News for hackers. Stuff that matters.

A comment on You don’t want to be on Cloudflare’s naughty list. Parent comment

Re:You don’t want to be on Cloudflare’s naughty list by remus on Tuesday September 20, 2022 @05:51PM (#32918289)
Say you're running an account take over script that spams login forms with a list of known username and password combos. If a website owner sees thousands of login attempts coming from a single IP address they're likely to block you to prevent abuse on their website. This is annoying for you as you then need to rotate your IP address.

Using tor hides your IP address from the website and makes switching exit nodes very straightforward, so you can run your account take over script in peace.

[ Parent | on HN ]
Re:You don’t want to be on Cloudflare’s naughty list by viraptor on Wednesday September 21, 2022 @07:50AM (#32923697)
That's not that easy in practice. There's less than 2k exits normally, not all of them usable. Your abuse script competed with other malicious traffic for those exits and their reputation gets burned pretty much immediately.

So yes, you can switch exits easily, but effectively your switching from one known bad IP to another bad IP.

[ Parent | on HN ]