services like https://layer3intel.com/tripwire or https://spur.us/monocle/ The difference in min TCP RTT and min RTT to respond to a websocket p
7.
▲
by
Rasbora
11mo ago
Solutions exist that can completely block credential stuffing attacks most people just don't know about them, for example: https://layer3intel.com/tripwire
8.
▲
Is my network a residential proxy?
(layer3intel.com)
4 points
by
Rasbora
1y ago
|
1 comments
9.
▲
by
Rasbora
2y ago
Back in the day I would scan for DrDoS reflectors in a similar way, no hosting provider wants to get reports for port scanning so the source address of the scan would belong to an innocent cloud provider with a reputable IP that reflectors
10.
▲
by
Rasbora
4y ago
Whenever I see the name Marek Majkowski come up, I know the blog post is going to be good. I had to solve this exact problem a year ago when attempting to build an anycast forward proxy, quickly came to the conclusion that it'd be impo
11.
▲
by
Rasbora
4y ago
There are dozens of us!
12.
▲
by
Rasbora
4y ago
I had an almost identical idea to this website a while ago but never acted on it, props to the dev. Here is how you win the IPv4 games, in order of most to least effective: 1) Have a large online following that is willing to visit your clai
13.
▲
by
Rasbora
4y ago
Coming for your crown >:D
14.
▲
by
Rasbora
4y ago
I would agree with you, however please take a look at a statement from CloudFlare earlier today: https://news.ycombinator.com/item?id=32707821 "Our decision today was that the risk created by the content could not be d
15.
▲
I ran the worlds largest DDoS-for-Hire empire and Cloudflare helped
(rasbora.dev)
359 points
by
Rasbora
4y ago
|
228 comments
16.
▲
by
Rasbora
4y ago
If you're going to post a thread like this, leave an avenue for people to get in contact with you...
17.
▲
by
Rasbora
4y ago
I am here to answer your prayers: https://rasbora.dev/blog/detecting-residential-proxy-network... While my tool is just a proof of concept, it can easily be scaled up to run checks on a sign up form to prevent bad acto
18.
▲
by
Rasbora
4y ago
Should have taken the plea, speaking from experience lol.
19.
▲
by
Rasbora
4y ago
I wrote a blog post about this exact problem half a year ago, specifically going into detail about the proxy networks scalpers use, and how to detect them: https://rasbora.dev/blog/detecting-residential-proxy-network...