5 ms·

For the unprepared this is a website commonly used by credit card fraudsters to imitate an IP address close to the card's address

mousetree 4y ago
Does anyone know of a service that can be used to determine whether an IP has been associated/used by one of these proxy services? It would benefit my company to be able to detect these types of fraudsters
- nightpool 4y ago
  since these proxy services are created by hijacking legitimate users' computers and internet connections, I would imagine any such list would be quickly out of date. Based on their marketing information, at least hundreds of new computers were added to their network each day.
- wyattwest 4y ago
  Hi! Here at Spur, this is our mission exactly. As another commenter correctly noted, proxy endpoint data - especially those of residential or "callback" proxies like 911 - is highly ephemeral. Our company provides near-real time tracking for many residential & datacenter proxy services, as well as VPNs. Check us out at https://spur.us https://spur.us
  - vorpalhex 4y ago
    Your pricing is very unlisted and gated behind a sales team. Would you mind dropping some ballparks for us?
    - bathory 4y ago
      I saw some indication at the bottom of this page: https://spur.us/products/context-api https://spur.us/products/context-api
  - bathory 4y ago
    Hi! Very interesting service, but sadly I cannot sign up for a trial, due to not possessing a US telephone number, which for some reason is required. That said I am a researcher at an Internet measurement and security group. Any chances for a cooperation?
    - wyattwest 4y ago
      Hey there, thanks for your interest. Email us at support + our domain and we can get you set up.
  - ronnier 4y ago
    Why does spur treat MTN mobile service in Nigeria as a proxy? https://www.mtn.ng/ https://www.mtn.ng/
  - imiric 4y ago
    You don't really explain it in your marketing copy, but how do you detect residential proxies? You say it yourself: > Residential proxies can be impossible to detect. The appeal of residential proxies is that the traffic comes from legitimate user networks. So how do you detect malicious usage there? Moreover, it must be a game of whack-a-mole to keep your lists updated, as these services pop up all the time.
- RockRobotRock 4y ago
  My first thought is, "Why would it benefit your company, unless you were dealing with payments directly?," and then I read your comment history and it all makes sense now, haha. Honestly, for assessing risk of individual users, my worry is that the only good option right now is to use tools that require lots of data on the user, like recaptcha v3. You could set up a honeypot that tries to catch as many IP addresses implicated in proxy activity as possible. Maybe that second one would be a good company idea.
- charcircuit 4y ago
  The whole point of these services is to buy proxies that are not on a list.
- vatican_banker 4y ago
  I know at least two: 1. SEON: https://seon.io/ https://seon.io/ 2.IPQS: https://www.ipqualityscore.com/ https://www.ipqualityscore.com/
- alam2000 4y ago
walrus01 4y ago
Google "residential proxies for sale" for the tip of a shit laden shady black market iceberg
- rubatuga 4y ago
  Also called sneaker proxies. Why? Used to bypass restrictions or limits on buying sneakers/shoes online.
neilv 4y ago
Thanks for the info. I don't know the full story behind any particular residential IP proxy service, but I'd previously decided not to use any of them for a startup's purposes. As I explained to my colleagues, I wouldn't be able to determine, with confidence, which of the services were 100% legit, and which weren't. We didn't want to accidentally get involved with questionably-obtained residential IPs, etc. That would've been antithetical to our business, and also just not how we operate in general. (The startup provided solutions in the supply chain integrity space. Part of the technology included bespoke Web scraping, to monitor certain venues for naughtiness scale and patterns over time. Because venues were around the world, and because venues had complicating incentives regarding some of the questionable third-party activity in the venue... I wanted the delicate scraping to look similar to normal consumer users who were in the geopolitical region served by the venue. Instead of a residential IP service, I used an (undisclosed) different, impeccable approach, which won't work for all use cases, but did for ours.)
- Scoundreller 4y ago
  > Instead of a residential IP service, I used an (undisclosed) different, impeccable approach, which won't work for all use cases, but did for ours 3G/LTE because all mobile providers use CG-NAT? (I also discovered that my old DSL ISP accepted its dialup provider's credentials for PPPoE). Best part about PPPoE is that you can run multiple sessions over the same line/modem.

mousetree 4y ago

Does anyone know of a service that can be used to determine whether an IP has been associated/used by one of these proxy services? It would benefit my company to be able to detect these types of fraudsters

nightpool 4y ago
since these proxy services are created by hijacking legitimate users' computers and internet connections, I would imagine any such list would be quickly out of date. Based on their marketing information, at least hundreds of new computers were added to their network each day.
wyattwest 4y ago
Hi! Here at Spur, this is our mission exactly. As another commenter correctly noted, proxy endpoint data - especially those of residential or "callback" proxies like 911 - is highly ephemeral. Our company provides near-real time tracking for many residential & datacenter proxy services, as well as VPNs. Check us out at https://spur.us https://spur.us
- vorpalhex 4y ago
  Your pricing is very unlisted and gated behind a sales team. Would you mind dropping some ballparks for us?
  - bathory 4y ago
    I saw some indication at the bottom of this page: https://spur.us/products/context-api https://spur.us/products/context-api
- bathory 4y ago
  Hi! Very interesting service, but sadly I cannot sign up for a trial, due to not possessing a US telephone number, which for some reason is required. That said I am a researcher at an Internet measurement and security group. Any chances for a cooperation?
  - wyattwest 4y ago
    Hey there, thanks for your interest. Email us at support + our domain and we can get you set up.
- ronnier 4y ago
  Why does spur treat MTN mobile service in Nigeria as a proxy? https://www.mtn.ng/ https://www.mtn.ng/
- imiric 4y ago
  You don't really explain it in your marketing copy, but how do you detect residential proxies? You say it yourself: > Residential proxies can be impossible to detect. The appeal of residential proxies is that the traffic comes from legitimate user networks. So how do you detect malicious usage there? Moreover, it must be a game of whack-a-mole to keep your lists updated, as these services pop up all the time.
RockRobotRock 4y ago
My first thought is, "Why would it benefit your company, unless you were dealing with payments directly?," and then I read your comment history and it all makes sense now, haha. Honestly, for assessing risk of individual users, my worry is that the only good option right now is to use tools that require lots of data on the user, like recaptcha v3. You could set up a honeypot that tries to catch as many IP addresses implicated in proxy activity as possible. Maybe that second one would be a good company idea.
charcircuit 4y ago
The whole point of these services is to buy proxies that are not on a list.
vatican_banker 4y ago
I know at least two: 1. SEON: https://seon.io/ https://seon.io/ 2.IPQS: https://www.ipqualityscore.com/ https://www.ipqualityscore.com/
alam2000 4y ago

walrus01 4y ago

Google "residential proxies for sale" for the tip of a shit laden shady black market iceberg

rubatuga 4y ago
Also called sneaker proxies. Why? Used to bypass restrictions or limits on buying sneakers/shoes online.

neilv 4y ago

Thanks for the info. I don't know the full story behind any particular residential IP proxy service, but I'd previously decided not to use any of them for a startup's purposes. As I explained to my colleagues, I wouldn't be able to determine, with confidence, which of the services were 100% legit, and which weren't. We didn't want to accidentally get involved with questionably-obtained residential IPs, etc. That would've been antithetical to our business, and also just not how we operate in general. (The startup provided solutions in the supply chain integrity space. Part of the technology included bespoke Web scraping, to monitor certain venues for naughtiness scale and patterns over time. Because venues were around the world, and because venues had complicating incentives regarding some of the questionable third-party activity in the venue... I wanted the delicate scraping to look similar to normal consumer users who were in the geopolitical region served by the venue. Instead of a residential IP service, I used an (undisclosed) different, impeccable approach, which won't work for all use cases, but did for ours.)

Scoundreller 4y ago
> Instead of a residential IP service, I used an (undisclosed) different, impeccable approach, which won't work for all use cases, but did for ours 3G/LTE because all mobile providers use CG-NAT? (I also discovered that my old DSL ISP accepted its dialup provider's credentials for PPPoE). Best part about PPPoE is that you can run multiple sessions over the same line/modem.