BlackHat Proxies (BHPROXIES_PROXY)
A malware proxy service Spur tracks activity from BlackHat Proxies using the unique tag BHPROXIES_PROXY. There has been activity from BHPROXIES_PROXY in 40 distinct countries and 652 distinct ISPs. IP Addresses in use by BHPROXIES_PROXY rotate rapidly. BHPROXIES_PROXY provides anonymous network connections for customers. There is no strict "know your customer" (KYC) or abuse process for activity from BHPROXIES_PROXY. BHPROXIES_PROXY claims to not log any user activity on their service. Spur has identified 1 different protocol(s) in use by BHPROXIES_PROXY
Accepts Crypto
Customers may purchase service from BHPROXIES_PROXY using crypto or other anonymous payment methods. This may make it more difficult for BHPROXIES_PROXY to identify or prevent abuse by malicious actors.
Average User Count
Each IP provided by BHPROXIES_PROXY is used by an average of this many people. The larger the NAT and the more people using a single IP Address, the more difficult it is to prevent abuse purely by IP Address.
Total IP Count
Spur logs every active IP for BHPROXIES_PROXY at any given time, including historically.
Procols
Spur has confirmed support for the following client procols:
