For detection, threat intelligence, anti-abuse, fraud, and network defense teams

What you’ll learn in this technical briefing

Static ISP proxies sit between residential and datacenter infrastructure, giving attackers stable IP persistence and high reputation scores while continuing to appear as legitimate broadband traffic.

In this session, Spur co-founder Riley Kilmer and research director Sean Simmons break down how these networks are sourced, classified, and operationalized across fraud, account takeover, scraping, and evasive automation.

■ How static ISP providers source and advertise broadband IP space
■ Operational differences between residential, mobile, datacenter, and static ISP proxies
■ Infrastructure patterns, ASN anomalies, and behavioral indicators defenders should monitor
■ Why many reputation systems incorrectly classify these networks as low risk