News for hackers. Stuff that matters.
Re:911 Proxy Service Implodes After Disclosing Breach by donkarma on Friday July 29, 2022 @04:37PM (#32281477)
For the unprepared this is a website commonly used by credit card fraudsters to imitate an IP address close to the card's address
Re:911 Proxy Service Implodes After Disclosing Breach by walrus01 on Friday July 29, 2022 @05:17PM (#32281872)
Google "residential proxies for sale" for the tip of a shit laden shady black market iceberg
Re:911 Proxy Service Implodes After Disclosing Breach by rubatuga on Friday July 29, 2022 @05:47PM (#32282145)
Also called sneaker proxies. Why? Used to bypass restrictions or limits on buying sneakers/shoes online.
Re:911 Proxy Service Implodes After Disclosing Breach by mousetree on Friday July 29, 2022 @05:40PM (#32282083)
Does anyone know of a service that can be used to determine whether an IP has been associated/used by one of these proxy services? It would benefit my company to be able to detect these types of fraudsters
Re:911 Proxy Service Implodes After Disclosing Breach by wyattwest on Friday July 29, 2022 @06:11PM (#32282355)
Hi! Here at Spur, this is our mission exactly. As another commenter correctly noted, proxy endpoint data - especially those of residential or "callback" proxies like 911 - is highly ephemeral. Our company provides near-real time tracking for many residential & datacenter proxy services, as well as VPNs.

Check us out at https://spur.us

Re:911 Proxy Service Implodes After Disclosing Breach by imiric on Saturday July 30, 2022 @04:51AM (#32285321)
You don't really explain it in your marketing copy, but how do you detect residential proxies?

You say it yourself:

> Residential proxies can be impossible to detect.

The appeal of residential proxies is that the traffic comes from legitimate user networks. So how do you detect malicious usage there?

Moreover, it must be a game of whack-a-mole to keep your lists updated, as these services pop up all the time.

Re:911 Proxy Service Implodes After Disclosing Breach by bathory on Friday July 29, 2022 @09:02PM (#32283358)
Hi!

Very interesting service, but sadly I cannot sign up for a trial, due to not possessing a US telephone number, which for some reason is required. That said I am a researcher at an Internet measurement and security group. Any chances for a cooperation?

Re:911 Proxy Service Implodes After Disclosing Breach by wyattwest on Friday July 29, 2022 @10:42PM (#32283844)
Hey there, thanks for your interest. Email us at support + our domain and we can get you set up.
Re:911 Proxy Service Implodes After Disclosing Breach by vorpalhex on Friday July 29, 2022 @08:52PM (#32283310)
Your pricing is very unlisted and gated behind a sales team. Would you mind dropping some ballparks for us?
Re:911 Proxy Service Implodes After Disclosing Breach by bathory on Friday July 29, 2022 @09:04PM (#32283373)
I saw some indication at the bottom of this page: https://spur.us/products/context-api
Re:911 Proxy Service Implodes After Disclosing Breach by ronnier on Friday July 29, 2022 @11:05PM (#32283940)
Why does spur treat MTN mobile service in Nigeria as a proxy? https://www.mtn.ng/
Re:911 Proxy Service Implodes After Disclosing Breach by nightpool on Friday July 29, 2022 @05:50PM (#32282180)
since these proxy services are created by hijacking legitimate users' computers and internet connections, I would imagine any such list would be quickly out of date. Based on their marketing information, at least hundreds of new computers were added to their network each day.
Re:911 Proxy Service Implodes After Disclosing Breach by charcircuit on Friday July 29, 2022 @06:31PM (#32282487)
The whole point of these services is to buy proxies that are not on a list.
Re:911 Proxy Service Implodes After Disclosing Breach by RockRobotRock on Friday July 29, 2022 @06:27PM (#32282461)
My first thought is, "Why would it benefit your company, unless you were dealing with payments directly?," and then I read your comment history and it all makes sense now, haha.

Honestly, for assessing risk of individual users, my worry is that the only good option right now is to use tools that require lots of data on the user, like recaptcha v3. You could set up a honeypot that tries to catch as many IP addresses implicated in proxy activity as possible. Maybe that second one would be a good company idea.

Re:911 Proxy Service Implodes After Disclosing Breach by vatican_banker on Friday July 29, 2022 @08:48PM (#32283284)
I know at least two:

1. SEON: https://seon.io/

2.IPQS: https://www.ipqualityscore.com/

Re:911 Proxy Service Implodes After Disclosing Breach by alam2000 on Saturday July 30, 2022 @02:41AM (#32284838)
Re:911 Proxy Service Implodes After Disclosing Breach by neilv on Friday July 29, 2022 @08:01PM (#32283038)
Thanks for the info. I don't know the full story behind any particular residential IP proxy service, but I'd previously decided not to use any of them for a startup's purposes.

As I explained to my colleagues, I wouldn't be able to determine, with confidence, which of the services were 100% legit, and which weren't. We didn't want to accidentally get involved with questionably-obtained residential IPs, etc. That would've been antithetical to our business, and also just not how we operate in general.

(The startup provided solutions in the supply chain integrity space. Part of the technology included bespoke Web scraping, to monitor certain venues for naughtiness scale and patterns over time. Because venues were around the world, and because venues had complicating incentives regarding some of the questionable third-party activity in the venue... I wanted the delicate scraping to look similar to normal consumer users who were in the geopolitical region served by the venue. Instead of a residential IP service, I used an (undisclosed) different, impeccable approach, which won't work for all use cases, but did for ours.)

Re:911 Proxy Service Implodes After Disclosing Breach by Scoundreller on Friday July 29, 2022 @08:58PM (#32283334)
> Instead of a residential IP service, I used an (undisclosed) different, impeccable approach, which won't work for all use cases, but did for ours

3G/LTE because all mobile providers use CG-NAT?

(I also discovered that my old DSL ISP accepted its dialup provider's credentials for PPPoE). Best part about PPPoE is that you can run multiple sessions over the same line/modem.