anyproxy.net

Screenshot of the site before it was taken offline

Description

Anyproxy.net was an illegal proxy service that sold access to over 7,000 hacked routers infected with malware, primarily through the TheMoon botnet. Operating for nearly two decades, the site offered proxy access via subscription—ranging from $9.95 to $110/month—allowing users to hide malicious activity behind residential IP addresses.

In May 2025, the site was dismantled in a global law enforcement operation led by the FBI and Dutch authorities. Four individuals (three Russian, one Kazakhstani) were charged with computer crimes and domain fraud. The operation, dubbed Moonlander, shut down both Anyproxy.net and 5socks.net, which together had earned over $46 million in illicit revenue.

seized message

Original AnyProxy seizure banner