Proxy Report

This report detects proxy servers, which are commonly used to make malicious activity seem anonymous.

A common use of drones is to turn them into proxy servers to add anonymity to other activity, such as more direct hacking, accessing forums, or even sending spam.

Fields

  • Date
    Date of the IP being seen in UTC+0
  • Time
    Time of the IP being seen in UTC+0
  • C&C
    The Command and Control that created the proxy
  • C&C Port
    IRC port of the C&C
  • C&C ASN
    ASN where the C&C IP resides
  • C&C Geo
    Country where the C&C IP resides
  • C&C DNS
    Reverse DNS of the C&C IP
  • PXY
    IP of the device set up as a proxy server
  • PXY ASN
    ASN of the IP of the proxy server
  • PXY Geo
    Country of the proxy server
  • PXY DNS
    Reverse DNS of the IP of the proxy server
  • PXY Port
    Port setup for proxy usage
  • Password
    Password for the proxy server

Sample

"Date","Time","C&C","C&C Port","C&C ASN","C&C Geo","C&C DNS","PXY","PXY ASN","PXY Geo","PXY DNS","PXY Port","Password"
"2008-11-03","22:00:27","81.88.53.122",7000,39729,"IT","host-81-88-53-122.dedicatedservers.it","192.168.1.100","","-","",8001,""
"2008-11-03","22:00:27","81.88.53.122",7000,39729,"IT","host-81-88-53-122.dedicatedservers.it","190.72.240.6",8048,"VE","190-72-240-6.dyn.dsl.cantv.net",8001,""
"2008-11-03","22:00:27","81.88.53.122",7000,39729,"IT","host-81-88-53-122.dedicatedservers.it","201.51.32.9",7738,"BR","20151032009.user.veloxzone.com.br",8001,""

Our 73 Report Types