3 ms·
They literally proxy your website? I thought they'd cache it... that makes more sense now in your statement that you hit their website with a specially formatte
by WirelessGigabit 4y ago
They literally proxy your website? I thought they'd cache it... that makes more sense now in your statement that you hit their website with a specially formatted url. Since they pass that through to you you can filter on that.
Also: since you say 4k-5k IPs... any of them from cloud providers? And specific location?
- santah 4y agoNo cloud providers as far as I'm aware. They were all from the same 4-5 ASN networks, all based in Russia.
- justsomehnguy 4y agoResidential proxy botnet.
- tofuahdude 4y agoWhy do they bother doing this domain proxy stuff in the first place?
- justsomehnguy 4y agoHigh quality content with a good standing in Google => unique and quality impressions => more revenue from the ads they insert in the content.
- _siis 4y agoThere is also the potential to use it as a watering hole for more sophisticated or subversive measures where they subtly change what you post to promote something you don't actually promote (so at some point they deviate from pure proxy to mitm).
- adventured 4y agoIf you happen to use Cloudflare.... Cloudflare -> Firewall rules -> Russia JS Challenge (or block)