Accessible SOCKS 4/5 Proxy Report

LAST UPDATE: 2022-03-18

This report identifies hosts that have a SOCKS proxy version 4 or SOCKS proxy version 5 service running on port 1080/TCP and accessible from the Internet. The SOCKS protocol enables the exchange of packets between a client and server through a proxy server. These proxy servers can optionally support authentication.

Open proxy servers allowing proxying of services without authentication are often subject to abuse. Others, even with authentication, may also have security implications.

As with all remote access tools, care should be taken to make sure a SOCKS proxy service is configured in a secure manner and the security implications of making it accessible from anywhere on the Internet taken into account.

This report contains all SOCKS 4/5 instances found on a given network/constituency. Open SOCKS 4/5 (ie. ones that do not require any form of authentication in order to be used) are tagged with an -open suffix.

For more information on our scanning efforts, check out our Internet scanning summary page.

Filename: scan_socks

Fields

  • timestamp
    Time that the IP was probed in UTC+0
  • ip
    The IP address of the device in question
  • protocol
    Protocol that the response came on (always TCP)
  • port
    Port that the response came from (1080/TCP)
  • hostname
    Reverse DNS name of the device in question
  • tag
    Can be set to socks5, socks4, socks5-open, socks4-open
  • asn
    ASN of where the device in question resides
  • geo
    Country where the device in question resides
  • region
    State / Province / Administrative region where the device in question resides
  • city
    City in which the device in question resides
  • naics
    North American Industry Classification System Code
  • sic
    Standard Industrial Classification System Code
  • sector
    Sector to which the IP in question belongs; e.g. Communications, Commercial

Sample

"timestamp","ip","protocol","port","hostname","tag","asn","geo","region","city","naics","sic","sector"
"2022-03-17 01:15:10","154.22.x.x","tcp",1080,,"socks5",139646,"US","CALIFORNIA","SAN JOSE",517311,,
"2022-03-17 01:15:10","154.64.x.x","tcp",1080,,"socks5",139646,"US","CALIFORNIA","SAN JOSE",517311,,
"2022-03-17 01:15:11","154.64.x.x","tcp",1080,,"socks5",139646,"US","CALIFORNIA","SAN JOSE",517311,,
"2022-03-17 01:15:11","43.156.x.x","tcp",1080,,"socks5",132203,"SG","CENTRAL","SINGAPORE",,,
"2022-03-17 01:15:11","43.154.x.x","tcp",1080,,"socks5",132203,"HK","HONG KONG","HONG KONG",,,
"2022-03-17 01:15:11","154.36.x.x","tcp",1080,,"socks5",139646,"US","CALIFORNIA","SUNNYVALE",517311,,
"2022-03-17 01:15:11","106.54.x.x","tcp",1080,,"socks5",45090,"CN","BEIJING SHI","HAIDIAN",518210,,

Our 124 Report Types