A Proxy Takedown Is Not a Security Control
Proxy-network enforcement can reduce supply and protect device owners. Your application still needs current intelligence, behaviour correlation, route-specific controls, and measured request decisions.
When a Proxy Network Dies but Its IPs Survive
A proxy takedown can erase a brand without removing all of its former exit addresses. Here is what post-takedown IP overlap proves, what it cannot prove, and the sourcing evidence buyers should demand.
IPIDEA and NetNut: What Two Residential Proxy Takedowns Actually Changed
Google's 2026 actions against IPIDEA and NetNut disrupted control infrastructure, applications and commercial supply. They did not make residential traffic safe by default.
When Home Devices Become Attack Infrastructure
Application teams cannot clean compromised televisions, routers, or household devices. They can stop treating the residential address as proof and control what the relayed request is allowed to do.
Residential Proxies Turn Layer 7 DDoS Into a Route Problem
A distributed pool can keep each residential IP quiet while expensive application routes fail. Mitigation has to follow request cost and behaviour, not only traffic volume.
Five Routes, Five Residential Proxy Decisions
Account creation, login, password reset, checkout, and public APIs should not share one residential-proxy action. Each route needs its own evidence and failure policy.
Privacy Relay, Corporate VPN, or Residential Proxy?
An anonymised connection is not automatically abusive. Security policy should distinguish expected privacy and corporate access from proxy use that appears beside risky behaviour.
What a Residential Proxy Decision Log Should Contain
A useful proxy event records the request, signal provenance, policy, action, and outcome. A timestamp and a risk score are not enough to explain an enforcement decision.
Keep Your CDN. Add Proxy and Bot Decisions at the Edge.
Replacing a CDN is not the only way to improve bot and proxy controls. The harder requirement is preserving trusted client context, enforceable policy, and decision evidence across the request path.
Credential Stuffing Through “Clean” Residential IPs
A residential IP with no bad reputation can still carry a credential-stuffing attempt. Defend the login workflow by joining credential, route, client, and outcome evidence.
The IP Changed. Did the Actor?
Residential proxy rotation defeats IP-only counters. The answer is not a new identity claim, but a carefully chosen set of cohort, account, route, and outcome keys.
Residential Proxy Detection for APIs Without JavaScript
APIs cannot depend on browser JavaScript to expose proxy abuse. They need server-side network, protocol, identity, route, and outcome evidence in the request path.
A Proxy Flag Is Not a Security Policy
Residential proxy detection is useful evidence. The security decision still has to account for the route, credentials, client history, behaviour, and cost of getting the action wrong.
How Bandwidth Sharing Feeds Residential Proxy Networks
Residential proxy capacity can come from bandwidth-sharing apps, monetisation SDKs, compromised servers, and pre-infected consumer devices. Here is why consent and a residential IP are not enough to establish trust.
How to Protect APIs From Unwanted Automation
An API cannot simply block automation. The practical job is to decide which automated use belongs on each route, then control the rest without breaking legitimate clients.
The Real Cost of Breached Credentials
Breached credentials keep creating cost after the original breach. They feed credential stuffing, account takeover, fraud, support, and reputation costs across login, recovery, checkout, and API flows.
How Residential Proxies Changed API and Account Abuse
Residential proxies have changed account abuse from obvious bursts into distributed, low-noise workflows across login, account, and API routes. Treat proxy use as a risk signal, not a blunt block rule.
Anatomy of a Credential Stuffing Attack
A deep dive into how credential stuffing attacks work, the tools used, and how to build a multi-layered defense.
Beyond the IP Address
Discover why traditional IP-based rate limiting is obsolete and how advanced techniques provide robust protection against modern distributed attacks.
The Invisibility Cloak
Residential proxies change the network path while anti-detect browsers change the client presentation. Detection works by finding inconsistencies across the request, not by treating either signal as identity.
Key Considerations for Effective Bot Management
With nearly half of all internet traffic being automated, a robust bot management strategy is essential. This article explores the key considerations for effective bot detection, classification, and response in the face of evolving threats.
The Bot Spectrum
Learn to classify bots into good, bad, and grey categories and apply the right management strategy for each.
SMS Pumping Fraud: How Verification Traffic Inflates the Bill
SMS pumping turns verification endpoints into billable traffic. Trace the delivery chain, measure abnormal sends and stop expensive requests before the provider charge lands.
Why We Can't Trust IP Addresses
The proliferation of residential proxy networks has undermined traditional IP-based security, enabling attackers to bypass protection measures while appearing as legitimate users.
Did Residential Proxies enable a $600 Billion loss?
How residential proxy networks may have enabled DeepSeek to bypass AI platform protections, leading to Nvidia's historic market value loss
How Bots Are Corrupting Your A/B Testing Data
Understand the impact of bot traffic on A/B testing results and learn how to protect your optimization efforts
How MTU Fingerprinting Identifies VPNs and Mobile Users
Infer an apparent path MTU from TCP handshake data, compare it with common tunnel overheads and use it as one bounded network-path signal.
The Hidden Cost of Click Fraud
Click fraud drains marketing budgets and corrupts campaign data. Learn how bots and residential proxies impact your ad spend and marketing strategy.
Residential Proxies - The Growing Threat to Ad Campaigns
Learn how distributed bot networks using residential IPs are evolving to evade traditional fraud detection
Your Anti-Fraud Residential Proxy Detection Sucks
Your anti fraud IP Intelligence service is no longer fit for purpose. Learn about the challenges in detecting residential proxies and why traditional methods don't work.
The Australian epidemic of Account Takeover attacks
An in-depth look at the growing threat of credential stuffing attacks on Australian businesses, including recent case studies, defense challenges, and practical recommendations.
The Challenge of Proxy Detection
Examine why current security solutions fail to detect and mitigate threats from residential proxies, and the need for comprehensive protection strategies.
Quantifying The Residential Proxy Threat
Explore the complexities of residential proxy detection and its impact on organisational risk, with a focus on quantifying the threat and reframing security approaches.
The Cost of Credential Stuffing
Explore how credential stuffing attacks and account takeovers affect business reputation and customer trust.
2024 Survey Insights
Our 2024 survey of Australian CISOs and CTOs looks at how businesses are approaching account protection, particularly credential stuffing and residential proxies.
2024 Survey Insights
Survey data from Australian CISOs and CTOs shows broad MFA adoption, lower bot protection uptake, and early attention on residential proxy detection for credential stuffing and account takeover risk.
Application Security Beyond MFA
MFA helps, but it does not stop social engineering, residential proxy abuse, credential stuffing, or session risk on its own.
Rate Limiting for API Security
How advanced rate limiting protects modern applications and APIs from sophisticated threats including proxy networks, distributed attacks, and automated abuse in enterprise security environments.
Web scraping another Business' website
Scraping competitor websites is a common practice, but is it legal? Read on to find out.
ZDNS - scan the entire internet
Details the use of ZDNS, a high-performance DNS toolkit, to create a comprehensive Reverse DNS (rDNS) lookup database by scanning the entire internet, and how randomizing the IP space overcomes UDP timeout issues.
The Rise of the Dragon
Residential proxy malware, and its implications for traditional cybersecurity measures, emphasising the need for evolving threat detection and mitigation strategies.
Where Residential Proxies Fit in MITRE ATT&CK
MITRE ATT&CK technique T1090 covers adversary proxying for command and control. It does not turn every case of residential proxy abuse into an ATT&CK technique.
Residential Proxy Detection
A practical entry point to residential proxy supply, detection, policy and current research for security and fraud teams.
When Bots Break Bad
Even 'good' bots can end up abusing your site and impacting performance, learn why and how to stop it.
Double MAD?
This article explores the use of Double Median Absolute Deviation (Double MAD) for anomaly detection in time series data, particularly in skewed or non-symmetric distributions.
Efficiently Generating and Printing All IPv4 Addresses in a Random Order
Explains how to efficiently generate all IPv4 addresses in a random order using a Linear Congruential Generator (LCG), a memory-efficient method for tasks like security testing and network simulation.
Origin shield
Origin shield is a CDN must have feature that increases your Cache Hit Rate by consolidating requests from POPs.
Fastly Outage
Fastly, a major CDN provider, had a global outage last night which affected some of the world's largest websites and internet services. Why didn't they have a backup plan?
Setting Up A Chia Hobby Farm
Chia is a new blockchain aiming to one up Bitcoin that's taking the crypto world by storm. We decided to jump on the bandwagon.
Why Manage Bots?
Comprehensive guide to enterprise bot management and advanced countermeasures for protecting applications against sophisticated malicious bot threats. Learn proven strategies for bot detection, mitigation, and automated defence systems.
Malicious Bot Threats
Comprehensive analysis of malicious bot threats targeting modern applications and APIs. Learn how enterprise bot management protects against automated attacks, credential stuffing, price scraping, and sophisticated bot-driven financial damage.