This isn't a theoretical problem either. My employer's website was being hammered by residential proxies a month ago. It wasn't until we setup WAF captcha rules that they mostly subsided. It wasn't even the typical exploit scanner. I don't know what the purpose was but it was effectively a DDoS.
replyEveryone's is. Far as anyone can tell, it's probably AI companies.
replyIt wasn't any sensible AI scraper. It kept requesting the same pages a thousand times over.
replyYep that's what AI scrapers do
replyI was expecting that VPN’s (maybe not all) also use their own customers as relays, but you don’t mention them. Am I wrong?
replyIt's definitely not all VPNs (typically the ones you pay for will buy their own hardware and internet connections in the places you can route your traffic through), but it is a common situation for the shadier (especially 'free') ones, and in that case it's usually not just a peer-to-peer thing, they make money by selling your connection to people who pay because they want a large pool of relatively reputable and disconnected IPs to send traffic through.
replyYou're right, a lot of 'free VPN' software also uses your own internet as a residential proxy. It's often mentioned in the ToS but the users don't read that.
replyHonestly, I expect any of those free VPN services that require an app install to be doing precisely this. At this point, I just assume anything with "free" in it will cost me more than if I just paid for something instead.
replyI'm surprised it doesn't cause more chaos, even as simple as people getting copyright infringement notices from their ISP?
replyThat kind of VPN is considered a residential proxy.
replydeleted
reply