News for hackers. Stuff that matters.
Re:The Web Is Broken – Botnet Part 2 by gruez on Saturday April 19, 2025 @08:47PM (#43740681)
>One is that they ofter change IP addresses during a single web session. Second, if IP come from the same proxies provider, they are often concentrated within a sing ASN, making them easier to detect.

Both are pretty easy to mitigate with a geoip database and some smart routing. One "residential proxy" vendor even has session tokens so your source IP doesn't randomly jump between each request.

Re:The Web Is Broken – Botnet Part 2 by reconnecting on Sunday April 20, 2025 @08:31AM (#43743384)
And this is the exact reason why IP addresses cannot be considered as the one and only signal for fraud prevention.