IP Reputation Laundering

Residential proxy networks have become very popular ways for bad guys to launder their illicit activities through our normal home network traffic. By mixing in their traffic with ours, they are able to use (and abuse) the good reputation of our home IP address. Many of us have unwittingly allowed this to happen by using cheap streaming boxes or installing shady apps on our smart TVs. Today we’ll discuss residential proxies and botnets with Dan Goodin, Senior Security Editor at Ars Technica.

Interview Notes

• Dan Goodin: https://arstechnica.com/author/dan-goodin/ 
• Dan on router security: https://arstechnica.com/security/2026/07/the-us-government-warns-that-russia-state-hackers-are-coming-after-your-router/ 
• Brian Krebs story: https://krebsonsecurity.com/2026/06/popa-botnet-linked-to-publicly-traded-israeli-firm/ 
• Greynoise IP reputation: https://check.labs.greynoise.io/ 
• OpenWRT: https://openwrt.org/docs/start 
• Shields Up!: https://www.grc.com/shieldsup 

Further Info

• My book: https://fdsd.me/book 
• My newsletter: https://fdsd.me/newsletter 
• Support the mission: https://fdsd.me/support 
• Give the gift of privacy and security: https://fdsd.me/coupons 
• Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

• 0:00:16: Intro
• 0:02:03: Lingo
• 0:05:01: How did you get into security?
• 0:08:59: What is a residential proxy?
• 0:15:08: Who’s behind these proxy networks?
• 0:19:12: What is a botnet?
• 0:22:03: How are home devices compromised?
• 0:30:01: Can I be liable for proxied attacks?
• 0:33:00: How do you take down a botnet?
• 0:39:12: Should the gov’t unhack our devices?
• 0:43:03: Can we detect proxy devices?
• 0:47:43: Wrap-up
• 0:53:28: Patron podcast preview
• 0:53:47: Looking ahead