HOW in the HELL did they FIND me?

Chilly8 · 2008-01-10T23:26:08+00:00

X-No-Archive: YesMy proxy was found by script-kiddies, using port scanning, and isnow in a lot of public proxy lists. While I advertise my proxyon my web site, I took great care to keep it OFF the myriadof public proxy lists, so I would not show up in any proxyblacklists. I thought that by keeping my proxy AWAYfrom ports 80, 81, 1080, 3128, 8000, 8080, 8081, 8118,or 9050, someone using proxy scanner would NOT find myproxy. I always thought that the hacker toolz for that scannedfor open proxies would ONLY use those afforementionedports, and proxies on ports other than those, would NOT befound by the script kiddies.In the past hour or so, since my proxy appeared in someof the major lists, my server is been JUMPING withconnections to my proxy, and many of them fromcorporate addresses ALL OVER the United Statesand Canada. From just ONE workplace, there havebeen DOZENS of connections going to my Tor entryproxy. I had 14 workers are one company, in NewHampshire, connecting to my proxy at once. This onecompany in NH that has a subscription online gamingservice has 6 active connections to my proxy right now,as I am writing this. And these are INCOMING connectionsfrom their network into my proxy. Since its a Tor proxy,I don't know where the go beyond my machine, sinceI am only a Tor entry proxy, which allows people from anyenvironment, where the machines are locked down, tobe able to get onto the Tor network, without having touse the software. Anybody with an always-on connectioncan do this. You just simply install the Tor software, andconfigure it to be publicly accessible from anywhere inthe world, and, voila!, you have an entry point onto theTor network, allowing people to use Tor, without havingto install the software.I cannot figure out how my proxy could be found throughscanning toolz, which I specifically keep it OFF theports that proxies typically use, so that I will NOT be scanned,and appear in any of the proxy lists.

Jan 10, 2008 24 Replies

Rate this thread:

Jens Hoffmann 18 years ago

Again assumptions from your side. Wanna bet, if these are any better than the one about how to find a proxy?

Then see to it, that it is not accessible. If you can't control your equipment properly, don't blame anyone else or the unfairness of the universe or whatever.

Vote

Jens Hoffmann 18 years ago

Plain gibberish. What do you want to say?

Vote

Chilly8 18 years ago

X-No-Archive: Yes

Keeping my proxies turned off seems to be working. I periodically turn it on to see how many connections come in, and I got nothing on either HTTP proxy, and very little on the Socks proxy, so my server address is starting to dissapper from the proxy lists, which means that I will get removed from any commercial proxy blacklists I might have gotten on, soon after, when my proxy is tested, and they do not find anything there.

Vote

Jens Hoffmann 18 years ago

You are doing IT like they do VooDoo.

It doesn't occur to you, that endusers are compiling public proxy lists into their own favorites, removing not really working proxies much faster than any blocker would do?

Secdondly: The endusers of open proxies do not use blocking lists to find open proxies, but public proxy lists.

So you are measuring at the wrong end of the causality chain.

Cheers, Jens

Vote